last executing test programs: 29m34.502571255s ago: executing program 4 (id=5): socket$igmp6(0xa, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 29m27.837773871s ago: executing program 4 (id=15): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x0, 0xc8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r1, 0x0, 0x0, 0x3c) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0xffffffff, 0x100000000000, 0x6, 0x500, 0x7, 0x1000001000, 0x9}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002, 0x2000000000000003}, 0x0, 0x0) inotify_init() 29m21.473527586s ago: executing program 4 (id=19): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008~?n\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r7 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x20, &(0x7f0000000380)={0x0}, 0x1) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 29m19.92455258s ago: executing program 4 (id=20): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x5, 0x8, &(0x7f0000000080)="0000ffffff", &(0x7f0000000300)=""/8, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x2c000084) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 29m18.262212873s ago: executing program 4 (id=23): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="05", 0x1}, {0x0, 0x3f0}], 0x2, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x8, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) 29m17.333144914s ago: executing program 4 (id=25): socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc8, 0xfffe}, {0xc9, 0x3ff}]}}}, 0xc) 29m16.537957535s ago: executing program 2 (id=28): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback, 0xfffffeff}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x101}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0x519, 0x80, 0x0, 0x1bc}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 29m15.825733198s ago: executing program 2 (id=31): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) 29m14.692303226s ago: executing program 2 (id=34): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000063c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) memfd_create(0x0, 0x2) getpgid(0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x5}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) getdents64(r2, 0x0, 0xc0) 29m13.327032959s ago: executing program 2 (id=38): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x40008004) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00007df000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x1ea19000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000340)='pkcs7_test\x00', &(0x7f00000003c0)='^#\xa0,\x00') r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2], 0x50) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0xfffffffe, 0x4, 0x4, 0x5, 0x5, 0x0, 0x7, 0x54c6cff3, 0xfd, 0xfc, 0x1, 0x1, 0x400001, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x10000041, 0x8527, 0x9, 0x6, 0x2e, 0x0, 0x100, 0xa3}, 0x0) bind$x25(r6, &(0x7f0000000e00), 0x12) write(r6, 0x0, 0x0) 29m12.854964075s ago: executing program 2 (id=40): mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000400)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 29m12.223781953s ago: executing program 2 (id=41): newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r4, 0x407, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000700)}}], 0x2, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1028) setresuid(0x0, r0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f000001e7c0)=[{{&(0x7f00000190c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f000001a600)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f000001a8c0)=ANY=[@ANYBLOB="180000000000000000000000070000008606d40fc4890000"], 0x18}}], 0x2, 0x4040880) 29m1.949743058s ago: executing program 32 (id=25): socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc8, 0xfffe}, {0xc9, 0x3ff}]}}}, 0xc) 28m56.79613589s ago: executing program 33 (id=41): newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r4, 0x407, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000700)}}], 0x2, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1028) setresuid(0x0, r0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f000001e7c0)=[{{&(0x7f00000190c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f000001a600)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f000001a8c0)=ANY=[@ANYBLOB="180000000000000000000000070000008606d40fc4890000"], 0x18}}], 0x2, 0x4040880) 27m1.956815045s ago: executing program 1 (id=266): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x8004}, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x3}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 27m0.875165666s ago: executing program 1 (id=268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000400)=""/194, 0xc2) 26m59.443429648s ago: executing program 1 (id=269): unshare(0x26020480) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r0, 0x0) setreuid(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2a, 0x2, 0x0) set_mempolicy_home_node(&(0x7f000024f000/0x3000)=nil, 0x3000, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7) 26m58.235899862s ago: executing program 1 (id=270): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xff, 0x3}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 26m56.528049598s ago: executing program 1 (id=273): setfsgid(0xee00) r0 = syz_clone(0xb8086200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@sha1={0x1, "1ca081ef3513c98fda46645b61a99bfc3a87a614"}, 0x15, 0x2) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) io_uring_setup(0x3f1, &(0x7f0000000140)={0x0, 0x0, 0x3000}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) 26m52.378516606s ago: executing program 1 (id=280): pipe(&(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 26m36.621655877s ago: executing program 34 (id=280): pipe(&(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 18m56.957675403s ago: executing program 3 (id=1033): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) brk(0x1) 18m56.477588992s ago: executing program 3 (id=1034): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x8, 0x0) r5 = add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000003c0)=""/4096, 0x1000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRESOCT]) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) add_key(&(0x7f0000000340)='rxrpc\x00', 0x0, &(0x7f0000000300)='4', 0x1, 0xfffffffffffffffe) 18m54.783847832s ago: executing program 3 (id=1037): pipe(&(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100000000000000"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 18m52.485803724s ago: executing program 3 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0xf}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 18m50.801314836s ago: executing program 3 (id=1040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m50.395487345s ago: executing program 3 (id=1045): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x105) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r7 = syz_open_dev$video(&(0x7f0000000b40), 0x3, 0x180) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000000)={0x9, @win={{0x0, 0xfff, 0x1f02, 0x80}, 0x0, 0x100b24, 0x0, 0x1, 0x0, 0xff}}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x17, 0x2, 0x7, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x7d776419}) close(r1) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0xfffffffe, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 18m34.902672124s ago: executing program 35 (id=1045): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x105) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r7 = syz_open_dev$video(&(0x7f0000000b40), 0x3, 0x180) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000000)={0x9, @win={{0x0, 0xfff, 0x1f02, 0x80}, 0x0, 0x100b24, 0x0, 0x1, 0x0, 0xff}}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x17, 0x2, 0x7, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x7d776419}) close(r1) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0xfffffffe, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 4m52.89289905s ago: executing program 6 (id=2518): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x8}, 0x4e21, 0x3, 'sh\x00', 0x1, 0x4, 0xf}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) 4m51.781490297s ago: executing program 6 (id=2520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 4m51.632358343s ago: executing program 6 (id=2521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x9, 0x1, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}}, &(0x7f0000000440)={0x60, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 4m51.490950061s ago: executing program 6 (id=2522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x7) ftruncate(r3, 0xa) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$packet(0x11, 0x3, 0x300) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe99}, {&(0x7f0000000ac0)="ebe3a0e979b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ede0fb5123547cb51726b360fbb37b4fe035bbb09587304800257bd0aa79a28a564a030000000000000000000000000043708e54a7e181438ee1ba47", 0x50}, {&(0x7f00000009c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd27157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3d3ad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f1134a7028aba27f13e", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4c, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x3c, 0x64, 0x1, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x2, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffff00}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4m50.329625356s ago: executing program 6 (id=2526): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="160000000000000004"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00') getdents64(r8, &(0x7f0000000000)=""/162, 0xa2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r9, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x3, 0x0, 0xfffffffd, 0xc04}}, 0x120) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r9, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 4m49.924795869s ago: executing program 6 (id=2529): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x9, 0x4, 0x7ffc0005}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r3, 0xb}}, 0x48) 4m34.687174725s ago: executing program 36 (id=2529): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x9, 0x4, 0x7ffc0005}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r3, 0xb}}, 0x48) 11.567758091s ago: executing program 0 (id=3142): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003800800024000000000080001400000000040f503801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) read(r0, &(0x7f0000000240)=""/68, 0x44) setresgid(0x0, 0xffffffffffffffff, 0xee00) pselect6(0x40, &(0x7f0000000040)={0x10001, 0x3, 0x2, 0xfffffffffffff000, 0xa9, 0x4, 0xcea, 0x5}, &(0x7f00000000c0)={0x7, 0x7ff, 0x4, 0x7, 0x2, 0x800, 0xc, 0x25}, &(0x7f0000000180)={0x3, 0x6, 0x5, 0x6, 0x0, 0x40, 0xfffffffffffffffe, 0x7}, &(0x7f00000002c0), &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 10.97986531s ago: executing program 5 (id=3145): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe6, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x62) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) 10.632917786s ago: executing program 5 (id=3147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 10.521651885s ago: executing program 7 (id=3148): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0xd0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001440)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 10.504554983s ago: executing program 8 (id=3149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) mq_open(0x0, 0x8c2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x7b52e4aff0f1e2e3, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10.28265505s ago: executing program 7 (id=3150): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0x4, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_mempolicy(0x0, &(0x7f0000000080), 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xae) r3 = socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x803, 0x6) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) write(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) close(r3) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 10.280459701s ago: executing program 8 (id=3151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f00000005c0)) 9.979181937s ago: executing program 7 (id=3152): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000280)=0x90000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r3) r4 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) r8 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r11, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 9.977887187s ago: executing program 0 (id=3153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) setresuid(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000400)) dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f00009a9000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) 8.472579288s ago: executing program 5 (id=3154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) r3 = creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = epoll_create(0xf10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0x40002001}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000180)=r1) dup2(r4, r3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x5, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 8.472157377s ago: executing program 8 (id=3155): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbee2, 0x12, r0, 0x1000) 8.03981677s ago: executing program 7 (id=3156): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe6, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x62) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) 7.929608109s ago: executing program 5 (id=3157): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @empty}, @remote, @mcast1, 0x5, 0x8, 0x5, 0x500, 0x8, 0x800002}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.885755291s ago: executing program 8 (id=3158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xc}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.842157906s ago: executing program 7 (id=3159): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 7.79771917s ago: executing program 0 (id=3160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) mq_open(0x0, 0x8c2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x7b52e4aff0f1e2e3, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7.72962765s ago: executing program 5 (id=3161): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fstat(r4, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 7.629296235s ago: executing program 0 (id=3162): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0xef7, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @empty, 0xbff}, @ib={0x1b, 0xf, 0xffa, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) 6.462404323s ago: executing program 8 (id=3163): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000280)=0x90000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r3) r4 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) r9 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r9, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r11, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 6.129384699s ago: executing program 0 (id=3164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kexec_load(0x80000001, 0x0, 0x0, 0x160000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r4, &(0x7f0000000180), 