last executing test programs: 2m25.510719179s ago: executing program 2 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e6750100"]) 2m24.698761072s ago: executing program 2 (id=178): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB]) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @private=0xa010100, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @private=0xa010102}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) 2m24.509840035s ago: executing program 2 (id=179): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000080)=0x53) 2m24.250128733s ago: executing program 2 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 2m23.137834574s ago: executing program 2 (id=183): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) readahead(0xffffffffffffffff, 0x7, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000001c80)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448e1, &(0x7f0000000240)={0x0, 0x0, "be5eec", 0x0, 0xff}) 2m22.730280603s ago: executing program 2 (id=186): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c42) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee", 0x15}, {&(0x7f00000003c0)="f7ebeeba0860cfb26e1d272a28cb5e64128ef91b7db38d9758409bf5c9974ab27e837b7a78fe698caaa36568d2709ce9e5b71ad789d461bdc1940e0225001e20c4dc0fdc39bbd525c6e1a3b9d52265f3464a977ba182986a", 0x58}], 0x2) 2m21.864315552s ago: executing program 32 (id=186): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c42) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee", 0x15}, {&(0x7f00000003c0)="f7ebeeba0860cfb26e1d272a28cb5e64128ef91b7db38d9758409bf5c9974ab27e837b7a78fe698caaa36568d2709ce9e5b71ad789d461bdc1940e0225001e20c4dc0fdc39bbd525c6e1a3b9d52265f3464a977ba182986a", 0x58}], 0x2) 1m54.527378218s ago: executing program 4 (id=267): msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000380)=""/45) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYRES16], 0x31, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f00000001c0)='binder\x00', 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000280)={0xf0f022}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) readv(r2, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1) shutdown(r2, 0x1) 1m53.68217241s ago: executing program 4 (id=268): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0xfffffffffffffef4, 0x80800) accept$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xe8) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x4000800) recvmmsg(r4, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xfffff2a8}], 0x1, 0x40002102, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x8005, r5, 0x1}) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb08004500001cfffe0000a02f90787f000001e00000012001880b00089078cc810f432c6ca22e5580dbb2137e4e7d270af433b2ef563342e77c47d26f4c1457b82cceb958876d60526c673bb0750d691746759f0308597b611ebd2601c4c72ca40ad18e77f59e36c005cedfb6d5c26e14d475f3f9a8e2afcc702f7334c44555480713b4ecbd924a0e027d741c367971dcdcb4ee5a27f7a4"], 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180), 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x21, 0x7, {0x7, 0x21, "04f3da6807"}}, 0x0}, 0x0) r6 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xabd0, 0x400, 0x2, 0x349}) r7 = io_uring_setup(0x7626, &(0x7f0000000600)={0x0, 0x1e28, 0x20, 0x3f, 0x800089, 0x0, r6}) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r6], 0x1) 1m50.177727494s ago: executing program 4 (id=278): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x1e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaad15c8ba848e33c2eb7e9a0aaaaaa0180c2000000000c0400000015010000da3b99121880e22e"], 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x7e, 0x0, 0x34324152, 0x4, 0x0, [{0x0, 0xf}, {0x20010}, {}, {0x1000000}, {0x3}, {0x2fe}, {0x0, 0x7ff}], 0xf, 0x0, 0x0, 0x2}}) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendto$rxrpc(r3, &(0x7f00000027c0)="dc", 0x21, 0xc4, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00', 0xa}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x4, 0x1, 0x1, 0x93}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$802154_raw(r0, &(0x7f00000008c0)={0x24, @none={0x0, 0xffff}}, 0x14) 1m47.351332294s ago: executing program 1 (id=283): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000bf080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 1m47.150479459s ago: executing program 1 (id=284): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB]) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @private=0xa010100, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @private=0xa010102}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1m46.854509301s ago: executing program 1 (id=286): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x3, r2, 0xcccccccc}) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) 1m46.668780511s ago: executing program 1 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 1m46.466628739s ago: executing program 1 (id=289): r0 = syz_pidfd_open(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x2, 0x0, 0x100, 0x10001000}, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(r0, 0x8, &(0x7f0000000000)={0x1c, 0x7, 0xfffff001}, 0x0) 1m45.353899429s ago: executing program 1 (id=292): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000480)={0x4200, 0x2, 0x1}, 0x18, 0x2) landlock_restrict_self(r0, 0x0) mkdirat(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000087cbb6690000f231005e06", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[], 0x10) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) close(r8) close(r7) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, "d176", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 1m44.434469595s ago: executing program 33 (id=292): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000480)={0x4200, 0x2, 0x1}, 0x18, 0x2) landlock_restrict_self(r0, 0x0) mkdirat(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000087cbb6690000f231005e06", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[], 0x10) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) close(r8) close(r7) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, "d176", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 1m44.426410811s ago: executing program 4 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 1m44.277225519s ago: executing program 4 (id=300): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 1m43.682115697s ago: executing program 4 (id=305): socket(0x1, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setrlimit(0xe, &(0x7f00000000c0)={0x1000, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x81f, 0x0, 0x0, &(0x7f0000000540)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d4dfeb1ceb40eeefe68d6cf265b68e88a8bb314f3c0f82df67e25dad70d6b31e036f9f20b70c42a4dc5b21aa28f606af1557115f56805a217afe6b467cb413b3"}, 0x48, 0xffffffffffffffff) keyctl$negate(0x4, r3, 0x0, 0xfffffffffffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1m41.762148474s ago: executing program 34 (id=305): socket(0x1, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setrlimit(0xe, &(0x7f00000000c0)={0x1000, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x81f, 0x0, 0x0, &(0x7f0000000540)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d4dfeb1ceb40eeefe68d6cf265b68e88a8bb314f3c0f82df67e25dad70d6b31e036f9f20b70c42a4dc5b21aa28f606af1557115f56805a217afe6b467cb413b3"}, 0x48, 0xffffffffffffffff) keyctl$negate(0x4, r3, 0x0, 0xfffffffffffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 14.59344239s ago: executing program 3 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xb, 0x0, &(0x7f0000000900)="e02742e86c0d85ff978276", 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.258138735s ago: executing program 3 (id=573): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100004001"], 0x80}, 0x1, 0x0, 0x0, 0x4042080}, 0x20000010) 13.987684149s ago: executing program 3 (id=575): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x4}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0xb62f, 0x342}, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482080, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x52}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) 13.124145013s ago: executing program 7 (id=581): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) 12.10002056s ago: executing program 5 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xb, 0x0, &(0x7f0000000900)="e02742e86c0d85ff978276", 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.032712718s ago: executing program 3 (id=586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file1/file0\x00'}) openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r6 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x0, 0x20006, 0xffffffff}, 0x10) sendto$inet6(r8, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 10.950173251s ago: executing program 7 (id=587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) pipe2$watch_queue(&(0x7f00000006c0), 0x80) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 10.902725001s ago: executing program 5 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9.738793873s ago: executing program 5 (id=591): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r0, 0x0, 0x0) 9.434228887s ago: executing program 6 (id=592): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0x7fd7, 0x4, 0x1}, 0x8) unshare(0x2040400) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) 9.177497121s ago: executing program 5 (id=594): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d"], 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002100)=ANY=[@ANYBLOB="12010200000000000000a8a440000102030109021b0001018140950904006d01070101050905ee827937c33d089e0b117141386b8d1a0102ff030d090d08a894ed3097a625910d73e9c2f09081ad74e46a073be233222d"], &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x2024}}, {0x2, &(0x7f0000002400)=@string={0x2}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r5, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) 8.089152363s ago: executing program 6 (id=595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) socket$kcm(0x2, 0xa, 0x2) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000000)="cf9e0edd", 0x4}, {0x0}], 0x2) 7.970153675s ago: executing program 7 (id=596): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r1, 0x100000000) 6.862067238s ago: executing program 6 (id=597): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 6.797924524s ago: executing program 7 (id=598): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x88200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xb) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) 6.088237762s ago: executing program 6 (id=599): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5.962313408s ago: executing program 7 (id=600): syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a000905840200000000"], 0x0) 5.960732651s ago: executing program 3 (id=601): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x1d000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="7ac8b2852c60ac24e03a2c072bab3422a80c1ff518be3d476f4613ac6966fe3d59eaa20ec88f677b15d700cd353f4e204732f26aa229fa8b1aedf5c4ea550aa6c5ca40178fde587d3ffcb3f72d9aa08a1cf5a4ead762672b35ab6c6857d8f2ea9f007085fc852af3b0a59e7f46ab8c3c41", 0x71}, {&(0x7f0000000340)="b92fc8d480737475599f9b3cec0ee7426057350194c5ce866b05f60343d526a746b201784a3ee55de873375a52dadc7e8ab9044dd2665909a0580519f5736b82fd6340430182bca17cdb83870fcaacfaa594fe99bdda44550228bc74ce84c8d72c5e942a69a7035d09a770e041a78a44ce", 0x71}], 0x2, 0x0, 0x0, 0x40000}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.521787369s ago: executing program 6 (id=604): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r0, 0x0, &(0x7f00000001c0)) 5.4932113s ago: executing program 5 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a03", 0x2c}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) 4.804165225s ago: executing program 6 (id=606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 4.202788029s ago: executing program 5 (id=608): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xc87b, 0x400, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.813595255s ago: executing program 0 (id=609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000e8dbdf2521000000", @ANYRES32=r7, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 3.198515902s ago: executing program 7 (id=610): syz_open_dev$sg(0x0, 0x8, 0x2042) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa8, 0xeb, 0xcf, 0x20, 0x1199, 0x901b, 0x2616, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x7f, [{{0x9, 0x4, 0xc3, 0x0, 0x0, 0x61, 0xec, 0x2a, 0x4}}]}}]}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.420453769s ago: executing program 0 (id=611): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x88200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xb) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) 2.10535989s ago: executing program 0 (id=612): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 2.041707285s ago: executing program 3 (id=613): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.84101441s ago: executing program 0 (id=614): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x98, 0x0, 0x248, 0x358, 0x358, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, 0xff, 0xffffff00, 'ip6gre0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x1d], 0x0, 0x6}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 1.590817667s ago: executing program 0 (id=615): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000480)={0x4200, 0x2, 0x1}, 0x18, 0x2) landlock_restrict_self(r0, 0x0) mkdirat(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="0000000087cbb6690000f231005e0600b7e7de00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r6}, 0x20) close(r9) close(r8) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r10, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, "d176", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 0s ago: executing program 0 (id=616): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) kernel console output (not intermixed with test programs): 03 length: 249 > 9 [ 