0x400000000000077, 0x7600) 2.525310591s ago: executing program 7 (id=3165): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000280)=0x90000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r3) r4 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r8}, 0x18) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) r9 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r9, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r11) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r12, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 2.085894229s ago: executing program 5 (id=3166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) r3 = creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = epoll_create(0xf10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0x40002001}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000180)=r1) dup2(r4, r3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x5, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 59.026567ms ago: executing program 0 (id=3167): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x20, 0xb, 0x3, "1c63db"}, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x85, 0x4, 0xd4}, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 8 (id=3168): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbee2, 0x12, r0, 0x1000) kernel console output (not intermixed with test programs): unnel: ip6gretap0 xmit: Local address not yet configured! [ 1243.280135][T13235] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1246.218568][T13235] IPVS: starting estimator thread 0... [ 1246.311519][T13824] IPVS: using max 8 ests per chain, 19200 per kthread [ 1247.347895][T13235] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 1247.513294][T13235] usb 9-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1247.513370][T13235] usb 9-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 1247.513396][T13235] usb 9-1: config 0 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1247.513422][T13235] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1247.513458][T13235] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 1247.513479][T13235] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.765139][T13235] usb 9-1: config 0 descriptor?? [ 1247.766526][T13835] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1248.306034][T13844] binder: BINDER_SET_CONTEXT_MGR already set [ 1248.306049][T13844] binder: 13843:13844 ioctl 4018620d 200000004a80 returned -16 [ 1248.338566][T13235] corsair-psu 0003:1B1C:1C0C.0001: unknown main item tag 0x0 [ 1248.391281][T13235] corsair-psu 0003:1B1C:1C0C.0001: hidraw0: USB HID vf4.f6 Device [HID 1b1c:1c0c] on usb-dummy_hcd.8-1/input0 [ 1248.494206][T13235] corsair-psu 0003:1B1C:1C0C.0001: unable to initialize device (-71) [ 1248.515935][T13235] corsair-psu 0003:1B1C:1C0C.0001: probe with driver corsair-psu failed with error -71 [ 1248.539552][T13235] usb 9-1: USB disconnect, device number 2 [ 1249.010311][T12830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1249.027859][T12830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1249.036412][T12830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1249.038195][T12830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1249.061295][T12830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1249.061521][T13846] fido_id[13846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1250.395436][T13850] chnl_net:caif_netlink_parms(): no params data found [ 1251.228345][T12830] Bluetooth: hci1: command tx timeout [ 1253.048679][ T37] kauditd_printk_skb: 277 callbacks suppressed [ 1253.048697][ T37] audit: type=1800 audit(1761875156.682:2189): pid=13893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1646" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1253.453696][T12830] Bluetooth: hci1: command tx timeout [ 1253.458368][T13850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.468978][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.469222][T13850] bridge_slave_0: entered allmulticast mode [ 1253.471742][T13850] bridge_slave_0: entered promiscuous mode [ 1253.481425][T13850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.484245][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.484581][T13850] bridge_slave_1: entered allmulticast mode [ 1253.488531][T13850] bridge_slave_1: entered promiscuous mode [ 1255.158865][ T37] audit: type=1800 audit(1761875159.042:2190): pid=13917 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1651" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1255.583835][T12830] Bluetooth: hci1: command tx timeout [ 1258.188540][T12830] Bluetooth: hci1: command tx timeout [ 1258.664882][T13850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.669834][T13850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.322247][T13850] team0: Port device team_slave_0 added [ 1259.356555][T13850] team0: Port device team_slave_1 added [ 1260.322508][ C1] vkms_vblank_simulate: vblank timer overrun [ 1260.442833][ T37] audit: type=1800 audit(1761875164.272:2191): pid=13968 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1660" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1260.914300][ C1] vkms_vblank_simulate: vblank timer overrun [ 1260.929261][ T5801] IPVS: starting estimator thread 0... [ 1261.050747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.055996][T13969] IPVS: using max 7 ests per chain, 16800 per kthread [ 1261.087578][T13850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.087593][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.087618][T13850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.151253][T13850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.151268][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.151292][T13850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.366429][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.838095][ C1] vkms_vblank_simulate: vblank timer overrun [ 1262.121667][ C1] vkms_vblank_simulate: vblank timer overrun [ 1262.140581][ T37] audit: type=1800 audit(1761875165.732:2192): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1663" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1262.261073][T13850] hsr_slave_0: entered promiscuous mode [ 1262.262610][T13850] hsr_slave_1: entered promiscuous mode [ 1262.263610][T13850] debugfs: 'hsr0' already exists in 'hsr' [ 1262.263633][T13850] Cannot create hsr debugfs directory [ 1262.579163][ C1] vkms_vblank_simulate: vblank timer overrun [ 1263.429302][ C1] vkms_vblank_simulate: vblank timer overrun [ 1265.277687][T13850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.531315][ T37] audit: type=1800 audit(1761875169.432:2193): pid=14031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1675" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1266.546993][T13850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.408590][T11434] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1267.568637][T11434] usb 7-1: Using ep0 maxpacket: 16 [ 1267.573199][T11434] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.573311][T11434] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1267.573340][T11434] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1267.573361][T11434] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1267.573384][T11434] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1267.600282][T11434] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1267.600307][T11434] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1267.600325][T11434] usb 7-1: Manufacturer: syz [ 1267.615276][T11434] usb 7-1: config 0 descriptor?? [ 1267.824619][T13850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.938602][T11434] rc_core: IR keymap rc-hauppauge not found [ 1267.938622][T11434] Registered IR keymap rc-empty [ 1267.939315][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1267.958740][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1267.993983][T11434] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1267.997376][T11434] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input12 [ 1268.039403][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1268.063077][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1268.080835][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1268.098716][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1268.118729][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1268.140848][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1268.158747][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1268.178886][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1268.198747][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1268.220539][T11434] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1268.328089][T11434] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1268.328304][T11434] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1268.377966][T11434] usb 7-1: USB disconnect, device number 2 [ 1269.658794][ T37] audit: type=1800 audit(1761875173.432:2194): pid=14084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1686" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1270.886198][T13850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.418577][T11434] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1271.664040][T11434] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1271.664071][T11434] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.664091][T11434] usb 7-1: Product: syz [ 1271.664105][T11434] usb 7-1: Manufacturer: syz [ 1271.664118][T11434] usb 7-1: SerialNumber: syz [ 1271.714414][T11434] usb 7-1: config 0 descriptor?? [ 1271.727153][T11434] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1272.140970][T11434] gspca_sunplus: reg_r err -71 [ 1272.141152][T11434] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1272.178578][T11434] usb 7-1: USB disconnect, device number 3 [ 1272.568663][T13850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1272.690870][T13850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1272.847772][T13850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1272.913862][T13850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1275.074557][T13850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.181109][T13850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.198132][T11656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.198365][T11656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.234974][ T9436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.235861][ T9436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.418617][ T9399] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 1275.594165][ T9399] usb 7-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1275.594220][ T9399] usb 7-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 1275.594246][ T9399] usb 7-1: config 0 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1275.594274][ T9399] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1275.594306][ T9399] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 1275.594328][ T9399] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.614236][ T9399] usb 7-1: config 0 descriptor?? [ 1275.899841][T14143] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1277.722578][ T9399] corsair-psu 0003:1B1C:1C0C.0002: unknown main item tag 0x0 [ 1277.783850][ T9399] corsair-psu 0003:1B1C:1C0C.0002: hidraw0: USB HID vf4.f6 Device [HID 1b1c:1c0c] on usb-dummy_hcd.6-1/input0 [ 1277.844079][ T9399] corsair-psu 0003:1B1C:1C0C.0002: unable to initialize device (-71) [ 1278.140481][ T37] audit: type=1800 audit(1761875182.012:2195): pid=14167 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1699" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1278.367991][ T9399] corsair-psu 0003:1B1C:1C0C.0002: probe with driver corsair-psu failed with error -71 [ 1278.402745][ T9399] usb 7-1: USB disconnect, device number 4 [ 1279.071086][T14175] fido_id[14175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1279.689393][T13850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.758631][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1280.886194][T13850] veth0_vlan: entered promiscuous mode [ 1280.994921][T13850] veth1_vlan: entered promiscuous mode [ 1281.162637][T13850] veth0_macvtap: entered promiscuous mode [ 1281.332014][T13850] veth1_macvtap: entered promiscuous mode [ 1281.356665][T13850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.369440][T13850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.480962][T11656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.487704][T11656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.541304][T11656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.542576][T11656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.479822][ T1488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.479844][ T1488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.821306][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.821329][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.431138][ T37] audit: type=1800 audit(1761875188.542:2196): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1712" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1286.698606][ T982] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 1286.960679][ T982] usb 7-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1286.960727][ T982] usb 7-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 1286.960752][ T982] usb 7-1: config 0 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1286.960779][ T982] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1286.960812][ T982] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 1286.960834][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.832811][ T982] usb 7-1: config 0 descriptor?? [ 1287.834117][T14245] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1288.251284][ T982] corsair-psu 0003:1B1C:1C0C.0003: unknown main item tag 0x0 [ 1288.307963][ T982] corsair-psu 0003:1B1C:1C0C.0003: hidraw0: USB HID vf4.f6 Device [HID 1b1c:1c0c] on usb-dummy_hcd.6-1/input0 [ 1288.370767][ T982] corsair-psu 0003:1B1C:1C0C.0003: unable to initialize device (-71) [ 1288.394305][ T982] corsair-psu 0003:1B1C:1C0C.0003: probe with driver corsair-psu failed with error -71 [ 1288.863163][ T982] usb 7-1: USB disconnect, device number 5 [ 1289.225562][T14262] fido_id[14262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1289.538617][ T5889] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1289.906120][ T5889] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1289.906152][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.906172][ T5889] usb 1-1: Product: syz [ 1289.906186][ T5889] usb 1-1: Manufacturer: syz [ 1289.906200][ T5889] usb 1-1: SerialNumber: syz [ 1290.873411][ T5889] usb 1-1: config 0 descriptor?? [ 1291.536633][ T5889] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1291.802141][ T5889] gspca_sunplus: reg_r err -32 [ 1291.802200][ T5889] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 1291.831989][ T5889] usb 1-1: USB disconnect, device number 7 [ 1293.218503][T10274] Bluetooth: hci2: command 0x0406 tx timeout [ 1297.270915][T14331] fuse: Bad value for 'fd' [ 1299.484996][T14347] overlayfs: failed to clone upperpath [ 1301.573425][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.573486][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.152956][T14352] Bluetooth: hci5: command 0x0406 tx timeout [ 1304.152996][T14352] Bluetooth: hci6: command 0x0406 tx timeout [ 1304.357237][ T37] audit: type=1326 audit(1761875208.252:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14383 comm="syz.7.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1304.357560][ T37] audit: type=1326 audit(1761875208.252:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14383 comm="syz.7.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1304.358024][ T37] audit: type=1326 audit(1761875208.252:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14383 comm="syz.7.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1304.361926][ T37] audit: type=1326 audit(1761875208.262:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14383 comm="syz.7.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1304.362213][ T37] audit: type=1326 audit(1761875208.262:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14383 comm="syz.7.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1304.362598][ T37] audit: type=1326 audit(1761875208.262:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14383 comm="syz.7.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1304.362638][ T37] audit: type=1326 audit(1761875208.262:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14383 comm="syz.7.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1304.363087][ T37] audit: type=1326 audit(1761875208.262:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14383 comm="syz.7.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1304.363704][ T37] audit: type=1326 audit(1761875208.262:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14383 comm="syz.7.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1304.363743][ T37] audit: type=1326 audit(1761875208.262:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14383 comm="syz.7.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1312.962245][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 1316.398588][T13235] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1316.613206][T13235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.613262][T13235] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1316.613278][T13235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.646829][T13235] usb 1-1: config 0 descriptor?? [ 1316.655360][T13235] pwc: Askey VC010 type 2 USB webcam detected. [ 1317.053570][T13235] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1317.055218][T13235] pwc: recv_control_msg error -32 req 02 val 2700 [ 1317.258720][T13235] pwc: recv_control_msg error -71 req 04 val 1000 [ 1317.261409][T13235] pwc: recv_control_msg error -71 req 04 val 1300 [ 1317.263709][T13235] pwc: recv_control_msg error -71 req 04 val 1400 [ 1317.264067][T13235] pwc: recv_control_msg error -71 req 02 val 2000 [ 1317.264629][T13235] pwc: recv_control_msg error -71 req 02 val 2100 [ 1317.265025][T13235] pwc: recv_control_msg error -71 req 04 val 1500 [ 1317.265361][T13235] pwc: recv_control_msg error -71 req 02 val 2500 [ 1317.265688][T13235] pwc: recv_control_msg error -71 req 02 val 2400 [ 1317.266081][T13235] pwc: recv_control_msg error -71 req 02 val 2600 [ 1317.266412][T13235] pwc: recv_control_msg error -71 req 02 val 2900 [ 1317.266737][T13235] pwc: recv_control_msg error -71 req 02 val 2800 [ 1317.267226][T13235] pwc: recv_control_msg error -71 req 04 val 1100 [ 1317.267547][T13235] pwc: recv_control_msg error -71 req 04 val 1200 [ 1317.379629][T13235] pwc: Registered as video103. [ 1317.398007][T13235] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 1317.436037][T13235] usb 1-1: USB disconnect, device number 8 [ 1320.864908][ T5801] IPVS: starting estimator thread 0... [ 1320.958709][T14564] IPVS: using max 14 ests per chain, 33600 per kthread [ 1328.488649][ T982] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 1328.683202][ T982] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1328.683255][ T982] usb 1-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 1328.683282][ T982] usb 1-1: config 0 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1328.683308][ T982] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1328.683341][ T982] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 1328.683363][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.779545][ T982] usb 1-1: config 0 descriptor?? [ 1328.781045][T14637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1329.559965][ T982] usbhid 1-1:0.0: can't add hid device: -71 [ 1329.560425][ T982] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1329.630152][ T982] usb 1-1: USB disconnect, device number 9 [ 1329.702498][T14652] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1820'. [ 1331.314186][T14680] overlayfs: failed to clone upperpath [ 1332.258613][T14670] orangefs_mount: mount request failed with -4 [ 1339.060569][T14773] overlayfs: failed to clone upperpath [ 1342.861162][T12830] Bluetooth: hci6: unexpected event for opcode 0x200f [ 1344.477928][T14820] overlayfs: failed to clone upperpath [ 1346.878721][T12830] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1346.882592][T12830] Bluetooth: hci6: Injecting HCI hardware error event [ 1346.891888][ T5808] Bluetooth: hci6: hardware error 0x00 [ 1349.038538][ T5808] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1350.812683][T14905] fuse: Bad value for 'fd' [ 1351.445371][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1352.424342][T14931] fuse: Bad value for 'fd' [ 1356.119072][T14962] fuse: Bad value for 'fd' [ 1356.205715][T14967] netlink: 'syz.7.1938': attribute type 4 has an invalid length. [ 1361.604542][T15031] overlayfs: failed to clone upperpath [ 1361.685678][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.685775][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.363934][ T37] kauditd_printk_skb: 154 callbacks suppressed [ 1365.366088][ T37] audit: type=1326 audit(1761875269.242:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666af9efc9 code=0x7ffc0000 [ 1365.367613][ T37] audit: type=1326 audit(1761875269.242:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666af9efc9 code=0x7ffc0000 [ 1365.367861][ T37] audit: type=1326 audit(1761875269.252:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f666af9efc9 code=0x7ffc0000 [ 1365.368107][ T37] audit: type=1326 audit(1761875269.252:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666af9efc9 code=0x7ffc0000 [ 1365.368342][ T37] audit: type=1326 audit(1761875269.252:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666af9efc9 code=0x7ffc0000 [ 1365.375765][ T37] audit: type=1326 audit(1761875269.252:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f666af9efc9 code=0x7ffc0000 [ 1365.376894][ T37] audit: type=1326 audit(1761875269.252:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666af9efc9 code=0x7ffc0000 [ 1365.376940][ T37] audit: type=1326 audit(1761875269.252:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15055 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666af9efc9 code=0x7ffc0000 [ 1375.239642][T12830] Bluetooth: hci1: command 0x0406 tx timeout [ 1376.802855][T15133] netlink: 512 bytes leftover after parsing attributes in process `syz.7.1989'. [ 1377.280299][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 1378.770150][ T37] audit: type=1800 audit(1761875282.612:2369): pid=15150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1990" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1379.868616][ T5889] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1380.032209][ T5889] usb 1-1: device descriptor read/64, error -71 [ 1380.268554][ T5889] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1380.412683][ T5889] usb 1-1: device descriptor read/64, error -71 [ 1380.552108][ T5889] usb usb1-port1: attempt power cycle [ 1380.888539][ T5889] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1380.912105][ T5889] usb 1-1: device descriptor read/8, error -71 [ 1381.148513][ T5889] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1381.224149][ T5889] usb 1-1: device descriptor read/8, error -71 [ 1381.333881][ T5889] usb usb1-port1: unable to enumerate USB device [ 1384.300966][ T31] IPVS: starting estimator thread 0... [ 1384.418656][T15201] IPVS: using max 7 ests per chain, 16800 per kthread [ 1386.136310][ T37] audit: type=1326 audit(1761875290.032:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15218 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1386.136362][ T37] audit: type=1326 audit(1761875290.032:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15218 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1386.136403][ T37] audit: type=1326 audit(1761875290.032:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15218 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1386.136444][ T37] audit: type=1326 audit(1761875290.032:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15218 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1386.136483][ T37] audit: type=1326 audit(1761875290.032:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15218 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1386.136521][ T37] audit: type=1326 audit(1761875290.032:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15218 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1386.136563][ T37] audit: type=1326 audit(1761875290.032:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15218 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1386.136603][ T37] audit: type=1326 audit(1761875290.032:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15218 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1386.136642][ T37] audit: type=1326 audit(1761875290.032:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15218 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1386.136680][ T37] audit: type=1326 audit(1761875290.032:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15218 comm="syz.7.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1387.124199][T15229] bridge0: port 3(team0) entered blocking state [ 1387.125519][T15229] bridge0: port 3(team0) entered disabled state [ 1387.127726][T15229] team0: entered allmulticast mode [ 1387.127768][T15229] team_slave_0: entered allmulticast mode [ 1387.127877][T15229] team_slave_1: entered allmulticast mode [ 1387.169796][T15229] team0: entered promiscuous mode [ 1387.169844][T15229] team_slave_0: entered promiscuous mode [ 1387.172183][T15229] team_slave_1: entered promiscuous mode [ 1387.199904][T15229] bridge0: port 3(team0) entered blocking state [ 1387.201031][T15229] bridge0: port 3(team0) entered forwarding state [ 1391.034951][T15259] fuse: Bad value for 'fd' [ 1393.271841][ T37] kauditd_printk_skb: 136 callbacks suppressed [ 1393.271857][ T37] audit: type=1326 audit(1761875297.172:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15278 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1393.271901][ T37] audit: type=1326 audit(1761875297.172:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15278 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1393.275045][ T37] audit: type=1326 audit(1761875297.172:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15278 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1393.275092][ T37] audit: type=1326 audit(1761875297.172:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15278 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1393.275462][ T37] audit: type=1326 audit(1761875297.172:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15278 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1393.275732][ T37] audit: type=1326 audit(1761875297.172:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15278 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1393.276029][ T37] audit: type=1326 audit(1761875297.172:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15278 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1393.276333][ T37] audit: type=1326 audit(1761875297.172:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15278 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1393.276720][ T37] audit: type=1326 audit(1761875297.172:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15278 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1393.277048][ T37] audit: type=1326 audit(1761875297.172:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15278 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1397.041899][T15302] fuse: Bad value for 'fd' [ 1401.284885][T15337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2050'. [ 1401.683287][T15338] No control pipe specified [ 1402.645848][T15337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.647442][T15337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.068362][T15337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.082242][T15337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1405.618304][ T3584] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.635406][ T3584] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.660167][ T3584] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.660221][ T3584] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.954571][T15361] overlayfs: failed to clone upperpath [ 1409.748715][ T2920] bridge_slave_1: left allmulticast mode [ 1409.748742][ T2920] bridge_slave_1: left promiscuous mode [ 1409.749009][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.870762][ T2920] bridge_slave_0: left allmulticast mode [ 1409.870790][ T2920] bridge_slave_0: left promiscuous mode [ 1409.871060][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.099224][T15400] overlayfs: failed to clone upperpath [ 1410.712225][T15412] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1413.076509][T15432] overlayfs: failed to clone upperpath [ 1417.418611][ T982] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1417.487278][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.538994][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.594350][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1417.594383][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1417.594405][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1417.594425][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1417.596926][ T982] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1417.596953][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.596972][ T982] usb 1-1: Product: syz [ 1417.596985][ T982] usb 1-1: Manufacturer: syz [ 1417.596999][ T982] usb 1-1: SerialNumber: syz [ 1417.671612][ T2920] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1417.687860][ T982] usb 1-1: config 0 descriptor?? [ 1417.829989][ T2920] bond0 (unregistering): Released all slaves [ 1417.930193][ T982] adutux 1-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1417.947596][ T982] usb 1-1: USB disconnect, device number 14 [ 1418.330247][ T2920] tipc: Disabling bearer [ 1418.340852][ T2920] tipc: Left network mode [ 1420.267288][T15487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.288891][T15480] overlayfs: failed to clone upperpath [ 1420.359402][T15492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.524140][T15487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.537369][T15487] netlink: 892 bytes leftover after parsing attributes in process `syz.0.2098'. [ 1420.657633][T15496] netlink: 'syz.0.2098': attribute type 10 has an invalid length. [ 1420.739619][T15496] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1422.104133][ T2920] hsr_slave_0: left promiscuous mode [ 1422.118539][ T2920] hsr_slave_1: left promiscuous mode [ 1422.119634][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.119659][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.354843][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.354872][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.517113][ T2920] veth1_macvtap: left promiscuous mode [ 1422.517222][ T2920] veth0_macvtap: left promiscuous mode [ 1422.517484][ T2920] veth1_vlan: left promiscuous mode [ 1422.517664][ T2920] veth0_vlan: left promiscuous mode [ 1423.606119][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.606190][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.076186][T15531] overlayfs: failed to clone upperpath [ 1425.049765][ T37] kauditd_printk_skb: 179 callbacks suppressed [ 1425.049810][ T37] audit: type=1326 audit(1761875328.752:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.7.