91.744738][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.752999][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.764122][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.772846][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.780924][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.788319][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.797854][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.805755][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.813055][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.823213][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.827581][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.830741][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.842143][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.852110][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.861550][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.872043][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.888040][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.904247][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.928504][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.959984][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.981905][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.991686][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.614531][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 92.720329][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 92.861979][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 92.947296][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 92.976327][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 93.026231][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.034151][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.044759][ T5832] bridge_slave_0: entered allmulticast mode [ 93.053962][ T5832] bridge_slave_0: entered promiscuous mode [ 93.124673][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.132378][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.139940][ T5832] bridge_slave_1: entered allmulticast mode [ 93.148411][ T5832] bridge_slave_1: entered promiscuous mode [ 93.155727][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.163890][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.171407][ T5834] bridge_slave_0: entered allmulticast mode [ 93.178815][ T5834] bridge_slave_0: entered promiscuous mode [ 93.224466][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.234537][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.242153][ T5834] bridge_slave_1: entered allmulticast mode [ 93.249744][ T5834] bridge_slave_1: entered promiscuous mode [ 93.357829][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.371674][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.447811][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.464559][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.480713][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.488044][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.495840][ T5845] bridge_slave_0: entered allmulticast mode [ 93.503448][ T5845] bridge_slave_0: entered promiscuous mode [ 93.513935][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.521303][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.530050][ T5845] bridge_slave_1: entered allmulticast mode [ 93.538650][ T5845] bridge_slave_1: entered promiscuous mode [ 93.545766][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.553677][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.561230][ T5844] bridge_slave_0: entered allmulticast mode [ 93.569511][ T5844] bridge_slave_0: entered promiscuous mode [ 93.653888][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.661627][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.668877][ T5844] bridge_slave_1: entered allmulticast mode [ 93.676840][ T5844] bridge_slave_1: entered promiscuous mode [ 93.686404][ T5832] team0: Port device team_slave_0 added [ 93.696370][ T5832] team0: Port device team_slave_1 added [ 93.716741][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.724332][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.732051][ T5841] bridge_slave_0: entered allmulticast mode [ 93.741727][ T5841] bridge_slave_0: entered promiscuous mode [ 93.772717][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.830983][ T5834] team0: Port device team_slave_0 added [ 93.837440][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.845992][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.855553][ T5841] bridge_slave_1: entered allmulticast mode [ 93.864246][ T5841] bridge_slave_1: entered promiscuous mode [ 93.893216][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.917656][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.924968][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.951980][ T51] Bluetooth: hci4: command tx timeout [ 93.951986][ T5840] Bluetooth: hci1: command tx timeout [ 93.952323][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.977165][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.984670][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.015009][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.028363][ T5834] team0: Port device team_slave_1 added [ 94.034351][ T51] Bluetooth: hci2: command tx timeout [ 94.034361][ T5840] Bluetooth: hci3: command tx timeout [ 94.034701][ T5840] Bluetooth: hci0: command tx timeout [ 94.090469][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.127628][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.154069][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.194123][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.201899][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.228154][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.243624][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.254588][ T5845] team0: Port device team_slave_0 added [ 94.292355][ T5844] team0: Port device team_slave_0 added [ 94.300095][ T5841] team0: Port device team_slave_0 added [ 94.307576][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.315407][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.341935][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.356829][ T5845] team0: Port device team_slave_1 added [ 94.379202][ T5844] team0: Port device team_slave_1 added [ 94.386739][ T5841] team0: Port device team_slave_1 added [ 94.457835][ T5832] hsr_slave_0: entered promiscuous mode [ 94.471261][ T5832] hsr_slave_1: entered promiscuous mode [ 94.528112][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.535508][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.562033][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.575222][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.582507][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.608768][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.634610][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.641852][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.668102][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.680971][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.688019][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.714427][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.762819][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.769826][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.796744][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.831805][ T5834] hsr_slave_0: entered promiscuous mode [ 94.838331][ T5834] hsr_slave_1: entered promiscuous mode [ 94.848087][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 94.854347][ T5834] Cannot create hsr debugfs directory [ 94.891569][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.898560][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.928687][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.024723][ T5841] hsr_slave_0: entered promiscuous mode [ 95.032419][ T5841] hsr_slave_1: entered promiscuous mode [ 95.038754][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 95.045425][ T5841] Cannot create hsr debugfs directory [ 95.089431][ T5845] hsr_slave_0: entered promiscuous mode [ 95.096361][ T5845] hsr_slave_1: entered promiscuous mode [ 95.103288][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 95.109053][ T5845] Cannot create hsr debugfs directory [ 95.210638][ T5844] hsr_slave_0: entered promiscuous mode [ 95.217838][ T5844] hsr_slave_1: entered promiscuous mode [ 95.224685][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 95.230452][ T5844] Cannot create hsr debugfs directory [ 95.819214][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.833352][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.857323][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.869804][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.959821][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.972588][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.983919][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.998860][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.031897][ T5840] Bluetooth: hci4: command tx timeout [ 96.031954][ T5155] Bluetooth: hci1: command tx timeout [ 96.111281][ T5155] Bluetooth: hci0: command tx timeout [ 96.111663][ T5840] Bluetooth: hci2: command tx timeout [ 96.116743][ T5155] Bluetooth: hci3: command tx timeout [ 96.132898][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.161991][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.185266][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.223640][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.239489][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.326410][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.337419][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.349381][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.360353][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.379333][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.411201][ T548] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.418624][ T548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.436104][ T548] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.443656][ T548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.549259][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.565345][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.602287][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.626343][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.637147][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.725231][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.791832][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.799025][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.812485][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.819702][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.003561][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.041335][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.076363][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.092406][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.130527][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.145931][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.153123][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.175394][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.182603][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.202296][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.209492][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.226999][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.258903][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.266158][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.323597][ T5832] veth0_vlan: entered promiscuous mode [ 97.341083][ T978] cfg80211: failed to load regulatory.db [ 97.382202][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.408155][ T5832] veth1_vlan: entered promiscuous mode [ 97.474630][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.481880][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.526417][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.554760][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.561980][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.667342][ T5832] veth0_macvtap: entered promiscuous mode [ 97.690724][ T5832] veth1_macvtap: entered promiscuous mode [ 97.768591][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.831957][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.893477][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.950412][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.003845][ T1014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.054127][ T1014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.087876][ T548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.116911][ T5155] Bluetooth: hci1: command tx timeout [ 98.116932][ T5840] Bluetooth: hci4: command tx timeout [ 98.186179][ T5845] veth0_vlan: entered promiscuous mode [ 98.192256][ T5840] Bluetooth: hci3: command tx timeout [ 98.202525][ T5840] Bluetooth: hci2: command tx timeout [ 98.203972][ T5155] Bluetooth: hci0: command tx timeout [ 98.218597][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.255079][ T5845] veth1_vlan: entered promiscuous mode [ 98.267506][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.366484][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.403902][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.421840][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.516783][ T5845] veth0_macvtap: entered promiscuous mode [ 98.539148][ T5845] veth1_macvtap: entered promiscuous mode [ 98.576198][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.588298][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.592116][ T5841] veth0_vlan: entered promiscuous mode [ 98.662580][ T5844] veth0_vlan: entered promiscuous mode [ 98.694723][ T5841] veth1_vlan: entered promiscuous mode [ 98.720190][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.746371][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.750014][ T5844] veth1_vlan: entered promiscuous mode [ 98.788047][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.830557][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.881705][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.950423][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.960190][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.026692][ T5844] veth0_macvtap: entered promiscuous mode [ 99.076730][ T5841] veth0_macvtap: entered promiscuous mode [ 99.128272][ T5841] veth1_macvtap: entered promiscuous mode [ 99.143637][ T5844] veth1_macvtap: entered promiscuous mode [ 99.164196][ T5956] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.6'. [ 