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1425.050321][ T37] audit: type=1326 audit(1761875328.752:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.7.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1425.050609][ T37] audit: type=1326 audit(1761875328.762:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.7.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1425.050938][ T37] audit: type=1326 audit(1761875328.762:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.7.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1425.051386][ T37] audit: type=1326 audit(1761875328.772:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.7.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1425.051707][ T37] audit: type=1326 audit(1761875328.772:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.7.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff824f6d810 code=0x7ffc0000 [ 1425.052054][ T37] audit: type=1326 audit(1761875328.782:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.7.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1425.052483][ T37] audit: type=1326 audit(1761875328.782:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.7.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1427.285195][T11533] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1427.552436][T11533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1427.552470][T11533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1427.552493][T11533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1427.552517][T11533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1427.555516][T11533] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1427.555544][T11533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.555562][T11533] usb 1-1: Product: syz [ 1427.555576][T11533] usb 1-1: Manufacturer: syz [ 1427.555583][T11533] usb 1-1: SerialNumber: syz [ 1427.668650][T11533] usb 1-1: config 0 descriptor?? [ 1427.884990][T11533] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1428.345274][T10431] usb 1-1: USB disconnect, device number 15 [ 1428.862402][T15581] overlayfs: failed to clone upperpath [ 1439.399904][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 1440.304982][T15677] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1440.666008][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 1441.818629][T10431] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1442.009337][T10431] usb 1-1: Using ep0 maxpacket: 16 [ 1442.040365][T10431] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.040390][T10431] usb 1-1: config 0 has no interfaces? [ 1442.069211][T10431] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1442.069239][T10431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.069258][T10431] usb 1-1: Product: syz [ 1442.069271][T10431] usb 1-1: Manufacturer: syz [ 1442.069284][T10431] usb 1-1: SerialNumber: syz [ 1442.111869][T10431] usb 1-1: config 0 descriptor?? [ 1444.712212][T11533] usb 1-1: USB disconnect, device number 16 [ 1448.811750][T11533] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1449.788606][ T37] audit: type=1326 audit(1761875353.502:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15749 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1449.788713][ T37] audit: type=1326 audit(1761875353.502:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15749 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1449.788807][ T37] audit: type=1326 audit(1761875353.502:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15749 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1449.788877][ T37] audit: type=1326 audit(1761875353.502:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15749 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1449.788970][ T37] audit: type=1326 audit(1761875353.502:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15749 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1449.789033][ T37] audit: type=1326 audit(1761875353.502:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15749 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1449.789125][ T37] audit: type=1326 audit(1761875353.502:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15749 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1449.789189][ T37] audit: type=1326 audit(1761875353.502:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15749 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1449.789281][ T37] audit: type=1326 audit(1761875353.502:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15749 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1449.789344][ T37] audit: type=1326 audit(1761875353.502:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15749 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1450.635231][T11533] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1450.635261][T11533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.635281][T11533] usb 1-1: Product: syz [ 1450.635295][T11533] usb 1-1: Manufacturer: syz [ 1450.635309][T11533] usb 1-1: SerialNumber: syz [ 1450.699012][T11533] usb 1-1: config 0 descriptor?? [ 1450.926664][T11533] usb 1-1: f81604_read: reg: 105 failed: -EPIPE [ 1450.926692][T11533] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 1450.926732][T11533] f81604 1-1:0.0: probe with driver f81604 failed with error -32 [ 1451.668105][T15772] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1452.581311][ T5801] usb 1-1: USB disconnect, device number 17 [ 1458.685974][T15815] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1459.600992][T15811] 9pnet_fd: Insufficient options for proto=fd [ 1459.660020][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 1460.368110][T15823] overlayfs: failed to clone upperpath [ 1462.092220][T10431] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1462.274891][T10431] usb 1-1: Using ep0 maxpacket: 16 [ 1462.278142][T10431] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.278197][T10431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1462.278222][T10431] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1462.312143][T10431] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1462.312171][T10431] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1462.312190][T10431] usb 1-1: Manufacturer: syz [ 1462.327646][T10431] usb 1-1: config 0 descriptor?? [ 1463.596319][ T2920] IPVS: stop unused estimator thread 0... [ 1465.383541][T10431] usb 1-1: USB disconnect, device number 18 [ 1466.162793][T15872] overlayfs: failed to clone upperpath [ 1470.223394][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2215'. [ 1471.262542][T15909] bridge0: port 3(team0) entered blocking state [ 1471.265094][T15909] bridge0: port 3(team0) entered disabled state [ 1471.267342][T15909] team0: entered allmulticast mode [ 1471.267384][T15909] team_slave_0: entered allmulticast mode [ 1471.267525][T15909] team_slave_1: entered allmulticast mode [ 1471.300724][T15909] team0: entered promiscuous mode [ 1471.300768][T15909] team_slave_0: entered promiscuous mode [ 1471.302992][T15909] team_slave_1: entered promiscuous mode [ 1471.318676][T15909] bridge0: port 3(team0) entered blocking state [ 1471.319747][T15909] bridge0: port 3(team0) entered forwarding state [ 1472.056414][T15914] fuse: Bad value for 'group_id' [ 1472.056434][T15914] fuse: Bad value for 'group_id' [ 1472.127832][T15917] overlayfs: failed to clone upperpath [ 1475.272122][T15942] bridge0: port 3(team0) entered blocking state [ 1475.273504][T15942] bridge0: port 3(team0) entered disabled state [ 1475.278987][T15942] team0: entered allmulticast mode [ 1475.279043][T15942] team_slave_0: entered allmulticast mode [ 1475.279160][T15942] team_slave_1: entered allmulticast mode [ 1475.311024][T15942] team0: entered promiscuous mode [ 1475.311094][T15942] team_slave_0: entered promiscuous mode [ 1475.313257][T15942] team_slave_1: entered promiscuous mode [ 1475.957940][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2230'. [ 1476.192019][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2230'. [ 1477.554582][T15958] netlink: 341 bytes leftover after parsing attributes in process `syz.5.2233'. [ 1480.277537][T15987] batman_adv: batadv0: Adding interface: gretap1 [ 1480.277552][T15987] batman_adv: batadv0: Interface activated: gretap1 [ 1483.426469][T16025] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1484.572767][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.572845][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.435181][T16058] netlink: zone id is out of range [ 1487.435201][T16058] netlink: set zone limit has 8 unknown bytes [ 1488.217305][T16071] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1489.844826][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1490.927285][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2274'. [ 1490.980055][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2274'. [ 1505.831728][T16224] 9pnet_fd: Insufficient options for proto=fd [ 1507.304093][T16241] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2324'. [ 1507.397278][T12830] Bluetooth: hci2: unexpected event for opcode 0x200f [ 1511.459124][T12830] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1511.459406][T12830] Bluetooth: hci2: Injecting HCI hardware error event [ 1511.481854][ T5808] Bluetooth: hci2: hardware error 0x00 [ 1513.601203][T12830] Bluetooth: hci5: unexpected event for opcode 0x200f [ 1515.376638][ T5808] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1515.684412][T16306] orangefs_mount: mount request failed with -4 [ 1515.790571][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1515.790588][ T37] audit: type=1326 audit(2000000055.889:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16305 comm="syz.7.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1515.790634][ T37] audit: type=1326 audit(2000000055.889:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16305 comm="syz.7.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1515.790674][ T37] audit: type=1326 audit(2000000055.889:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16305 comm="syz.7.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1515.790714][ T37] audit: type=1326 audit(2000000055.889:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16305 comm="syz.7.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1515.790755][ T37] audit: type=1326 audit(2000000055.889:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16305 comm="syz.7.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1515.790795][ T37] audit: type=1326 audit(2000000055.889:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16305 comm="syz.7.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1515.790834][ T37] audit: type=1326 audit(2000000055.889:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16305 comm="syz.7.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1515.989820][ T37] audit: type=1326 audit(2000000056.089:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16305 comm="syz.7.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1515.991015][ T37] audit: type=1326 audit(2000000056.089:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16305 comm="syz.7.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1515.992749][ T37] audit: type=1326 audit(2000000056.089:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16305 comm="syz.7.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1518.018642][ T5808] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1518.018926][ T5808] Bluetooth: hci5: Injecting HCI hardware error event [ 1518.022671][T12830] Bluetooth: hci5: hardware error 0x00 [ 1520.419136][T12830] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1523.691245][T12830] Bluetooth: hci1: unexpected event for opcode 0x200f [ 1527.779113][T12830] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1527.779441][T12830] Bluetooth: hci1: Injecting HCI hardware error event [ 1527.783950][ T5808] Bluetooth: hci1: hardware error 0x00 [ 1529.320202][ T37] kauditd_printk_skb: 147 callbacks suppressed [ 1529.320219][ T37] audit: type=1326 audit(2000000069.409:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16417 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1529.320265][ T37] audit: type=1326 audit(2000000069.409:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16417 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1529.320305][ T37] audit: type=1326 audit(2000000069.409:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16417 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1529.320345][ T37] audit: type=1326 audit(2000000069.409:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16417 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1529.320384][ T37] audit: type=1326 audit(2000000069.409:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16417 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1529.320424][ T37] audit: type=1326 audit(2000000069.409:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16417 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1529.320463][ T37] audit: type=1326 audit(2000000069.409:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16417 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1529.320504][ T37] audit: type=1326 audit(2000000069.409:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16417 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1529.320544][ T37] audit: type=1326 audit(2000000069.409:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16417 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1529.320583][ T37] audit: type=1326 audit(2000000069.409:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16417 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1529.999625][ T5808] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1533.090628][ T982] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1533.723201][ T982] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.723226][ T982] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1533.723261][ T982] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1533.723283][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.836907][ T982] usb 1-1: config 0 descriptor?? [ 1536.301990][T10431] usb 1-1: USB disconnect, device number 19 [ 1539.043118][T16494] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2402'. [ 1539.043234][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2402'. [ 1539.043250][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2402'. [ 1539.465406][ T37] kauditd_printk_skb: 137 callbacks suppressed [ 1539.465423][ T37] audit: type=1800 audit(2000000079.559:3028): pid=16495 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2401" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1540.787262][ T37] audit: type=1326 audit(2000000080.879:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16509 comm="syz.8.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1540.787575][ T37] audit: type=1326 audit(2000000080.879:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16509 comm="syz.8.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1540.788025][ T37] audit: type=1326 audit(2000000080.879:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16509 comm="syz.8.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1540.788294][ T37] audit: type=1326 audit(2000000080.879:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16509 comm="syz.8.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1540.791664][ T37] audit: type=1326 audit(2000000080.889:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16509 comm="syz.8.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1540.791917][ T37] audit: type=1326 audit(2000000080.889:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16509 comm="syz.8.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1540.792200][ T37] audit: type=1326 audit(2000000080.889:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16509 comm="syz.8.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1540.792489][ T37] audit: type=1326 audit(2000000080.889:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16509 comm="syz.8.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1540.792775][ T37] audit: type=1326 audit(2000000080.889:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16509 comm="syz.8.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1546.109240][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.109310][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.609090][T10431] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1550.738635][T10431] usb 1-1: device descriptor read/64, error -71 [ 1550.757444][ T37] kauditd_printk_skb: 188 callbacks suppressed [ 1550.757461][ T37] audit: type=1326 audit(2000000090.849:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16608 comm="syz.7.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1550.757505][ T37] audit: type=1326 audit(2000000090.849:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16608 comm="syz.7.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1550.763512][ T37] audit: type=1326 audit(2000000090.859:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16608 comm="syz.7.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1550.763564][ T37] audit: type=1326 audit(2000000090.859:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16608 comm="syz.7.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1550.763606][ T37] audit: type=1326 audit(2000000090.859:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16608 comm="syz.7.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1550.763653][ T37] audit: type=1326 audit(2000000090.859:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16608 comm="syz.7.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1550.763694][ T37] audit: type=1326 audit(2000000090.859:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16608 comm="syz.7.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1550.763734][ T37] audit: type=1326 audit(2000000090.859:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16608 comm="syz.7.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1550.763774][ T37] audit: type=1326 audit(2000000090.859:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16608 comm="syz.7.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1550.763815][ T37] audit: type=1326 audit(2000000090.859:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16608 comm="syz.7.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1550.988675][T10431] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1552.254829][T10431] usb 1-1: device descriptor read/64, error -71 [ 1552.362408][T10431] usb usb1-port1: attempt power cycle [ 1557.027427][T16658] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2453'. [ 1565.271816][ T37] kauditd_printk_skb: 128 callbacks suppressed [ 1565.271835][ T37] audit: type=1326 audit(2000000105.369:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16736 comm="syz.7.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1565.272320][ T37] audit: type=1326 audit(2000000105.369:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16736 comm="syz.7.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1571.414530][T16811] fuse: Bad value for 'fd' [ 1572.863851][ T37] audit: type=1326 audit(2000000112.959:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16827 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1572.863997][ T37] audit: type=1326 audit(2000000112.959:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16827 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1572.878684][T10431] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1572.913116][ T37] audit: type=1326 audit(2000000113.009:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16827 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1572.913171][ T37] audit: type=1326 audit(2000000113.009:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16827 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1572.913210][ T37] audit: type=1326 audit(2000000113.009:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16827 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1572.913250][ T37] audit: type=1326 audit(2000000113.009:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16827 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1572.913292][ T37] audit: type=1326 audit(2000000113.009:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16827 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1572.913330][ T37] audit: type=1326 audit(2000000113.009:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16827 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1572.913370][ T37] audit: type=1326 audit(2000000113.009:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16827 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1572.913409][ T37] audit: type=1326 audit(2000000113.009:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16827 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1572.940582][T16830] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2516'. [ 1573.078517][T10431] usb 1-1: Using ep0 maxpacket: 32 [ 1573.080120][T10431] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1573.080134][T10431] usb 1-1: config 0 has no interface number 0 [ 1573.080161][T10431] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1573.157746][T10431] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1573.157775][T10431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.157786][T10431] usb 1-1: Product: syz [ 1573.157793][T10431] usb 1-1: Manufacturer: syz [ 1573.157800][T10431] usb 1-1: SerialNumber: syz [ 1573.192001][T10431] usb 1-1: config 0 descriptor?? [ 1573.196352][T10431] smsc75xx v1.0.0 [ 1573.842618][T10431] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1573.842648][T10431] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1573.846021][T10431] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1573.846050][T10431] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1573.846068][T10431] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1573.846090][T10431] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1573.846868][T10431] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1576.441823][ T5801] usb 1-1: USB disconnect, device number 23 [ 1577.278946][T16869] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2527'. [ 1578.833269][ T37] kauditd_printk_skb: 168 callbacks suppressed [ 1578.833286][ T37] audit: type=1326 audit(2000000118.929:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16867 comm="syz.6.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29efadefc9 code=0x7ffc0000 [ 1578.833330][ T37] audit: type=1326 audit(2000000118.929:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16867 comm="syz.6.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29efadefc9 code=0x7ffc0000 [ 1578.833367][ T37] audit: type=1326 audit(2000000118.929:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16867 comm="syz.6.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29efadefc9 code=0x7ffc0000 [ 1578.833406][ T37] audit: type=1326 audit(2000000118.929:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16867 comm="syz.6.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29efadefc9 code=0x7ffc0000 [ 1578.833443][ T37] audit: type=1326 audit(2000000118.929:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16867 comm="syz.6.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29efadefc9 code=0x7ffc0000 [ 1578.833484][ T37] audit: type=1326 audit(2000000118.929:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16867 comm="syz.6.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29efadefc9 code=0x7ffc0000 [ 1578.833522][ T37] audit: type=1326 audit(2000000118.929:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16867 comm="syz.6.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29efadefc9 code=0x7ffc0000 [ 1578.833561][ T37] audit: type=1326 audit(2000000118.929:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16867 comm="syz.6.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29efadefc9 code=0x7ffc0000 [ 1578.834285][ T37] audit: type=1326 audit(2000000118.929:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16867 comm="syz.6.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29efadefc9 code=0x7ffc0000 [ 1578.836048][ T37] audit: type=1326 audit(2000000118.929:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16867 comm="syz.6.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29efadefc9 code=0x7ffc0000 [ 1580.910022][T16907] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2541'. [ 1592.008575][T11533] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1592.148718][T11533] usb 1-1: device descriptor read/64, error -71 [ 1593.312045][T16982] orangefs_mount: mount request failed with -4 [ 1593.378664][T11533] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1593.508790][T11533] usb 1-1: device descriptor read/64, error -71 [ 1593.587274][T12830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1593.612799][T12830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1593.614210][T12830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1593.615427][T12830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1593.616718][T12830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1593.621102][T11533] usb usb1-port1: attempt power cycle [ 1593.987388][T11533] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1594.328353][T11533] usb 1-1: device not accepting address 26, error -71 [ 1595.406324][T16992] chnl_net:caif_netlink_parms(): no params data found [ 1595.678635][T12830] Bluetooth: hci3: command tx timeout [ 1598.108645][T12830] Bluetooth: hci3: command tx timeout [ 1598.199006][T16992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.199141][T16992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.199381][T16992] bridge_slave_0: entered allmulticast mode [ 1598.202141][T16992] bridge_slave_0: entered promiscuous mode [ 1598.205837][T16992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.205970][T16992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.206160][T16992] bridge_slave_1: entered allmulticast mode [ 1598.362298][T16992] bridge_slave_1: entered promiscuous mode [ 1598.716174][T16992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1599.054489][T17033] orangefs_mount: mount request failed with -4 [ 1599.096166][T16992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.168833][ T5808] Bluetooth: hci3: command tx timeout [ 1602.409329][ T5808] Bluetooth: hci3: command tx timeout [ 1603.450967][T16992] team0: Port device team_slave_0 added [ 1603.459125][T16992] team0: Port device team_slave_1 added [ 1604.133786][T17076] orangefs_mount: mount request failed with -4 [ 1606.172728][T16992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1606.172808][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.172880][T16992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1607.444930][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.445001][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.630563][T11656] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.784680][T16992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.784698][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.784718][T16992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.861681][T12689] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 1608.861718][T12689] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 1608.861743][T12689] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 1608.861767][T12689] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 1608.861792][T12689] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 1608.861817][T12689] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 1608.861841][T12689] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 1608.861866][T12689] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 1608.861890][T12689] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 1608.861915][T12689] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 1609.954338][T12689] hid-generic 0003:0003:0000.0004: hidraw0: USB HID vffffff.fd Device [syz1] on syz0 [ 1610.914798][T17135] fido_id[17135]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1611.310880][T17143] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2613'. [ 1612.967963][T11656] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.989737][T16992] hsr_slave_0: entered promiscuous mode [ 1613.991066][T16992] hsr_slave_1: entered promiscuous mode [ 1613.992010][T16992] debugfs: 'hsr0' already exists in 'hsr' [ 1613.992031][T16992] Cannot create hsr debugfs directory [ 1615.852491][T17172] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1616.608463][T11656] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.297484][T11656] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.570844][T17215] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1623.363669][T12689] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1623.614627][T12689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1623.614657][T12689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1623.614680][T12689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1623.614704][T12689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1623.634229][T12689] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1623.634257][T12689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.634280][T12689] usb 1-1: Product: syz [ 1623.634294][T12689] usb 1-1: Manufacturer: syz [ 1623.634308][T12689] usb 1-1: SerialNumber: syz [ 1623.732017][T12689] usb 1-1: config 0 descriptor?? [ 1623.962463][T12689] adutux 1-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1624.001436][T12689] usb 1-1: USB disconnect, device number 28 [ 1626.227836][T17248] Device name not specified. [ 1626.227836][T17248] [ 1627.918784][T13235] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1628.061930][T11656] bridge_slave_1: left allmulticast mode [ 1628.061959][T11656] bridge_slave_1: left promiscuous mode [ 1628.062227][T11656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.125976][T13235] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1628.126007][T13235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.126027][T13235] usb 1-1: Product: syz [ 1628.126041][T13235] usb 1-1: Manufacturer: syz [ 1628.126054][T13235] usb 1-1: SerialNumber: syz [ 1628.162017][T13235] usb 1-1: config 0 descriptor?? [ 1628.235764][T11656] bridge_slave_0: left allmulticast