99.177982][ T548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.189339][ T548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.206615][ T5956] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 99.226955][ T5834] veth0_vlan: entered promiscuous mode [ 99.293680][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.317183][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.342727][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.350654][ T5834] veth1_vlan: entered promiscuous mode [ 99.378465][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.420235][ T1014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.453906][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.455287][ T1014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.463442][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.502786][ T1014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.555264][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.572410][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.594245][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.608534][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.654260][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.704535][ T5834] veth0_macvtap: entered promiscuous mode [ 99.744038][ T5834] veth1_macvtap: entered promiscuous mode [ 99.815367][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.886859][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.895850][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.899879][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.974534][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.191171][ T5155] Bluetooth: hci1: command tx timeout [ 100.192604][ T5840] Bluetooth: hci4: command tx timeout [ 100.271416][ T5840] Bluetooth: hci2: command tx timeout [ 100.272542][ T5155] Bluetooth: hci3: command tx timeout [ 100.276893][ T51] Bluetooth: hci0: command tx timeout [ 100.354767][ T548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.373984][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.410941][ T548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.419745][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.529258][ T548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.593616][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.670110][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.712818][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.781270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.956829][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.981706][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.048556][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.090578][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.202436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.229061][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.254486][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.503753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.793666][ T5979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.912419][ T5984] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12'. [ 101.931368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.488151][ T5994] input: syz0 as /devices/virtual/input/input5 [ 102.519213][ T5996] mmap: syz.4.15 (5996) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.696959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.981131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.326484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.428859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.531319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.551546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.761595][ T5934] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.010893][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 105.021531][ T5934] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 105.040958][ T5934] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.051525][ T5934] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 105.061786][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.106453][ T5934] usb 2-1: config 0 descriptor?? [ 105.120209][ T5934] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 106.721551][ T6041] syz_tun: entered allmulticast mode [ 106.737972][ T6038] syz_tun: left allmulticast mode [ 107.425686][ T10] usb 2-1: USB disconnect, device number 2 [ 109.557729][ T6068] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.921188][ T5934] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.097908][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 110.158747][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 110.532371][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 110.551479][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 110.584311][ T5934] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 110.604448][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.615861][ T5934] usb 2-1: Product: syz [ 110.620180][ T5934] usb 2-1: Manufacturer: syz [ 110.637590][ T5934] usb 2-1: SerialNumber: syz [ 110.814259][ T5934] usb 2-1: config 0 descriptor?? [ 110.822927][ T6068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.840346][ T5934] mcba_usb 2-1:0.0: Can't find endpoints [ 111.080965][ T5934] usb 2-1: USB disconnect, device number 3 [ 111.954545][ T6089] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[6089] [ 112.978768][ T6107] capability: warning: `syz.1.51' uses deprecated v2 capabilities in a way that may be insecure [ 113.978645][ T6115] 8021q: VLANs not supported on ip6gre0 [ 114.537046][ T6122] process 'syz.1.58' launched './file2' with NULL argv: empty string added [ 116.042046][ T6140] vxfs: WRONG superblock magic 00000000 at 1 [ 116.049035][ T6140] vxfs: WRONG superblock magic 00000000 at 8 [ 116.055212][ T6140] vxfs: can't find superblock. [ 116.166985][ T6137] ceph: No mds server is up or the cluster is laggy [ 116.178720][ T5957] libceph: connect (1)[c::]:6789 error -101 [ 116.286678][ T5957] libceph: mon0 (1)[c::]:6789 connect error [ 116.500943][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.660939][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 116.669961][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.684633][ T10] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.791894][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.817339][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 116.846774][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.872858][ T10] usb 2-1: config 0 descriptor?? [ 116.902698][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 117.320605][ T6153] overlayfs: missing 'lowerdir' [ 117.749822][ T6160] 8021q: VLANs not supported on ip6gre0 [ 117.918478][ T6132] syz.4.60 (6132) used greatest stack depth: 19920 bytes left [ 118.712443][ T1212] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.933544][ T1212] usb 3-1: config 0 has no interfaces? [ 118.999874][ T1212] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 119.028665][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.047118][ T1212] usb 3-1: Product: syz [ 119.067017][ T1212] usb 3-1: Manufacturer: syz [ 119.088121][ T1212] usb 3-1: SerialNumber: syz [ 119.123318][ T1212] usb 3-1: config 0 descriptor?? [ 119.329562][ T5934] usb 2-1: USB disconnect, device number 4 [ 119.416655][ T5957] IPVS: starting estimator thread 0... [ 119.440966][ T1212] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.569086][ T6190] IPVS: using max 29 ests per chain, 69600 per kthread [ 119.611317][ T1212] usb 4-1: Using ep0 maxpacket: 32 [ 119.619840][ T1212] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 119.698285][ T1212] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 119.860908][ T1212] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 119.887490][ T1212] usb 4-1: config 1 has no interface number 0 [ 119.896780][ T1212] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.923816][ T5934] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.932649][ T1212] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 119.977425][ T1212] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 119.997512][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.029070][ T1212] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 120.111238][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 120.126245][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.139892][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.162538][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.179422][ T5934] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.189668][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.235028][ T1212] snd_usb_pod 4-1:1.1: invalid control EP [ 120.248710][ T1212] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 120.255591][ T30] audit: type=1400 audit(1751563411.882:2): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=6171 comm="syz.2.72" [ 120.305029][ T5934] usb 2-1: config 0 descriptor?? [ 121.065043][ T6194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.091373][ T6194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.096501][ T1212] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 121.108232][ T6200] overlayfs: missing 'lowerdir' [ 121.111173][ T1212] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 121.142025][ T1212] usb 4-1: USB disconnect, device number 2 [ 121.151450][ T6200] overlayfs: missing 'lowerdir' [ 121.192215][ T5934] HID 045e:07da: Invalid code 65791 type 1 [ 121.254393][ T5934] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input6 [ 121.562102][ T5934] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 121.634776][ T5823] usb 3-1: USB disconnect, device number 2 [ 121.653127][ T5934] usb 2-1: USB disconnect, device number 5 [ 121.930559][ T6205] fido_id[6205]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 123.301272][ T6220] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 123.525756][ T6230] 8021q: VLANs not supported on ip6gre0 [ 123.801993][ T6235] overlayfs: missing 'lowerdir' [ 123.815519][ T6235] overlayfs: missing 'lowerdir' [ 123.841219][ T6238] netlink: 'syz.4.97': attribute type 2 has an invalid length. [ 125.310938][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 125.318165][ T6257] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 125.375934][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 125.386684][ T6269] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 126.176137][ T6278] overlayfs: missing 'lowerdir' [ 126.429749][ T6282] overlayfs: missing 'lowerdir' [ 126.914642][ T6283] syz.2.110 uses obsolete (PF_INET,SOCK_PACKET) [ 127.398799][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 129.249489][ T6305] nft_compat: unsupported protocol 1 [ 129.531713][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.711183][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 129.726357][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.775081][ T6300] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 129.831057][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 129.979259][ T6321] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 130.014370][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 130.026221][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.038963][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.4.122'. [ 130.053854][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 130.068940][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.088339][ T10] usb 2-1: Product: syz [ 130.097732][ T10] usb 2-1: Manufacturer: syz [ 130.108453][ T10] usb 2-1: SerialNumber: syz [ 130.124134][ T10] usb 2-1: config 0 descriptor?? [ 130.211028][ T10] rc_core: IR keymap rc-xbox-dvd not found [ 130.217194][ T10] Registered IR keymap rc-empty [ 130.226619][ T10] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 130.301868][ T5934] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.329042][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 130.461017][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 130.497240][ T6316] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 131.150907][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 133.230883][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 133.261764][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.268381][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.769096][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 133.769103][ T24] usb 2-1: USB disconnect, device number 6 [ 135.207628][ T6354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.130'. [ 135.291678][ T5934] usb 1-1: device descriptor read/all, error -71 [ 135.681417][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.132'. [ 135.692378][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.132'. [ 136.226260][ T6372] QAT: failed to copy from user cfg_data. [ 136.961281][ T6367] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 137.052957][ T6373] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 137.112104][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.191552][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 138.683261][ T6402] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.145'. [ 139.363083][ T6411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.608742][ T6405] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 140.219882][ T6410] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 140.280925][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 140.557728][ T6434] 8021q: VLANs not supported on ip6gre0 [ 141.375462][ T6451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.390901][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 142.651184][ T6443] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 142.904512][ T6457] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 143.798034][ T5925] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.847736][ T5925] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.896920][ T6484] syz_tun: entered allmulticast mode [ 143.918214][ T6483] syz_tun: left allmulticast mode [ 144.176729][ T30] audit: type=1326 audit(1751563435.812:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 144.176787][ T30] audit: type=1326 audit(1751563435.812:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 144.176832][ T30] audit: type=1326 audit(1751563435.812:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2312b8d3df code=0x7ffc0000 [ 144.176886][ T30] audit: type=1326 audit(1751563435.812:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 144.176931][ T30] audit: type=1326 audit(1751563435.812:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 144.176975][ T30] audit: type=1326 audit(1751563435.812:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 144.177021][ T30] audit: type=1326 audit(1751563435.812:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 144.177070][ T30] audit: type=1326 audit(1751563435.812:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 144.177114][ T30] audit: type=1326 audit(1751563435.812:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2312b8d290 code=0x7ffc0000 [ 144.450880][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 145.407235][ T6497] Unsupported ieee802154 address type: 0 [ 145.433879][ T10] IPVS: starting estimator thread 0... [ 145.439467][ T30] audit: type=1326 audit(1751563437.052:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 145.552390][ T6499] IPVS: using max 30 ests per chain, 72000 per kthread [ 146.504603][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.732722][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.801141][ T6510] syz_tun: entered allmulticast mode [ 146.862056][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.922241][ T6508] syz_tun: left allmulticast mode [ 147.057859][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.647547][ T36] bridge_slave_1: left allmulticast mode [ 147.674715][ T36] bridge_slave_1: left promiscuous mode [ 147.681882][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.111121][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.124170][ T36] bridge_slave_0: left allmulticast mode [ 148.145784][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.161332][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.335651][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.335670][ T36] bridge_slave_0: left promiscuous mode [ 148.367722][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.368105][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.421730][ T6535] Unsupported ieee802154 address type: 0 [ 150.521890][ T5840] Bluetooth: hci0: command tx timeout [ 151.450851][ T6578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 152.369652][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.409448][ T5840] Bluetooth: hci0: command tx timeout [ 153.791102][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.881535][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.934730][ T36] bond0 (unregistering): Released all slaves [ 154.545034][ T6550] syz_tun: entered allmulticast mode [ 154.551779][ T6550] syz_tun: left allmulticast mode [ 155.095616][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 155.095638][ T30] audit: type=1326 audit(1751563446.732:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 155.240665][ T30] audit: type=1326 audit(1751563446.732:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 155.253287][ T6602] Unsupported ieee802154 address type: 0 [ 155.385459][ T30] audit: type=1326 audit(1751563446.732:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2312b8d3df code=0x7ffc0000 [ 155.454356][ T30] audit: type=1326 audit(1751563446.732:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 155.481961][ T30] audit: type=1326 audit(1751563446.772:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 155.504235][ T5840] Bluetooth: hci0: command tx timeout [ 155.604425][ T30] audit: type=1326 audit(1751563446.772:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 155.707851][ T30] audit: type=1326 audit(1751563446.772:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 155.735395][ T30] audit: type=1326 audit(1751563446.772:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 155.866174][ T30] audit: type=1326 audit(1751563446.772:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 155.995548][ T30] audit: type=1326 audit(1751563446.772:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 156.901877][ T6619] vxfs: WRONG superblock magic 00000000 at 1 [ 156.909469][ T6619] vxfs: WRONG superblock magic 00000000 at 8 [ 156.915611][ T6619] vxfs: can't find superblock. [ 157.173374][ T6617] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 157.560973][ T5840] Bluetooth: hci0: command tx timeout [ 158.101472][ T36] hsr_slave_0: left promiscuous mode [ 158.213472][ T36] hsr_slave_1: left promiscuous mode [ 158.230544][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.256911][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.336448][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.344635][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.450067][ T36] veth1_macvtap: left promiscuous mode [ 158.613903][ T36] veth0_macvtap: left promiscuous mode [ 158.619709][ T36] veth1_vlan: left promiscuous mode [ 158.629479][ T36] veth0_vlan: left promiscuous mode [ 161.102389][ T6654] nft_compat: unsupported protocol 1 [ 161.394516][ T1212] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.516699][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 161.516719][ T30] audit: type=1326 audit(1751563453.152:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10c98e929 code=0x7ffc0000 [ 161.552635][ T30] audit: type=1326 audit(1751563453.182:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa10c98e929 code=0x7ffc0000 [ 161.597392][ T30] audit: type=1326 audit(1751563453.182:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10c98e929 code=0x7ffc0000 [ 161.661602][ T1212] usb 1-1: Using ep0 maxpacket: 16 [ 161.685417][ T1212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.694179][ T30] audit: type=1326 audit(1751563453.182:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10c98e929 code=0x7ffc0000 [ 161.745795][ T1212] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 161.745874][ T30] audit: type=1326 audit(1751563453.182:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa10c98e929 code=0x7ffc0000 [ 161.805388][ T1212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 161.811377][ T30] audit: type=1326 audit(1751563453.182:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10c98e929 code=0x7ffc0000 [ 161.850058][ T30] audit: type=1326 audit(1751563453.182:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10c98e929 code=0x7ffc0000 [ 161.875316][ T30] audit: type=1326 audit(1751563453.182:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa10c98e929 code=0x7ffc0000 [ 161.946496][ T30] audit: type=1326 audit(1751563453.182:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa10c92ab19 code=0x7ffc0000 [ 161.972211][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.993350][ T5823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.075153][ T1212] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.087730][ T30] audit: type=1326 audit(1751563453.182:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10c98e929 code=0x7ffc0000 [ 162.204677][ T1212] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 162.248479][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.307317][ T1212] usb 1-1: Product: syz [ 162.314358][ T1212] usb 1-1: Manufacturer: syz [ 162.319108][ T1212] usb 1-1: SerialNumber: syz [ 162.357742][ T1212] usb 1-1: config 0 descriptor?? [ 162.564653][ T1212] rc_core: IR keymap rc-xbox-dvd not found [ 162.620818][ T1212] Registered IR keymap rc-empty [ 162.633116][ T1212] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 162.673497][ T1212] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 163.168645][ T6654] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.226261][ T36] team0 (unregistering): Port device team_slave_1 removed [ 163.246935][ T6682] 9pnet_virtio: no channels available for device syz [ 163.697352][ T1212] usb 1-1: USB disconnect, device number 4 [ 163.697453][ C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 163.759333][ T36] team0 (unregistering): Port device team_slave_0 removed [ 164.211251][ T6673] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 164.264359][ T6677] bond0: option arp_interval: invalid value (18446744072537331903) [ 164.300801][ T6677] bond0: option arp_interval: allowed values 0 - 2147483647 [ 164.321025][ T6677] Zero length message leads to an empty skb [ 164.376452][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 164.566872][ T6686] 8021q: VLANs not supported on ip6gre0 [ 164.699195][ T6690] dvmrp0: entered allmulticast mode [ 164.805247][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.826396][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.848267][ T6531] bridge_slave_0: entered allmulticast mode [ 164.866757][ T6531] bridge_slave_0: entered promiscuous mode [ 164.902888][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.917879][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.934094][ T6531] bridge_slave_1: entered allmulticast mode [ 164.943733][ T6531] bridge_slave_1: entered promiscuous mode [ 164.959671][ T36] IPVS: stop unused estimator thread 0... [ 164.995956][ T6706] dlm: Unknown command passed to DLM device : 16 [ 164.995956][ T6706] [ 165.063696][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.099851][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.158709][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.264717][ T6531] team0: Port device team_slave_0 added [ 165.283060][ T6531] team0: Port device team_slave_1 added [ 165.442092][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.449190][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.544348][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.565360][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.573316][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.656647][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.035278][ T1212] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 167.063345][ T6531] hsr_slave_0: entered promiscuous mode [ 167.076788][ T6531] hsr_slave_1: entered promiscuous mode [ 167.084258][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.220870][ T1212] usb 4-1: Using ep0 maxpacket: 16 [ 167.245716][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 167.281863][ T1212] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 167.293096][ T1212] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 167.309451][ T1212] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 167.324845][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.336859][ T1212] usb 4-1: Product: syz [ 167.346662][ T1212] usb 4-1: Manufacturer: syz [ 167.355295][ T1212] usb 4-1: SerialNumber: syz [ 167.361925][ T6739] 8021q: VLANs not supported on ip6gre0 [ 167.380685][ T1212] usb 4-1: config 0 descriptor?? [ 167.411648][ T6730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 167.420408][ T1212] mcba_usb 4-1:0.0: Can't find endpoints [ 167.632058][ T1212] usb 4-1: USB disconnect, device number 3 [ 167.725491][ T5895] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 168.263418][ T5895] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 168.693811][ T6748] fido_id[6748]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 169.877883][ T6531] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.058177][ T6531] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.146394][ T6531] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.236795][ T6531] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.022613][ T6790] QAT: failed to copy from user cfg_data. [ 171.127707][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.260217][ T6531] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.305749][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.313905][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.415448][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.422741][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.647419][ T6829] affs: No valid root block on device nullb0 [ 174.751808][ T5823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.111680][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.114061][ T6860] bridge0: port 3(vlan2) entered blocking state [ 177.151062][ T6860] bridge0: port 3(vlan2) entered disabled state [ 177.160257][ T6860] vlan2: entered allmulticast mode [ 177.171716][ T6860] bond0: entered allmulticast mode [ 177.176891][ T6860] bond_slave_0: entered allmulticast mode [ 177.295182][ T6860] bond_slave_1: entered allmulticast mode [ 177.373562][ T6860] vlan2: entered promiscuous mode [ 177.387709][ T6860] bond0: entered promiscuous mode [ 177.400837][ T6860] bond_slave_0: entered promiscuous mode [ 177.416961][ T6860] bond_slave_1: entered promiscuous mode [ 177.630087][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 177.630104][ T30] audit: type=1326 audit(1751563469.262:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 177.830238][ T30] audit: type=1326 audit(1751563469.262:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb2c718d3df code=0x7ffc0000 [ 177.833583][ T6531] veth0_vlan: entered promiscuous mode [ 177.852657][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.028549][ T6531] veth1_vlan: entered promiscuous mode [ 178.181029][ T30] audit: type=1326 audit(1751563469.262:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 178.203327][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.256523][ T6876] Unsupported ieee802154 address type: 0 [ 178.268631][ T30] audit: type=1326 audit(1751563469.262:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 178.294272][ T30] audit: type=1326 audit(1751563469.262:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 178.317038][ T30] audit: type=1326 audit(1751563469.262:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 178.339128][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.368526][ T6531] veth0_macvtap: entered promiscuous mode [ 178.378942][ T6531] veth1_macvtap: entered promiscuous mode [ 178.385520][ T5895] IPVS: starting estimator thread 0... [ 178.413113][ T30] audit: type=1326 audit(1751563469.262:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 178.435336][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.549997][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.607792][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.615698][ T30] audit: type=1326 audit(1751563469.262:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2c718d290 code=0x7ffc0000 [ 178.637889][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.650877][ T6881] IPVS: using max 24 ests per chain, 57600 per