mode [ 1628.235783][T11656] bridge_slave_0: left promiscuous mode [ 1628.237390][T11656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.373250][T13235] usb 1-1: f81604_read: reg: 105 failed: -EPIPE [ 1628.373280][T13235] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 1628.373325][T13235] f81604 1-1:0.0: probe with driver f81604 failed with error -32 [ 1628.501266][T11656] batman_adv: batadv0: Interface deactivated: gretap1 [ 1629.787321][T11533] usb 1-1: USB disconnect, device number 29 [ 1630.114726][T17284] Device name not specified. [ 1630.114726][T17284] [ 1632.492150][T11656] batman_adv: batadv0: Removing interface: gretap1 [ 1634.488547][T16994] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1634.848533][T16994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1634.848563][T16994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1634.848584][T16994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1634.848607][T16994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1634.853690][T16994] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1634.853718][T16994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.853738][T16994] usb 1-1: Product: syz [ 1634.853752][T16994] usb 1-1: Manufacturer: syz [ 1634.853771][T16994] usb 1-1: SerialNumber: syz [ 1634.882838][T16994] usb 1-1: config 0 descriptor?? [ 1635.248576][T16994] adutux 1-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1635.290981][T16994] usb 1-1: USB disconnect, device number 30 [ 1638.473894][T16994] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1638.654466][T16994] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1638.654497][T16994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.654515][T16994] usb 1-1: Product: syz [ 1638.654530][T16994] usb 1-1: Manufacturer: syz [ 1638.654544][T16994] usb 1-1: SerialNumber: syz [ 1638.895989][T16994] usb 1-1: config 0 descriptor?? [ 1639.193858][T16994] usb 1-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1639.193875][T16994] f81604 1-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1639.193899][T16994] f81604 1-1:0.0: probe with driver f81604 failed with error -121 [ 1639.600394][T11656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.687516][T11656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.341712][T11656] bond0 (unregistering): Released all slaves [ 1641.359952][T16992] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1642.021005][T13235] usb 1-1: USB disconnect, device number 31 [ 1642.047488][T16992] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1642.221352][T16992] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1642.300426][T17401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1646.929780][T16992] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1649.228685][T11656] hsr_slave_0: left promiscuous mode [ 1649.269142][T11656] hsr_slave_1: left promiscuous mode [ 1649.270136][T11656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.270159][T11656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.314140][T11656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.314167][T11656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.400458][T11656] veth1_macvtap: left promiscuous mode [ 1649.400568][T11656] veth0_macvtap: left promiscuous mode [ 1649.400758][T11656] veth1_vlan: left promiscuous mode [ 1649.400935][T11656] veth0_vlan: left promiscuous mode [ 1653.170213][T17503] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1653.956142][T12830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1653.959854][T12830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1653.967905][T12830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1653.980144][T12830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1653.980891][T12830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1654.268585][T11532] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1654.828727][T11532] usb 1-1: Using ep0 maxpacket: 32 [ 1654.831064][T11532] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1654.831133][T11532] usb 1-1: config 0 has no interface number 0 [ 1654.831202][T11532] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1654.833952][T11532] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1654.833978][T11532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.833996][T11532] usb 1-1: Product: syz [ 1654.834008][T11532] usb 1-1: Manufacturer: syz [ 1654.834021][T11532] usb 1-1: SerialNumber: syz [ 1654.883292][T11532] usb 1-1: config 0 descriptor?? [ 1654.891681][T11532] smsc75xx v1.0.0 [ 1655.770549][T11656] team0 (unregistering): Port device team_slave_1 removed [ 1655.928711][T11532] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 1655.928743][T11532] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1656.098592][ T5808] Bluetooth: hci4: command tx timeout [ 1656.145885][T11532] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1656.145913][T11532] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1656.145931][T11532] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1656.145952][T11532] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1656.146253][T11532] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1656.192027][T11532] usb 1-1: USB disconnect, device number 32 [ 1656.249515][T11656] team0 (unregistering): Port device team_slave_0 removed [ 1657.008642][T11532] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1657.839355][T11532] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1657.839384][T11532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.839404][T11532] usb 1-1: Product: syz [ 1657.839416][T11532] usb 1-1: Manufacturer: syz [ 1657.839429][T11532] usb 1-1: SerialNumber: syz [ 1657.851128][T11532] usb 1-1: config 0 descriptor?? [ 1658.061049][T11532] usb 1-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1658.061077][T11532] f81604 1-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1658.061116][T11532] f81604 1-1:0.0: probe with driver f81604 failed with error -121 [ 1658.192947][ T5808] Bluetooth: hci4: command tx timeout [ 1660.247844][ T5808] Bluetooth: hci4: command tx timeout [ 1660.361466][T11532] usb 1-1: USB disconnect, device number 33 [ 1662.397068][ T5808] Bluetooth: hci4: command tx timeout [ 1663.469095][ T982] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1663.638359][ T982] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.638553][ T982] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1663.638576][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.692603][ T982] usb 1-1: config 0 descriptor?? [ 1663.712433][ T982] pwc: Askey VC010 type 2 USB webcam detected. [ 1665.233267][ T982] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1665.234200][ T982] pwc: recv_control_msg error -32 req 02 val 2700 [ 1665.436836][ T982] pwc: recv_control_msg error -32 req 04 val 1000 [ 1665.437230][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1665.437384][ T982] pwc: recv_control_msg error -32 req 04 val 1300 [ 1665.437754][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1665.437893][ T982] pwc: recv_control_msg error -32 req 04 val 1400 [ 1665.438264][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1665.438406][ T982] pwc: recv_control_msg error -32 req 02 val 2000 [ 1665.438953][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1665.439101][ T982] pwc: recv_control_msg error -32 req 02 val 2100 [ 1665.439463][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1665.439599][ T982] pwc: recv_control_msg error -32 req 04 val 1500 [ 1665.439960][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1665.446035][ T982] pwc: recv_control_msg error -32 req 02 val 2500 [ 1665.446398][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1665.467147][ T982] pwc: recv_control_msg error -32 req 02 val 2400 [ 1665.467522][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1665.484858][ T982] pwc: recv_control_msg error -32 req 02 val 2600 [ 1665.517926][ T982] pwc: recv_control_msg error -71 req 02 val 2900 [ 1665.548712][ T982] pwc: recv_control_msg error -71 req 02 val 2800 [ 1665.576499][ T982] pwc: recv_control_msg error -71 req 04 val 1100 [ 1665.578714][ T982] pwc: recv_control_msg error -71 req 04 val 1200 [ 1665.618945][ T982] pwc: Registered as video103. [ 1665.622501][ T982] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 1665.651092][ T982] usb 1-1: USB disconnect, device number 34 [ 1668.559423][T17588] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1668.895556][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.895626][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.888246][T17504] chnl_net:caif_netlink_parms(): no params data found [ 1671.926574][T11656] IPVS: stop unused estimator thread 0... [ 1675.364311][T17504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.364422][T17504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.364595][T17504] bridge_slave_0: entered allmulticast mode [ 1675.366782][T17504] bridge_slave_0: entered promiscuous mode [ 1675.410374][T17504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.410520][T17504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.410747][T17504] bridge_slave_1: entered allmulticast mode [ 1675.414877][T17504] bridge_slave_1: entered promiscuous mode [ 1676.930771][T17504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.133131][T17504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1682.019927][T17504] team0: Port device team_slave_0 added [ 1682.028727][T17504] team0: Port device team_slave_1 added [ 1690.107057][T17504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1690.107075][T17504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.107100][T17504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1690.117322][T17504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1690.117338][T17504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.117364][T17504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.637841][T17504] hsr_slave_0: entered promiscuous mode [ 1692.639808][T17504] hsr_slave_1: entered promiscuous mode [ 1692.640729][T17504] debugfs: 'hsr0' already exists in 'hsr' [ 1692.640752][T17504] Cannot create hsr debugfs directory [ 1692.738890][T17742] fuse: Bad value for 'fd' [ 1696.745502][T11656] bridge_slave_1: left allmulticast mode [ 1696.745530][T11656] bridge_slave_1: left promiscuous mode [ 1696.745761][T11656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.040038][T11656] bridge_slave_0: left allmulticast mode [ 1697.040068][T11656] bridge_slave_0: left promiscuous mode [ 1697.040327][T11656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.544391][T11656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1700.147256][T11656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1701.108993][T17809] fuse: Bad value for 'fd' [ 1701.146868][T11656] bond0 (unregistering): Released all slaves [ 1701.799246][T11656] hsr_slave_0: left promiscuous mode [ 1701.848653][T11656] hsr_slave_1: left promiscuous mode [ 1701.849647][T11656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.113203][T17809] 9pnet_fd: Insufficient options for proto=fd [ 1702.151655][T11656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1704.779281][T11656] team0 (unregistering): Port device team_slave_1 removed [ 1704.949308][T11656] team0 (unregistering): Port device team_slave_0 removed [ 1706.307792][T17866] fuse: Bad value for 'fd' [ 1708.354259][T17866] 9pnet_fd: Insufficient options for proto=fd [ 1712.661197][T17504] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1713.142460][T17504] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1714.982205][T16994] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1715.137479][T16994] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1715.137508][T16994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.137528][T16994] usb 1-1: Product: syz [ 1715.137542][T16994] usb 1-1: Manufacturer: syz [ 1715.137557][T16994] usb 1-1: SerialNumber: syz [ 1715.181638][T16994] usb 1-1: config 0 descriptor?? [ 1715.310173][T12830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1715.376200][T12830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1715.416505][T12830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1715.457612][T12830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1715.470388][T12830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1717.348828][T16994] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 1717.682288][ T5808] Bluetooth: hci3: command tx timeout [ 1718.349076][T16994] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 1718.365522][T16994] usb 1-1: USB disconnect, device number 35 [ 1718.462731][T16994] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 1718.656373][T17924] chnl_net:caif_netlink_parms(): no params data found [ 1718.895089][T16994] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1719.772104][ T5808] Bluetooth: hci3: command tx timeout [ 1721.934938][ T5808] Bluetooth: hci3: command tx timeout [ 1723.999618][ T5808] Bluetooth: hci3: command tx timeout [ 1725.992835][T17924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.993123][T17924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.993362][T17924] bridge_slave_0: entered allmulticast mode [ 1725.996531][T17924] bridge_slave_0: entered promiscuous mode [ 1726.043562][T17924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.043799][T17924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.044041][T17924] bridge_slave_1: entered allmulticast mode [ 1726.048314][T17924] bridge_slave_1: entered promiscuous mode [ 1728.841386][T18036] bridge0: port 3(team0) entered blocking state [ 1728.841454][T18036] bridge0: port 3(team0) entered disabled state [ 1728.841601][T18036] team0: entered allmulticast mode [ 1728.841610][T18036] team_slave_0: entered allmulticast mode [ 1728.841621][T18036] team_slave_1: entered allmulticast mode [ 1728.843337][T18036] team0: entered promiscuous mode [ 1728.843348][T18036] team_slave_0: entered promiscuous mode [ 1728.843469][T18036] team_slave_1: entered promiscuous mode [ 1728.843974][T18036] bridge0: port 3(team0) entered blocking state [ 1728.844042][T18036] bridge0: port 3(team0) entered forwarding state [ 1728.940585][T17924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.946378][T17924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.335117][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.335187][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.476272][T17924] team0: Port device team_slave_0 added [ 1730.492753][T17924] team0: Port device team_slave_1 added [ 1730.738644][T16994] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1730.793900][T17924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.793915][T17924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.793939][T17924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1730.891507][T17924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1730.891523][T17924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.891608][T17924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1730.966995][T16994] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1730.967024][T16994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.967043][T16994] usb 1-1: Product: syz [ 1730.967056][T16994] usb 1-1: Manufacturer: syz [ 1730.967070][T16994] usb 1-1: SerialNumber: syz [ 1731.250490][T16994] usb 1-1: config 0 descriptor?? [ 1733.359297][T16994] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 1733.450437][T17924] hsr_slave_0: entered promiscuous mode [ 1733.451782][T17924] hsr_slave_1: entered promiscuous mode [ 1733.452696][T17924] debugfs: 'hsr0' already exists in 'hsr' [ 1733.452726][T17924] Cannot create hsr debugfs directory [ 1733.682491][T16994] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 1734.011152][ T3559] bridge_slave_1: left allmulticast mode [ 1734.011183][ T3559] bridge_slave_1: left promiscuous mode [ 1734.011446][ T3559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.099612][T16994] usb 1-1: USB disconnect, device number 36 [ 1734.651845][ T3559] bridge_slave_0: left allmulticast mode [ 1734.651875][ T3559] bridge_slave_0: left promiscuous mode [ 1734.652160][ T3559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.062378][ T3559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.133987][ T3559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.202208][ T3559] bond0 (unregistering): Released all slaves [ 1737.624592][T16994] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 1740.033702][T16994] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1741.284750][ T3559] hsr_slave_0: left promiscuous mode [ 1741.322242][ T3559] hsr_slave_1: left promiscuous mode [ 1741.323297][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.359593][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1741.558830][T16994] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1741.698569][T16994] usb 1-1: device descriptor read/64, error -71 [ 1741.940150][T16994] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1746.539231][ T3559] team0 (unregistering): Port device team_slave_1 removed [ 1747.347102][ T3559] team0 (unregistering): Port device team_slave_0 removed [ 1748.680848][T16994] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1748.869140][T16994] usb 1-1: device descriptor read/64, error -71 [ 1749.128848][T16994] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1749.278810][T16994] usb 1-1: device descriptor read/64, error -71 [ 1749.389149][T16994] usb usb1-port1: attempt power cycle [ 1749.728576][T16994] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1749.749110][T16994] usb 1-1: device descriptor read/8, error -71 [ 1749.998976][T16994] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1750.021280][T16994] usb 1-1: device descriptor read/8, error -71 [ 1750.150300][T16994] usb usb1-port1: unable to enumerate USB device [ 1755.817082][T11533] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1756.532233][T11533] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1756.532262][T11533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.532278][T11533] usb 1-1: Product: syz [ 1756.532286][T11533] usb 1-1: Manufacturer: syz [ 1756.532294][T11533] usb 1-1: SerialNumber: syz [ 1756.535313][T11533] usb 1-1: config 0 descriptor?? [ 1757.886727][T11533] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 1757.959638][T11533] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 1757.975913][T11533] usb 1-1: USB disconnect, device number 43 [ 1758.087671][T11533] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 1759.717543][T11533] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1760.970502][T17924] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1763.503765][T17924] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1763.584821][T17924] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1763.645271][T17924] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1764.117937][T17924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1764.177727][T17924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1764.203445][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.218355][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1764.309362][T15821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.318381][T15821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1766.159103][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1767.185084][T18311] fuse: Bad value for 'fd' [ 1767.254593][T17924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1767.358714][T11533] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1767.519940][T11533] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1767.519975][T11533] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1767.522983][T11533] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1767.523011][T11533] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1767.523031][T11533] usb 1-1: Product: syz [ 1767.523045][T11533] usb 1-1: Manufacturer: syz [ 1767.523059][T11533] usb 1-1: SerialNumber: syz [ 1767.582252][T11533] usb 1-1: config 0 descriptor?? [ 1767.655058][T11533] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1767.793749][T18312] udevd[18312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1771.043781][T17924] veth0_vlan: entered promiscuous mode [ 1771.053874][T17924] veth1_vlan: entered promiscuous mode [ 1771.104374][T17924] veth0_macvtap: entered promiscuous mode [ 1771.116530][T17924] veth1_macvtap: entered promiscuous mode [ 1771.143719][T17924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1771.461757][T17924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1771.545683][ T43] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.557562][ T43] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.568269][ T43] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.577553][ T43] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.899333][T10431] usb 1-1: USB disconnect, device number 44 [ 1772.386157][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1772.386177][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1773.002773][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.002792][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1776.155511][T18383] fuse: Bad value for 'fd' [ 1778.168214][T12830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1778.186327][T12830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1778.196678][T12830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1778.212421][T12830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1778.219803][T12830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1778.689517][T18383] 9pnet_fd: Insufficient options for proto=fd [ 1780.400455][T12830] Bluetooth: hci4: command tx timeout [ 1782.579818][T17548] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.854496][T12830] Bluetooth: hci4: command tx timeout [ 1783.422447][T18438] netlink: 'syz.0.2975': attribute type 12 has an invalid length. [ 1784.271841][T17548] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.223720][T12830] Bluetooth: hci4: command tx timeout [ 1787.448572][T12830] Bluetooth: hci4: command tx timeout [ 1788.493837][T17548] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.366566][T18488] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1791.580959][T16994] hid_parser_main: 8 callbacks suppressed [ 1791.581015][T16994] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 1791.581130][T16994] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 1791.581188][T16994] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 1791.581289][T16994] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 1791.581350][T16994] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 1791.581451][T16994] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 1791.597880][T16994] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 1791.598007][T16994] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 1791.598065][T16994] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 1791.598166][T16994] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 1791.826703][T16994] hid-generic 0003:0003:0000.0005: hidraw0: USB HID vffffff.fd Device [syz1] on syz0 [ 1793.070205][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.070278][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.227164][T17548] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.526972][T18392] chnl_net:caif_netlink_parms(): no params data found [ 1795.606648][T18500] fido_id[18500]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1800.914969][T18392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.915092][T18392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.915318][T18392] bridge_slave_0: entered allmulticast mode [ 1800.921492][T18392] bridge_slave_0: entered promiscuous mode [ 1800.940655][T18392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.442947][T18392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.443207][T18392] bridge_slave_1: entered allmulticast mode [ 1801.445892][T18392] bridge_slave_1: entered promiscuous mode [ 1802.414324][T18392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1803.301218][T18392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1806.780330][T18392] team0: Port device team_slave_0 added [ 1806.784482][T18392] team0: Port device team_slave_1 added [ 1807.056042][T17548] bridge_slave_1: left allmulticast mode [ 1807.056062][T17548] bridge_slave_1: left promiscuous mode [ 1807.056222][T17548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.184480][T17548] bridge_slave_0: left allmulticast mode [ 1807.184499][T17548] bridge_slave_0: left promiscuous mode [ 1807.184803][T17548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.738617][T18354] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1807.890868][T18354] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 1807.890895][T18354] usb 1-1: config 0 has no interface number 0 [ 1807.894366][T18354] usb 1-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 1807.894394][T18354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.894415][T18354] usb 1-1: Product: syz [ 1807.894434][T18354] usb 1-1: Manufacturer: syz [ 1807.894446][T18354] usb 1-1: SerialNumber: syz [ 1807.908178][T18354] usb 1-1: config 0 descriptor?? [ 1807.956718][T18354] qmi_wwan 1-1:0.172: bogus CDC Union: master=0, slave=0 [ 1809.048378][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3026'. [ 1812.100069][T18636] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3031'. [ 1812.100206][T18636] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3031'. [ 1812.963347][T18354] qmi_wwan 1-1:0.172: probe with driver qmi_wwan failed with error -22 [ 1813.139731][T17548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1813.199158][T17548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1813.221393][T17548] bond0 (unregistering): Released all slaves [ 1813.443204][T18354] usb 1-1: USB disconnect, device number 45 [ 1813.485215][T18392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1813.485230][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1813.485253][T18392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1813.538276][T18392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1813.538292][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1813.538314][T18392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1814.318870][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1814.318883][ T37] audit: type=1326 audit(2000000354.409:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1814.318910][ T37] audit: type=1326 audit(2000000354.409:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1814.318933][ T37] audit: type=1326 audit(2000000354.409:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1814.318955][ T37] audit: type=1326 audit(2000000354.409:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1814.318976][ T37] audit: type=1326 audit(2000000354.409:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1814.318998][ T37] audit: type=1326 audit(2000000354.409:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1814.325430][ T37] audit: type=1326 audit(2000000354.419:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1814.325462][ T37] audit: type=1326 audit(2000000354.419:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1814.325485][ T37] audit: type=1326 audit(2000000354.419:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1814.325509][ T37] audit: type=1326 audit(2000000354.419:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f89cc6cefc9 code=0x7ffc0000 [ 1815.773944][T18392] hsr_slave_0: entered promiscuous mode [ 1815.810550][T18392] hsr_slave_1: entered promiscuous mode [ 1815.813073][T18392] debugfs: 'hsr0' already exists in 'hsr' [ 1815.813098][T18392] Cannot create hsr debugfs directory [ 1818.320105][T17548] hsr_slave_0: left promiscuous mode [ 1818.360717][T17548] hsr_slave_1: left promiscuous mode [ 1818.361834][T17548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1818.361858][T17548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1818.390228][T17548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1818.390255][T17548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1818.506895][T17548] veth1_macvtap: left promiscuous mode [ 1818.507005][T17548] veth0_macvtap: left promiscuous mode [ 1818.507199][T17548] veth1_vlan: left promiscuous mode [ 1818.507299][T17548] veth0_vlan: left promiscuous mode [ 1819.329388][ T37] kauditd_printk_skb: 256 callbacks suppressed [ 1819.329405][ T37] audit: type=1326 audit(2000000359.429:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1819.329527][ T37] audit: type=1326 audit(2000000359.429:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1819.329703][ T37] audit: type=1326 audit(2000000359.429:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1819.329840][ T37] audit: type=1326 audit(2000000359.429:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1819.330871][ T37] audit: type=1326 audit(2000000359.429:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1819.335195][ T37] audit: type=1326 audit(2000000359.429:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1819.335372][ T37] audit: type=1326 audit(2000000359.429:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1819.335948][ T37] audit: type=1326 audit(2000000359.429:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1819.386369][ T37] audit: type=1326 audit(2000000359.479:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1819.386853][ T37] audit: type=1326 audit(2000000359.479:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1824.913730][ T37] kauditd_printk_skb: 196 callbacks suppressed [ 1824.913752][ T37] audit: type=1326 audit(2000000365.009:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18752 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1824.913795][ T37] audit: type=1326 audit(2000000365.009:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18752 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1824.913834][ T37] audit: type=1326 audit(2000000365.009:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18752 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1824.913872][ T37] audit: type=1326 audit(2000000365.009:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18752 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1824.913907][ T37] audit: type=1326 audit(2000000365.009:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18752 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1824.913942][ T37] audit: type=1326 audit(2000000365.009:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18752 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1824.913980][ T37] audit: type=1326 audit(2000000365.009:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18752 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1824.914058][ T37] audit: type=1326 audit(2000000365.009:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18752 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1824.914098][ T37] audit: type=1326 audit(2000000365.009:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18752 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1824.914143][ T37] audit: type=1326 audit(2000000365.009:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18752 comm="syz.5.