kthread [ 178.943654][ T6888] vxfs: WRONG superblock magic 00000000 at 1 [ 178.951309][ T6888] vxfs: WRONG superblock magic 00000000 at 8 [ 178.957375][ T6888] vxfs: can't find superblock. [ 179.118730][ T6887] ceph: No mds server is up or the cluster is laggy [ 179.235417][ T1212] libceph: connect (1)[c::]:6789 error -101 [ 179.303334][ T1212] libceph: mon0 (1)[c::]:6789 connect error [ 179.315973][ T1148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.318399][ T30] audit: type=1326 audit(1751563469.262:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 179.349895][ T30] audit: type=1326 audit(1751563469.262:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 179.367025][ T1148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.372161][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.581876][ T6895] sctp: [Deprecated]: syz.4.278 (pid 6895) Use of int in maxseg socket option. [ 179.581876][ T6895] Use struct sctp_assoc_value instead [ 179.607313][ T5895] IPVS: starting estimator thread 0... [ 179.705282][ T1148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.720863][ T6897] IPVS: using max 28 ests per chain, 67200 per kthread [ 179.767010][ T1148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.794248][ T6895] Unsupported ieee802154 address type: 0 [ 180.063545][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.101572][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.607703][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.505435][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.571220][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.569499][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.103571][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.496340][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.773475][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.966098][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.202855][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.431406][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.301'. [ 184.940913][ T1212] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.107393][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'. [ 185.970821][ T1212] usb 6-1: Using ep0 maxpacket: 32 [ 185.977102][ T37] bridge_slave_1: left allmulticast mode [ 185.994693][ T37] bridge_slave_1: left promiscuous mode [ 186.000455][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.046240][ T1212] usb 6-1: config 0 has an invalid interface number: 195 but max is 0 [ 186.060369][ T37] bridge_slave_0: left allmulticast mode [ 186.079923][ T37] bridge_slave_0: left promiscuous mode [ 186.103336][ T1212] usb 6-1: config 0 has no interface number 0 [ 186.110194][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.129972][ T1212] usb 6-1: New USB device found, idVendor=1199, idProduct=901b, bcdDevice=26.16 [ 186.170860][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.178931][ T1212] usb 6-1: Product: syz [ 186.210844][ T1212] usb 6-1: Manufacturer: syz [ 186.215573][ T1212] usb 6-1: SerialNumber: syz [ 186.247598][ T1212] usb 6-1: config 0 descriptor?? [ 186.274310][ T5823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.369621][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.392637][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.411782][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.428098][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.445829][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.735752][ T1212] usb 6-1: USB disconnect, device number 2 [ 186.913013][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.525370][ T7021] fuse: Bad value for 'rootmode' [ 187.820981][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.959783][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.969688][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.980067][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.989025][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.998661][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.038072][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.074177][ T37] bond0 (unregistering): Released all slaves [ 188.191948][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.511784][ T5840] Bluetooth: hci1: command tx timeout [ 188.787269][ T7047] fuse: Bad value for 'rootmode' [ 188.834651][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.021890][ T37] hsr_slave_0: left promiscuous mode [ 189.109570][ T37] hsr_slave_1: left promiscuous mode [ 189.218672][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.310863][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.466964][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.574680][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.799076][ T37] veth1_macvtap: left promiscuous mode [ 189.811418][ T7056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.878944][ T37] veth0_macvtap: left promiscuous mode [ 189.895329][ T37] veth1_vlan: left promiscuous mode [ 189.906615][ T37] veth0_vlan: left promiscuous mode [ 189.977383][ T7062] netlink: 76 bytes leftover after parsing attributes in process `syz.3.329'. [ 190.015105][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.033084][ T5840] Bluetooth: hci3: command tx timeout [ 190.085864][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 190.123773][ T24] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.590864][ T5840] Bluetooth: hci1: command tx timeout [ 191.217941][ T37] team0 (unregistering): Port device team_slave_1 removed [ 191.338863][ T37] team0 (unregistering): Port device team_slave_0 removed [ 192.042692][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.057307][ T5823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.112881][ T5840] Bluetooth: hci3: command tx timeout [ 192.700363][ T5840] Bluetooth: hci1: command tx timeout [ 193.312539][ T7106] netlink: 40 bytes leftover after parsing attributes in process `syz.5.339'. [ 193.570768][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.960103][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.191187][ T5840] Bluetooth: hci3: command tx timeout [ 194.282202][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 194.616229][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.651809][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.663320][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.751061][ T5840] Bluetooth: hci1: command tx timeout [ 194.889935][ T6985] chnl_net:caif_netlink_parms(): no params data found [ 195.159467][ T7027] chnl_net:caif_netlink_parms(): no params data found [ 195.336353][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.270888][ T5840] Bluetooth: hci3: command tx timeout [ 196.465207][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.773287][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.850828][ T5823] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 197.024352][ T5823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.145381][ T5823] usb 6-1: config 0 has no interfaces? [ 197.151859][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.160313][ T5823] usb 6-1: New USB device found, idVendor=27b8, idProduct=016f, bcdDevice= 0.00 [ 197.173295][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.184068][ T5823] usb 6-1: config 0 descriptor?? [ 197.193766][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.210575][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.228121][ T6985] bridge_slave_0: entered allmulticast mode [ 197.238970][ T6985] bridge_slave_0: entered promiscuous mode [ 197.269545][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.295633][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.308056][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.316765][ T7027] bridge_slave_0: entered allmulticast mode [ 197.331847][ T7027] bridge_slave_0: entered promiscuous mode [ 197.339919][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.348877][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.356870][ T6985] bridge_slave_1: entered allmulticast mode [ 197.361162][ T7163] fuse: Unknown parameter 'use00000000000000000000' [ 197.369443][ T6985] bridge_slave_1: entered promiscuous mode [ 197.384683][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.405299][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.471457][ T7027] bridge_slave_1: entered allmulticast mode [ 197.487594][ T7027] bridge_slave_1: entered promiscuous mode [ 197.695858][ T7170] capability: warning: `syz.3.349' uses 32-bit capabilities (legacy support in use) [ 197.727825][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 197.727854][ T30] audit: type=1326 audit(1751563489.332:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 197.767278][ T30] audit: type=1326 audit(1751563489.332:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 197.791599][ T30] audit: type=1326 audit(1751563489.332:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 197.819141][ T7027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.833546][ T7027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.863342][ T30] audit: type=1326 audit(1751563489.332:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 197.889204][ T6985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.896779][ T30] audit: type=1326 audit(1751563489.332:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 197.926622][ T6985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.926725][ T30] audit: type=1326 audit(1751563489.332:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 197.966796][ T30] audit: type=1326 audit(1751563489.342:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 197.996279][ T30] audit: type=1326 audit(1751563489.342:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 198.090533][ T30] audit: type=1326 audit(1751563489.342:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 198.127627][ T30] audit: type=1326 audit(1751563489.342:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 198.197627][ T7027] team0: Port device team_slave_0 added [ 198.314778][ T7027] team0: Port device team_slave_1 added [ 198.647963][ T6985] team0: Port device team_slave_0 added [ 198.672537][ T7176] overlayfs: missing 'lowerdir' [ 198.695343][ T7176] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 198.867716][ T6985] team0: Port device team_slave_1 added [ 198.946171][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.975179][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.091035][ T7027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.180676][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.204875][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.258302][ T7027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.501521][ T37] bridge_slave_1: left allmulticast mode [ 199.521579][ T37] bridge_slave_1: left promiscuous mode [ 199.538621][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.625307][ T37] bridge_slave_0: left allmulticast mode [ 199.695847][ T37] bridge_slave_0: left promiscuous mode [ 199.714737][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.047926][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.201670][ T5895] usb 6-1: USB disconnect, device number 3 [ 200.392551][ T3547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.836760][ T7203] fuse: Unknown parameter 'use00000000000000000000' [ 201.694071][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.712285][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.729487][ T37] bond0 (unregistering): Released all slaves [ 201.770680][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.779212][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.827705][ T6985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.843585][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.850912][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.884120][ T6985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.438346][ T7222] overlayfs: missing 'lowerdir' [ 202.465223][ T7222] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 202.577203][ T7027] hsr_slave_0: entered promiscuous mode [ 202.664495][ T7027] hsr_slave_1: entered promiscuous mode [ 202.673754][ T7027] debugfs: 'hsr0' already exists in 'hsr' [ 202.685933][ T7027] Cannot create hsr debugfs directory [ 202.913412][ T3518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.124480][ T7233] fuse: Bad value for 'fd' [ 204.397332][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 204.421387][ T24] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 204.606019][ T6985] hsr_slave_0: entered promiscuous mode [ 204.621572][ T6985] hsr_slave_1: entered promiscuous mode [ 204.641117][ T6985] debugfs: 'hsr0' already exists in 'hsr' [ 204.658032][ T6985] Cannot create hsr debugfs directory [ 204.805776][ T37] hsr_slave_0: left promiscuous mode [ 204.885219][ T37] hsr_slave_1: left promiscuous mode [ 204.895957][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.956204][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.973461][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.991151][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.036117][ T37] veth1_macvtap: left promiscuous mode [ 205.061164][ T37] veth0_macvtap: left promiscuous mode [ 205.105813][ T37] veth1_vlan: left promiscuous mode [ 205.135397][ T37] veth0_vlan: left promiscuous mode [ 205.478190][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.877591][ T7274] netlink: 52 bytes leftover after parsing attributes in process `syz.3.371'. [ 206.111500][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.634593][ T37] team0 (unregistering): Port device team_slave_1 removed [ 206.679283][ T37] team0 (unregistering): Port device team_slave_0 removed [ 208.686974][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.728285][ T7302] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 208.778862][ T7302] Cannot find set identified by id 0 to match [ 209.006463][ T37] IPVS: stop unused estimator thread 0... [ 209.902410][ T7311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.176572][ T6985] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.260455][ T6985] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.435200][ T6985] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 210.439958][ T5895] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 210.497004][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 210.535510][ T6985] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.611004][ T5895] usb 6-1: device descriptor read/64, error -71 [ 210.859500][ T7027] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 210.871194][ T5934] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.881170][ T5895] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 210.941972][ T7027] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 210.969821][ T7027] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 210.997461][ T7027] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 211.031557][ T5895] usb 6-1: device descriptor read/64, error -71 [ 211.032358][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 211.073230][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.153594][ T5895] usb usb6-port1: attempt power cycle [ 211.163799][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.189410][ T5934] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 211.213376][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.231399][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.242739][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.267448][ T5934] usb 4-1: config 0 descriptor?? [ 211.335094][ T6985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.429300][ T6985] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.467222][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.474511][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.522012][ T5895] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 211.551751][ T5895] usb 6-1: device descriptor read/8, error -71 [ 211.644955][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.652189][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.757867][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 211.768724][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 211.820906][ T5895] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 211.861432][ T5895] usb 6-1: device descriptor read/8, error -71 [ 211.871528][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.895989][ T5934] usb 4-1: USB disconnect, device number 4 [ 211.927484][ T7027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.971440][ T5895] usb usb6-port1: unable to enumerate USB device [ 212.026195][ T7027] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.058890][ T548] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.066230][ T548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.133811][ T548] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.141115][ T548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.873247][ T6985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.183526][ T7389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.857257][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.911724][ T7027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.073682][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.470992][ T6985] veth0_vlan: entered promiscuous mode [ 216.542645][ T6985] veth1_vlan: entered promiscuous mode [ 217.017639][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 218.335766][ T5155] Bluetooth: hci2: command 0x0406 tx timeout [ 218.343081][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 218.357313][ T6985] veth0_macvtap: entered promiscuous mode [ 218.371325][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 218.442193][ T6985] veth1_macvtap: entered promiscuous mode [ 218.682432][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.746779][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.773951][ T7027] veth0_vlan: entered promiscuous mode [ 218.806120][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.936768][ T7027] veth1_vlan: entered promiscuous mode [ 219.020599][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.108865][ T7424] netlink: 20 bytes leftover after parsing attributes in process `syz.5.394'. [ 219.115591][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.165916][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.324738][ T7027] veth0_macvtap: entered promiscuous mode [ 219.360459][ T7027] veth1_macvtap: entered promiscuous mode [ 219.385451][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.420602][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.438705][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.448705][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.461412][ T5934] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 219.498641][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.544742][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.641542][ T5934] usb 1-1: device descriptor read/64, error -71 [ 219.653794][ T7435] fuse: Bad value for 'fd' [ 219.683046][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.696889][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.869119][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.884334][ T5934] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 219.955134][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.017083][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.034055][ T5934] usb 1-1: device descriptor read/64, error -71 [ 220.216276][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.242328][ T5934] usb usb1-port1: attempt power cycle [ 220.248869][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.628461][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.654261][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.691227][ T5934] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 220.733812][ T5934] usb 1-1: device descriptor read/8, error -71 [ 220.980846][ T5934] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 221.013765][ T5934] usb 1-1: device descriptor read/8, error -71 [ 221.156504][ T5934] usb usb1-port1: unable to enumerate USB device [ 222.016042][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.185510][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.214858][ T3547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.353466][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.400815][ T5934] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 227.549872][ T5934] usb 7-1: config 0 has no interfaces? [ 227.572731][ T5934] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 227.590886][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.598931][ T5934] usb 7-1: Product: syz [ 227.651056][ T5934] usb 7-1: Manufacturer: syz [ 227.686659][ T5934] usb 7-1: SerialNumber: syz [ 227.870579][ T7517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.415'. [ 228.638886][ T5934] usb 7-1: config 0 descriptor?? [ 228.898638][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 228.898657][ T30] audit: type=1326 audit(1751563520.532:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 229.177667][ T7531] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 229.541895][ T30] audit: type=1326 audit(1751563520.542:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 229.564454][ T30] audit: type=1326 audit(1751563520.542:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 229.588053][ T30] audit: type=1326 audit(1751563520.542:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 229.644147][ T30] audit: type=1326 audit(1751563520.542:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 229.671296][ T30] audit: type=1326 audit(1751563520.542:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 229.695305][ T30] audit: type=1326 audit(1751563520.542:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 229.722485][ T30] audit: type=1326 audit(1751563520.542:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 229.862332][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.874673][ T3518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.897107][ T30] audit: type=1326 audit(1751563520.542:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 229.919827][ T30] audit: type=1326 audit(1751563520.542:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 229.942023][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.439362][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.441470][ T5823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.166513][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.246824][ T5934] usb 7-1: USB disconnect, device number 2 [ 234.850936][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 234.850954][ T30] audit: type=1326 audit(1751563526.472:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 235.400337][ T30] audit: type=1326 audit(1751563526.472:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 235.426142][ T30] audit: type=1326 audit(1751563526.532:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 235.450397][ T30] audit: type=1326 audit(1751563526.532:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 235.540299][ T30] audit: type=1326 audit(1751563526.532:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 235.583631][ T5925] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.596674][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.621507][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.690942][ T30] audit: type=1326 audit(1751563526.532:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 235.713473][ T30] audit: type=1326 audit(1751563526.532:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 235.737680][ T30] audit: type=1326 audit(1751563526.532:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 235.761421][ T30] audit: type=1326 audit(1751563526.542:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 235.774210][ T5925] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.784028][ T30] audit: type=1326 audit(1751563526.542:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 236.100914][ T1212] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 236.193990][ T3518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.290783][ T1212] usb 4-1: Using ep0 maxpacket: 32 [ 236.322714][ T1212] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 236.355460][ T1212] usb 4-1: config 0 has no interface number 0 [ 236.403565][ T1212] usb 4-1: New USB device found, idVendor=1199, idProduct=901b, bcdDevice=26.16 [ 236.494734][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.518331][ T1212] usb 4-1: Product: syz [ 236.532198][ T1212] usb 4-1: Manufacturer: syz [ 236.572536][ T1212] usb 4-1: SerialNumber: syz [ 236.648567][ T1212] usb 4-1: config 0 descriptor?? [ 236.837569][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.299791][ T1212] usb 4-1: USB disconnect, device number 5 [ 238.108375][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 239.041540][ T7656] kvm: pic: single mode not supported [ 239.042547][ T7656] kvm: pic: non byte write [ 239.101044][ T7656] kvm: pic: non byte write [ 239.121946][ T7656] kvm: pic: single mode not supported [ 239.122173][ T7656] kvm: pic: level sensitive irq not supported [ 239.151385][ T7656] kvm: pic: non byte write [ 239.203197][ T7656] kvm: pic: non byte write [ 240.066512][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 240.066533][ T30] audit: type=1326 audit(1751563531.702:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 240.319480][ T7678] Unsupported ieee802154 address type: 0 [ 240.747616][ T30] audit: type=1326 audit(1751563531.702:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 240.880595][ T30] audit: type=1326 audit(1751563531.702:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 241.002443][ T30] audit: type=1326 audit(1751563531.702:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 241.109177][ T7686] bridge0: port 3(vlan2) entered blocking state [ 241.160938][ T30] audit: type=1326 audit(1751563531.742:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 241.189339][ T7686] bridge0: port 3(vlan2) entered disabled state [ 241.221291][ T7686] vlan2: entered allmulticast mode [ 241.241449][ T7686] bond0: entered allmulticast mode [ 241.285720][ T7686] bond_slave_0: entered allmulticast mode [ 241.315467][ T7686] bond_slave_1: entered allmulticast mode [ 241.318479][ T3518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.332572][ T3547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.354014][ T30] audit: type=1326 audit(1751563531.742:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 241.376228][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.385845][ T7686] vlan2: entered promiscuous mode [ 241.445570][ T30] audit: type=1326 audit(1751563531.742:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2c718d290 code=0x7ffc0000 [ 241.452726][ T7686] bond0: entered promiscuous mode [ 241.531350][ T30] audit: type=1326 audit(1751563531.742:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 241.622186][ T7686] bond_slave_0: entered promiscuous mode [ 241.707087][ T7686] bond_slave_1: entered promiscuous mode [ 241.731290][ T30] audit: type=1326 audit(1751563531.752:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 242.234193][ T3518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.489865][ T30] audit: type=1326 audit(1751563531.752:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c718e929 code=0x7ffc0000 [ 242.599258][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.967553][ T7715] affs: No valid root block on device nullb0 [ 243.400565][ T7722] netlink: 16 bytes leftover after parsing attributes in process `syz.7.466'. [ 244.366378][ T5925] IPVS: starting estimator thread 0... [ 244.409418][ T7727] Unsupported ieee802154 address type: 0 [ 244.521952][ T7729] IPVS: using max 26 ests per chain, 62400 per kthread [ 245.915551][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 245.915571][ T30] audit: type=1326 audit(1751563537.552:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.7.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc624b8e929 code=0x7ffc0000 [ 245.990866][ T30] audit: type=1326 audit(1751563537.602:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.7.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc624b8e929 code=0x7ffc0000 [ 246.261245][ T30] audit: type=1326 audit(1751563537.602:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.7.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc624b8e929 code=0x7ffc0000 [ 246.286176][ T30] audit: type=1326 audit(1751563537.602:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.7.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc624b8e929 code=0x7ffc0000 [ 246.351920][ T30] audit: type=1326 audit(1751563537.602:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.7.