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1826.899366][T17548] team0 (unregistering): Port device team_slave_1 removed [ 1827.159319][T17548] team0 (unregistering): Port device team_slave_0 removed [ 1830.444977][T10431] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1830.599648][T10431] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.599668][T10431] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.599680][T10431] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1830.599698][T10431] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1830.599710][T10431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.705630][T10431] usb 1-1: config 0 descriptor?? [ 1831.313802][T18784] netlink: 341 bytes leftover after parsing attributes in process `syz.7.3080'. [ 1831.371066][T10431] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0006/input/input15 [ 1831.501604][T10431] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 1831.551307][T10431] usb 1-1: USB disconnect, device number 46 [ 1831.676105][T18791] fido_id[18791]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1832.541710][ T37] kauditd_printk_skb: 160 callbacks suppressed [ 1832.541722][ T37] audit: type=1326 audit(2000000372.639:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18800 comm="syz.7.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1832.541750][ T37] audit: type=1326 audit(2000000372.639:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18800 comm="syz.7.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1832.541772][ T37] audit: type=1326 audit(2000000372.639:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18800 comm="syz.7.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1832.541794][ T37] audit: type=1326 audit(2000000372.639:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18800 comm="syz.7.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1832.542114][ T37] audit: type=1326 audit(2000000372.639:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18800 comm="syz.7.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1832.542153][ T37] audit: type=1326 audit(2000000372.639:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18800 comm="syz.7.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1832.542303][ T37] audit: type=1326 audit(2000000372.639:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18800 comm="syz.7.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1832.542505][ T37] audit: type=1326 audit(2000000372.639:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18800 comm="syz.7.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1832.542673][ T37] audit: type=1326 audit(2000000372.639:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18800 comm="syz.7.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1832.542856][ T37] audit: type=1326 audit(2000000372.639:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18800 comm="syz.7.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1832.789809][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3085'. [ 1839.553681][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1839.558046][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1839.560638][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1839.561810][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1839.563115][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1840.660959][ T37] kauditd_printk_skb: 183 callbacks suppressed [ 1840.661040][ T37] audit: type=1326 audit(2000000380.759:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1840.661094][ T37] audit: type=1326 audit(2000000380.759:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1840.661135][ T37] audit: type=1326 audit(2000000380.759:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1840.661179][ T37] audit: type=1326 audit(2000000380.759:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1840.662886][ T37] audit: type=1326 audit(2000000380.759:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1840.662932][ T37] audit: type=1326 audit(2000000380.759:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1840.662973][ T37] audit: type=1326 audit(2000000380.759:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1840.663011][ T37] audit: type=1326 audit(2000000380.759:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1840.663051][ T37] audit: type=1326 audit(2000000380.759:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1840.663090][ T37] audit: type=1326 audit(2000000380.759:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3e2583efc9 code=0x7ffc0000 [ 1841.679037][T12830] Bluetooth: hci3: command tx timeout [ 1842.167439][T18847] chnl_net:caif_netlink_parms(): no params data found [ 1842.707516][ T1157] bridge_slave_1: left allmulticast mode [ 1842.707545][ T1157] bridge_slave_1: left promiscuous mode [ 1842.707798][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.900809][T18890] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1843.768784][T12830] Bluetooth: hci3: command tx timeout [ 1843.869404][ T1157] bridge_slave_0: left allmulticast mode [ 1843.869423][ T1157] bridge_slave_0: left promiscuous mode [ 1843.869601][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.499298][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1845.709826][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1845.808263][ T1157] bond0 (unregistering): Released all slaves [ 1845.848653][T12830] Bluetooth: hci3: command tx timeout [ 1845.910523][ T37] kauditd_printk_skb: 194 callbacks suppressed [ 1845.918653][ T37] audit: type=1326 audit(2000000385.999:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18913 comm="syz.7.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1845.918711][ T37] audit: type=1326 audit(2000000385.999:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18913 comm="syz.7.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1845.918751][ T37] audit: type=1326 audit(2000000385.999:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18913 comm="syz.7.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1845.918793][ T37] audit: type=1326 audit(2000000385.999:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18913 comm="syz.7.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1845.918834][ T37] audit: type=1326 audit(2000000385.999:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18913 comm="syz.7.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1845.918871][ T37] audit: type=1326 audit(2000000385.999:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18913 comm="syz.7.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1845.918906][ T37] audit: type=1326 audit(2000000385.999:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18913 comm="syz.7.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1845.918943][ T37] audit: type=1326 audit(2000000385.999:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18913 comm="syz.7.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1845.918980][ T37] audit: type=1326 audit(2000000385.999:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18913 comm="syz.7.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff824f6efc9 code=0x7ffc0000 [ 1845.919020][ T37] audit: type=1326 audit(2000000385.999:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18913 comm="syz.7.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff824f6f003 code=0x7ffc0000 [ 1847.753221][ T1157] hsr_slave_0: left promiscuous mode [ 1848.412917][T12830] Bluetooth: hci3: command tx timeout [ 1848.628600][ T1157] hsr_slave_1: left promiscuous mode [ 1848.629574][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1848.721482][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1851.548032][T18955] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3132'. [ 1851.634659][T18956] netlink: 'syz.8.3132': attribute type 10 has an invalid length. [ 1851.634680][T18956] netlink: 55 bytes leftover after parsing attributes in process `syz.8.3132'. [ 1852.430490][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 1852.573885][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 1853.203636][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.203734][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.905435][T18847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.905752][T18847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.905935][T18847] bridge_slave_0: entered allmulticast mode [ 1854.206163][T18847] bridge_slave_0: entered promiscuous mode [ 1854.222308][T18847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.222440][T18847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.222668][T18847] bridge_slave_1: entered allmulticast mode [ 1854.225319][T18847] bridge_slave_1: entered promiscuous mode [ 1855.273106][T18987] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3142'. [ 1855.895058][T18847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1855.897497][T18847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1856.607458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1856.868189][ C1] vkms_vblank_simulate: vblank timer overrun [ 1858.018914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1858.257655][ C1] vkms_vblank_simulate: vblank timer overrun [ 1858.600657][T18847] team0: Port device team_slave_0 added [ 1858.639310][T18847] team0: Port device team_slave_1 added [ 1859.207244][ C1] vkms_vblank_simulate: vblank timer overrun [ 1859.234996][T18847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1859.235011][T18847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1859.235036][T18847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1859.237577][T18847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1859.237591][T18847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1859.237616][T18847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1859.803346][ C1] vkms_vblank_simulate: vblank timer overrun [ 1859.825215][ C1] vkms_vblank_simulate: vblank timer overrun [ 1859.925131][ C1] vkms_vblank_simulate: vblank timer overrun [ 1859.991439][ C1] vkms_vblank_simulate: vblank timer overrun [ 1860.193339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1860.799748][ C1] vkms_vblank_simulate: vblank timer overrun [ 1861.926180][T18847] hsr_slave_0: entered promiscuous mode [ 1861.928524][T18847] hsr_slave_1: entered promiscuous mode [ 1861.930120][T18847] debugfs: 'hsr0' already exists in 'hsr' [ 1861.930151][T18847] Cannot create hsr debugfs directory [ 1866.632495][ T23] ================================================================== [ 1866.632509][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 1866.632644][ T23] Read of size 8 at addr ffffc90004329090 by task irq_work/0/23 [ 1866.632659][ T23] [ 1866.632683][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1866.632705][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1866.632723][ T23] Call Trace: [ 1866.632733][ T23] [ 1866.632742][ T23] dump_stack_lvl+0x189/0x250 [ 1866.632785][ T23] ? run_irq_workd+0x116/0x190 [ 1866.632807][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1866.632829][ T23] ? __pfx__printk+0x10/0x10 [ 1866.632857][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1866.632898][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1866.632921][ T23] print_report+0xca/0x240 [ 1866.632943][ T23] ? run_irq_workd+0x116/0x190 [ 1866.632963][ T23] kasan_report+0x118/0x150 [ 1866.633014][ T23] ? run_irq_workd+0x116/0x190 [ 1866.633039][ T23] run_irq_workd+0x116/0x190 [ 1866.633061][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1866.633081][ T23] ? schedule+0x91/0x360 [ 1866.633199][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1866.633234][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1866.633253][ T23] smpboot_thread_fn+0x542/0xa60 [ 1866.633274][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1866.633298][ T23] kthread+0x711/0x8a0 [ 1866.633321][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1866.633341][ T23] ? __pfx_kthread+0x10/0x10 [ 1866.633362][ T23] ? rt_spin_unlock+0x150/0x200 [ 1866.633407][ T23] ? rt_spin_unlock+0x161/0x200 [ 1866.633423][ T23] ? __pfx_kthread+0x10/0x10 [ 1866.633445][ T23] ret_from_fork+0x4bc/0x870 [ 1866.633472][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1866.633494][ T23] ? __switch_to_asm+0x39/0x70 [ 1866.633511][ T23] ? __switch_to_asm+0x33/0x70 [ 1866.633527][ T23] ? __pfx_kthread+0x10/0x10 [ 1866.633549][ T23] ret_from_fork_asm+0x1a/0x30 [ 1866.633574][ T23] [ 1866.633581][ T23] [ 1866.633585][ T23] The buggy address belongs to a vmalloc virtual mapping [ 1866.633610][ T23] Memory state around the buggy address: [ 1866.633620][ T23] ffffc90004328f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1866.633632][ T23] ffffc90004329000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1866.633643][ T23] >ffffc90004329080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1866.633656][ T23] ^ [ 1866.633665][ T23] ffffc90004329100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1866.633676][ T23] ffffc90004329180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1866.633685][ T23] ================================================================== [ 1866.937864][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1866.937883][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1866.937905][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1866.937916][ T23] Call Trace: [ 1866.937924][ T23] [ 1866.937932][ T23] dump_stack_lvl+0x99/0x250 [ 1866.937960][ T23] ? __asan_memcpy+0x40/0x70 [ 1866.937981][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1866.938003][ T23] ? __pfx__printk+0x10/0x10 [ 1866.938029][ T23] vpanic+0x237/0x6d0 [ 1866.938045][ T23] ? __pfx_vpanic+0x10/0x10 [ 1866.938060][ T23] ? preempt_schedule+0xae/0xc0 [ 1866.938080][ T23] ? __pfx_preempt_schedule+0x10/0x10 [ 1866.938102][ T23] panic+0xb9/0xc0 [ 1866.938118][ T23] ? __pfx_panic+0x10/0x10 [ 1866.938136][ T23] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1866.938184][ T23] ? run_irq_workd+0x116/0x190 [ 1866.938207][ T23] check_panic_on_warn+0x89/0xb0 [ 1866.938225][ T23] ? run_irq_workd+0x116/0x190 [ 1866.938245][ T23] end_report+0x78/0x160 [ 1866.938266][ T23] kasan_report+0x129/0x150 [ 1866.938288][ T23] ? run_irq_workd+0x116/0x190 [ 1866.938313][ T23] run_irq_workd+0x116/0x190 [ 1866.938333][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1866.938354][ T23] ? schedule+0x91/0x360 [ 1866.938374][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1866.938395][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1866.938413][ T23] smpboot_thread_fn+0x542/0xa60 [ 1866.938436][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1866.938456][ T23] kthread+0x711/0x8a0 [ 1866.938481][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1866.938501][ T23] ? __pfx_kthread+0x10/0x10 [ 1866.938521][ T23] ? rt_spin_unlock+0x150/0x200 [ 1866.938540][ T23] ? rt_spin_unlock+0x161/0x200 [ 1866.938556][ T23] ? __pfx_kthread+0x10/0x10 [ 1866.938578][ T23] ret_from_fork+0x4bc/0x870 [ 1866.938599][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1866.938621][ T23] ? __switch_to_asm+0x39/0x70 [ 1866.938637][ T23] ? __switch_to_asm+0x33/0x70 [ 1866.938653][ T23] ? __pfx_kthread+0x10/0x10 [ 1866.938676][ T23] ret_from_fork_asm+0x1a/0x30 [ 1866.938701][ T23] [ 1866.938959][ T23] Kernel Offset: disabled