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc624b8e929 code=0x7ffc0000 [ 246.481853][ T30] audit: type=1326 audit(1751563537.602:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.7.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc624b8e929 code=0x7ffc0000 [ 246.504591][ T30] audit: type=1326 audit(1751563537.602:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.7.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc624b8e929 code=0x7ffc0000 [ 246.527011][ T30] audit: type=1326 audit(1751563537.612:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.7.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc624b8e929 code=0x7ffc0000 [ 246.549348][ T30] audit: type=1326 audit(1751563537.612:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.7.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc624b8e929 code=0x7ffc0000 [ 246.595532][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.472'. [ 246.604603][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.472'. [ 246.650094][ T30] audit: type=1326 audit(1751563537.612:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.7.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc624b8e929 code=0x7ffc0000 [ 247.072889][ T3547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.073895][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.962198][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.459970][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.861395][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.484'. [ 248.870312][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.484'. [ 249.410872][ T7800] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 249.714551][ T51] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 250.456727][ T7828] netlink: 24 bytes leftover after parsing attributes in process `syz.7.491'. [ 250.820845][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 251.493003][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 252.793556][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.844571][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 253.041745][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.051296][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.051659][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 253.071442][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.080910][ T1148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.083775][ T24] usb 8-1: config 0 descriptor?? [ 253.126652][ T5823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.374924][ T5895] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 253.429184][ T7857] fuse: Bad value for 'fd' [ 253.478627][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.552610][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 253.573863][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.609488][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.664506][ T5895] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.666759][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 253.666778][ T30] audit: type=1326 audit(1751563545.262:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 253.720364][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 253.745353][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 253.750586][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 254.869730][ T24] usb 8-1: USB disconnect, device number 2 [ 254.896980][ T30] audit: type=1326 audit(1751563545.262:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 254.907009][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.943653][ T5895] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 254.954705][ T7864] sctp: [Deprecated]: syz.0.501 (pid 7864) Use of int in maxseg socket option. [ 254.954705][ T7864] Use struct sctp_assoc_value instead [ 254.993663][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.050209][ T5895] usb 7-1: config 0 descriptor?? [ 255.053537][ T30] audit: type=1326 audit(1751563545.282:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2312b8d3df code=0x7ffc0000 [ 255.125705][ T5895] usb 7-1: can't set config #0, error -71 [ 255.182071][ T5895] usb 7-1: USB disconnect, device number 3 [ 255.208732][ T30] audit: type=1326 audit(1751563545.282:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 255.676490][ T30] audit: type=1326 audit(1751563545.282:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 255.831140][ T30] audit: type=1326 audit(1751563545.282:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 256.042836][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.056328][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.062997][ T30] audit: type=1326 audit(1751563545.282:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 256.269926][ T30] audit: type=1326 audit(1751563545.282:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 256.430655][ T30] audit: type=1326 audit(1751563545.282:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 256.537187][ T30] audit: type=1326 audit(1751563545.282:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 258.535774][ T7913] fuse: Bad value for 'fd' [ 258.617631][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.628892][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.660928][ T3518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.673484][ T3547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.335847][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.515'. [ 259.614257][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 259.614278][ T30] audit: type=1326 audit(1751563551.252:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb018e929 code=0x7ffc0000 [ 259.706355][ T30] audit: type=1326 audit(1751563551.252:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb018e929 code=0x7ffc0000 [ 259.816080][ T5823] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 259.932276][ T30] audit: type=1326 audit(1751563551.312:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7eb018d3df code=0x7ffc0000 [ 260.118804][ T30] audit: type=1326 audit(1751563551.332:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb018e929 code=0x7ffc0000 [ 260.134100][ T24] IPVS: starting estimator thread 0... [ 260.141463][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 260.159102][ T7936] sctp: [Deprecated]: syz.6.516 (pid 7936) Use of int in maxseg socket option. [ 260.159102][ T7936] Use struct sctp_assoc_value instead [ 260.504883][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.515550][ T30] audit: type=1326 audit(1751563551.332:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb018e929 code=0x7ffc0000 [ 260.519532][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.540057][ T30] audit: type=1326 audit(1751563551.332:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7eb018e929 code=0x7ffc0000 [ 260.571236][ T30] audit: type=1326 audit(1751563551.332:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb018e929 code=0x7ffc0000 [ 260.591347][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.593874][ T30] audit: type=1326 audit(1751563551.332:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eb018e929 code=0x7ffc0000 [ 260.627431][ T7941] IPVS: using max 28 ests per chain, 67200 per kthread [ 260.635062][ T30] audit: type=1326 audit(1751563551.332:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb018e929 code=0x7ffc0000 [ 260.985491][ T30] audit: type=1326 audit(1751563551.332:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7eb018d290 code=0x7ffc0000 [ 261.010953][ T5823] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 261.066298][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.164477][ T5823] usb 4-1: config 0 descriptor?? [ 262.320182][ T5823] usbhid 4-1:0.0: can't add hid device: -71 [ 262.351442][ T5823] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 262.401864][ T5823] usb 4-1: USB disconnect, device number 6 [ 262.433427][ T5910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.548134][ T7974] fuse: Bad value for 'fd' [ 263.791983][ T1014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.290323][ T8001] trusted_key: syz.5.528 sent an empty control message without MSG_MORE. [ 264.463930][ T3518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.475381][ T1014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.492068][ T3547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.577837][ T7989] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 264.663593][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 264.663613][ T30] audit: type=1326 audit(1751563556.302:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 264.849500][ T8009] sctp: [Deprecated]: syz.0.530 (pid 8009) Use of int in maxseg socket option. [ 264.849500][ T8009] Use struct sctp_assoc_value instead [ 265.202130][ T30] audit: type=1326 audit(1751563556.302:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 265.229220][ T30] audit: type=1326 audit(1751563556.342:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2312b8d3df code=0x7ffc0000 [ 265.262882][ T30] audit: type=1326 audit(1751563556.342:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 265.286372][ T30] audit: type=1326 audit(1751563556.342:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 265.321537][ T30] audit: type=1326 audit(1751563556.342:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 265.417041][ T30] audit: type=1326 audit(1751563556.342:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 265.494254][ T30] audit: type=1326 audit(1751563556.342:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 265.521632][ T30] audit: type=1326 audit(1751563556.342:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 265.648723][ T30] audit: type=1326 audit(1751563556.342:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2312b8e929 code=0x7ffc0000 [ 265.871245][ T5840] Bluetooth: hci0: command 0x080f tx timeout [ 266.030951][ T5927] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 266.277081][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.442559][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 266.469104][ T5927] usb 1-1: config 0 has an invalid interface number: 195 but max is 0 [ 266.487856][ T5927] usb 1-1: config 0 has no interface number 0 [ 266.516882][ T5927] usb 1-1: New USB device found, idVendor=1199, idProduct=901b, bcdDevice=26.16 [ 266.538399][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.573627][ T5927] usb 1-1: Product: syz [ 266.577870][ T5927] usb 1-1: Manufacturer: syz [ 266.602780][ T5927] usb 1-1: SerialNumber: syz [ 266.643936][ T5927] usb 1-1: config 0 descriptor?? [ 267.173546][ T5927] usb 1-1: USB disconnect, device number 9 [ 267.898463][ T8058] syz_tun: entered allmulticast mode [ 268.591521][ T8050] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 268.643265][ T8069] vxfs: WRONG superblock magic 00000000 at 1 [ 268.649594][ T8069] vxfs: WRONG superblock magic 00000000 at 8 [ 268.691808][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 268.697939][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 268.708651][ T8069] vxfs: can't find superblock. [ 268.825031][ T8065] ceph: No mds server is up or the cluster is laggy [ 269.125045][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 269.133585][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 269.391877][ T8086] bridge0: port 3(vlan2) entered blocking state [ 269.416478][ T8086] bridge0: port 3(vlan2) entered disabled state [ 269.460448][ T8086] vlan2: entered allmulticast mode [ 269.475450][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.489688][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.514523][ T8086] bond0: entered allmulticast mode [ 269.561868][ T8086] bond_slave_0: entered allmulticast mode [ 269.594880][ T8086] bond_slave_1: entered allmulticast mode [ 269.643777][ T8086] vlan2: entered promiscuous mode [ 269.714737][ T5840] Bluetooth: hci0: command 0x080f tx timeout [ 269.715974][ T8086] bond0: entered promiscuous mode [ 269.806265][ T8086] bond_slave_0: entered promiscuous mode [ 269.816450][ T8086] bond_slave_1: entered promiscuous mode [ 270.115728][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.128550][ T3547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.142664][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.166476][ T8111] syz_tun: entered allmulticast mode [ 271.401574][ T1014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.725808][ T8120] overlayfs: missing 'lowerdir' [ 271.755226][ T8120] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 272.066772][ T5823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.582063][ T5823] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 272.754133][ T5823] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 272.775599][ T5823] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.838672][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 272.892978][ T8148] fuse: Bad value for 'fd' [ 272.951765][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 272.996944][ T5823] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.124967][ T5823] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.153795][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.202168][ T5823] usb 7-1: config 0 descriptor?? [ 273.248304][ T8137] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 273.302995][ T8156] syz_tun: entered allmulticast mode [ 273.474067][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 273.679324][ T5823] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 273.764718][ T5823] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 273.951765][ T5823] usb 7-1: USB disconnect, device number 4 [ 274.160126][ T8163] fido_id[8163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 275.308931][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.367099][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.384844][ T3547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.397228][ T3518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.658742][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 276.658777][ T30] audit: type=1804 audit(1751563568.242:593): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.582" name="/newroot/26/file0" dev="tmpfs" ino=156 res=1 errno=0 [ 277.152454][ T5910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.168738][ T3547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.981087][ T8229] sctp: failed to load transform for md5: -2 [ 279.077219][ T5910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.665731][ T8255] fuse: Bad value for 'fd' [ 280.225690][ T978] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 280.405869][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 280.868685][ T30] audit: type=1804 audit(1751563572.472:594): pid=8270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.596" name="/newroot/33/file0" dev="tmpfs" ino=188 res=1 errno=0 [ 281.012167][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.633380][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.654417][ T5910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.671237][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.275943][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.913136][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.940464][ T5910] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 282.970863][ T5927] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 282.992800][ T978] usb 6-1: unable to get BOS descriptor or descriptor too short [ 283.013070][ T978] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 283.040889][ T978] usb 6-1: can't read configurations, error -71 [ 283.141730][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 283.247160][ T5927] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 283.290270][ T5927] usb 4-1: config 0 has no interface number 0 [ 283.328392][ T5927] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.400486][ T5910] usb 8-1: Using ep0 maxpacket: 16 [ 283.695459][ T5927] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 283.721328][ T5910] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.732550][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 283.744691][ T5910] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 283.755897][ T5910] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.784160][ T5910] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 283.798454][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.801724][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.814770][ T5927] usb 4-1: Product: syz [ 283.820844][ T5927] usb 4-1: Manufacturer: syz [ 283.825483][ T5927] usb 4-1: SerialNumber: syz [ 283.835920][ T5927] usb 4-1: config 0 descriptor?? [ 283.875141][ T5927] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 283.896876][ T5927] em28xx 4-1:0.132: Video interface 132 found: [ 283.927531][ T5910] usb 8-1: Product: syz [ 283.956712][ T5910] usb 8-1: Manufacturer: syz [ 283.962800][ T5910] usb 8-1: SerialNumber: syz [ 283.973593][ T5910] usb 8-1: config 0 descriptor?? [ 283.985568][ T5910] mcba_usb 8-1:0.0: Can't find endpoints [ 284.232825][ T5910] usb 8-1: USB disconnect, device number 3 [ 284.331925][ T5927] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 285.370807][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.609'. [ 286.023148][ T5927] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 286.043852][ T5927] em28xx 4-1:0.132: board has no eeprom [ 286.125270][ T5927] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 286.160309][ T5927] em28xx 4-1:0.132: analog set to bulk mode. [ 286.193180][ T1212] em28xx 4-1:0.132: Registering V4L2 extension [ 286.396611][ T5910] usb 4-1: USB disconnect, device number 7 [ 286.396875][ T1212] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 286.428351][ T1212] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 286.434017][ T5910] em28xx 4-1:0.132: Disconnecting em28xx [ 286.552049][ T5934] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 286.721307][ T5934] usb 8-1: Using ep0 maxpacket: 32 [ 286.775491][ T978] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.802163][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.813601][ T5934] usb 8-1: config 0 has an invalid interface number: 195 but max is 0 [ 287.179380][ T1212] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 287.210828][ T1212] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 287.257565][ T5934] usb 8-1: config 0 has no interface number 0 [ 287.291186][ T1212] em28xx 4-1:0.132: No AC97 audio processor [ 287.324385][ T5934] usb 8-1: New USB device found, idVendor=1199, idProduct=901b, bcdDevice=26.16 [ 287.512102][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.523850][ T5934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.549160][ T3518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.560565][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.561099][ T1212] usb 4-1: Decoder not found [ 287.575959][ T5934] usb 8-1: Product: syz [ 287.580209][ T5934] usb 8-1: Manufacturer: syz [ 287.611480][ T5934] usb 8-1: SerialNumber: syz [ 288.272085][ T548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.382906][ T5934] usb 8-1: config 0 descriptor?? [ 288.400786][ T1212] em28xx 4-1:0.132: failed to create media graph [ 288.559748][ T1212] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 288.630614][ T1212] em28xx 4-1:0.132: Remote control support is not available for this card. [ 288.633285][ T8356] ================================================================== [ 288.647357][ T8356] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 288.654811][ T8356] Read of size 8 at addr ffff8880623ac738 by task v4l_id/8356 [ 288.662280][ T8356] [ 288.664638][ T8356] CPU: 0 UID: 0 PID: 8356 Comm: v4l_id Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 288.664662][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.664681][ T8356] Call Trace: [ 288.664691][ T8356] [ 288.664699][ T8356] dump_stack_lvl+0x189/0x250 [ 288.664729][ T8356] ? __virt_addr_valid+0x1c8/0x5c0 [ 288.664745][ T8356] ? rcu_is_watching+0x15/0xb0 [ 288.664770][ T8356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.664799][ T8356] ? rcu_is_watching+0x15/0xb0 [ 288.664821][ T8356] ? lock_release+0x4b/0x3e0 [ 288.664844][ T8356] ? __virt_addr_valid+0x1c8/0x5c0 [ 288.664859][ T8356] ? __virt_addr_valid+0x4a5/0x5c0 [ 288.664876][ T8356] print_report+0xd2/0x2b0 [ 288.664898][ T8356] ? v4l2_fh_open+0xc7/0x430 [ 288.664926][ T8356] kasan_report+0x118/0x150 [ 288.664960][ T8356] ? v4l2_fh_open+0xc7/0x430 [ 288.664986][ T8356] v4l2_fh_open+0xc7/0x430 [ 288.665009][ T8356] ? __pfx___mutex_lock+0x10/0x10 [ 288.665028][ T8356] em28xx_v4l2_open+0x157/0x9a0 [ 288.665060][ T8356] v4l2_open+0x20c/0x360 [ 288.665089][ T8356] chrdev_open+0x4c9/0x5e0 [ 288.665107][ T8356] ? __pfx_chrdev_open+0x10/0x10 [ 288.665125][ T8356] ? __pfx_chrdev_open+0x10/0x10 [ 288.665140][ T8356] do_dentry_open+0xdf0/0x1970 [ 288.665165][ T8356] vfs_open+0x3b/0x340 [ 288.665181][ T8356] ? path_openat+0x2ecd/0x3830 [ 288.665209][ T8356] path_openat+0x2ee5/0x3830 [ 288.665230][ T8356] ? arch_stack_walk+0xfc/0x150 [ 288.665268][ T8356] ? __pfx_path_openat+0x10/0x10 [ 288.665288][ T8356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.665313][ T8356] do_filp_open+0x1fa/0x410 [ 288.665336][ T8356] ? __lock_acquire+0xab9/0xd20 [ 288.665358][ T8356] ? __pfx_do_filp_open+0x10/0x10 [ 288.665388][ T8356] ? _raw_spin_unlock+0x28/0x50 [ 288.665410][ T8356] ? alloc_fd+0x64c/0x6c0 [ 288.665439][ T8356] do_sys_openat2+0x121/0x1c0 [ 288.665459][ T8356] ? __pfx_do_sys_openat2+0x10/0x10 [ 288.665482][ T8356] ? exc_page_fault+0x76/0xf0 [ 288.665509][ T8356] ? do_user_addr_fault+0xc8a/0x1390 [ 288.665530][ T8356] __x64_sys_openat+0x138/0x170 [ 288.665551][ T8356] do_syscall_64+0xfa/0x3b0 [ 288.665567][ T8356] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.665591][ T8356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.665609][ T8356] ? clear_bhb_loop+0x60/0xb0 [ 288.665631][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.665648][ T8356] RIP: 0033:0x7effa12a7407 [ 288.665670][ T8356] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 288.665685][ T8356] RSP: 002b:00007ffd32265b70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 288.665711][ T8356] RAX: ffffffffffffffda RBX: 00007effa198b880 RCX: 00007effa12a7407 [ 288.665724][ T8356] RDX: 0000000000000000 RSI: 00007ffd32267f1b RDI: ffffffffffffff9c [ 288.665735][ T8356] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 288.665747][ T8356] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 288.665761][ T8356] R13: 00007ffd32265dc0 R14: 00007effa1a90000 R15: 00005619e3b584d8 [ 288.665781][ T8356] [ 288.665787][ T8356] [ 288.969350][ T8356] Allocated by task 1212: [ 288.973700][ T8356] kasan_save_track+0x3e/0x80 [ 288.978398][ T8356] __kasan_kmalloc+0x93/0xb0 [ 288.983007][ T8356] __kmalloc_cache_noprof+0x230/0x3d0 [ 288.988403][ T8356] em28xx_v4l2_init+0x10b/0x2e70 [ 288.993359][ T8356] em28xx_init_extension+0x120/0x1c0 [ 288.998657][ T8356] process_scheduled_works+0xae1/0x17b0 [ 289.004216][ T8356] worker_thread+0x8a0/0xda0 [ 289.008826][ T8356] kthread+0x70e/0x8a0 [ 289.012900][ T8356] ret_from_fork+0x3fc/0x770 [ 289.017511][ T8356] ret_from_fork_asm+0x1a/0x30 [ 289.022283][ T8356] [ 289.024612][ T8356] Freed by task 1212: [ 289.028596][ T8356] kasan_save_track+0x3e/0x80 [ 289.033285][ T8356] kasan_save_free_info+0x46/0x50 [ 289.038322][ T8356] __kasan_slab_free+0x62/0x70 [ 289.043104][ T8356] kfree+0x18e/0x440 [ 289.047009][ T8356] em28xx_v4l2_init+0x1683/0x2e70 [ 289.052049][ T8356] em28xx_init_extension+0x120/0x1c0 [ 289.057347][ T8356] process_scheduled_works+0xae1/0x17b0 [ 289.062900][ T8356] worker_thread+0x8a0/0xda0 [ 289.067521][ T8356] kthread+0x70e/0x8a0 [ 289.071592][ T8356] ret_from_fork+0x3fc/0x770 [ 289.076205][ T8356] ret_from_fork_asm+0x1a/0x30 [ 289.080983][ T8356] [ 289.083327][ T8356] The buggy address belongs to the object at ffff8880623ac000 [ 289.083327][ T8356] which belongs to the cache kmalloc-8k of size 8192 [ 289.097389][ T8356] The buggy address is located 1848 bytes inside of [ 289.097389][ T8356] freed 8192-byte region [ffff8880623ac000, ffff8880623ae000) [ 289.111366][ T8356] [ 289.113699][ T8356] The buggy address belongs to the physical page: [ 289.120123][ T8356] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x623a8 [ 289.128886][ T8356] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 289.137394][ T8356] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 289.145388][ T8356] page_type: f5(slab) [ 289.149377][ T8356] raw: 00fff00000000040 ffff88801a442280 ffffea0000cb7e00 0000000000000005 [ 289.157979][ T8356] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 289.166577][ T8356] head: 00fff00000000040 ffff88801a442280 ffffea0000cb7e00 0000000000000005 [ 289.175260][ T8356] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 289.183942][ T8356] head: 00fff00000000003 ffffea000188ea01 00000000ffffffff 00000000ffffffff [ 289.192658][ T8356] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 289.201333][ T8356] page dumped because: kasan: bad access detected [ 289.207787][ T8356] page_owner tracks the page as allocated [ 289.213503][ T8356] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7813, tgid 7811 (syz.3.487), ts 249715868035, free_ts 249680486328 [ 289.234789][ T8356] post_alloc_hook+0x240/0x2a0 [ 289.239579][ T8356] get_page_from_freelist+0x21e4/0x22c0 [ 289.245133][ T8356] __alloc_frozen_pages_noprof+0x181/0x370 [ 289.250947][ T8356] alloc_pages_mpol+0x232/0x4a0 [ 289.255816][ T8356] allocate_slab+0x8a/0x370 [ 289.260333][ T8356] ___slab_alloc+0xbeb/0x1410 [ 289.265015][ T8356] __kmalloc_cache_noprof+0x296/0x3d0 [ 289.270413][ T8356] audit_log_d_path+0xb5/0x190 [ 289.275366][ T8356] audit_log_d_path_exe+0x42/0x70 [ 289.280402][ T8356] audit_log_task+0x2b3/0x3c0 [ 289.285093][ T8356] audit_seccomp+0x86/0x190 [ 289.289643][ T8356] __seccomp_filter+0x9aa/0x1a40 [ 289.294590][ T8356] syscall_trace_enter+0xaa/0x160 [ 289.299630][ T8356] do_syscall_64+0xd3/0x3b0 [ 289.304142][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.310054][ T8356] page last free pid 5845 tgid 5845 stack trace: [ 289.316395][ T8356] __free_frozen_pages+0xb80/0xd80 [ 289.321548][ T8356] __put_partials+0x156/0x1a0 [ 289.326236][ T8356] put_cpu_partial+0x17c/0x250 [ 289.331023][ T8356] __slab_free+0x2d5/0x3c0 [ 289.335459][ T8356] qlist_free_all+0x97/0x140 [ 289.340071][ T8356] kasan_quarantine_reduce+0x148/0x160 [ 289.345544][ T8356] __kasan_slab_alloc+0x22/0x80 [ 289.350407][ T8356] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 289.355888][ T8356] anon_vma_fork+0xde/0x500 [ 289.360416][ T8356] dup_mmap+0x9eb/0x1ac0 [ 289.364675][ T8356] copy_mm+0x13c/0x4b0 [ 289.368761][ T8356] copy_process+0x16d3/0x3b80 [ 289.373454][ T8356] kernel_clone+0x21e/0x870 [ 289.377968][ T8356] __x64_sys_clone+0x18b/0x1e0 [ 289.382737][ T8356] do_syscall_64+0xfa/0x3b0 [ 289.387248][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.393153][ T8356] [ 289.395485][ T8356] Memory state around the buggy address: [ 289.401124][ T8356] ffff8880623ac600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.409202][ T8356] ffff8880623ac680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.417281][ T8356] >ffff8880623ac700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.425347][ T8356] ^ [ 289.431242][ T8356] ffff8880623ac780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.439312][ T8356] ffff8880623ac800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.447372][ T8356] ================================================================== [ 289.538515][ T8356] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 289.545786][ T8356] CPU: 1 UID: 0 PID: 8356 Comm: v4l_id Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 289.556934][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.567037][ T8356] Call Trace: [ 289.570349][ T8356] [ 289.573304][ T8356] dump_stack_lvl+0x99/0x250 [ 289.577936][ T8356] ? __asan_memcpy+0x40/0x70 [ 289.582559][ T8356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.587793][ T8356] ? __pfx__printk+0x10/0x10 [ 289.592420][ T8356] panic+0x2db/0x790 [ 289.596363][ T8356] ? __pfx_panic+0x10/0x10 [ 289.600819][ T8356] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 289.606744][ T8356] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 289.613107][ T8356] ? print_memory_metadata+0x314/0x400 [ 289.618611][ T8356] ? v4l2_fh_open+0xc7/0x430 [ 289.623243][ T8356] check_panic_on_warn+0x89/0xb0 [ 289.628200][ T8356] ? v4l2_fh_open+0xc7/0x430 [ 289.633060][ T8356] end_report+0x78/0x160 [ 289.637310][ T8356] kasan_report+0x129/0x150 [ 289.641820][ T8356] ? v4l2_fh_open+0xc7/0x430 [ 289.646420][ T8356] v4l2_fh_open+0xc7/0x430 [ 289.650839][ T8356] ? __pfx___mutex_lock+0x10/0x10 [ 289.655863][ T8356] em28xx_v4l2_open+0x157/0x9a0 [ 289.660730][ T8356] v4l2_open+0x20c/0x360 [ 289.664996][ T8356] chrdev_open+0x4c9/0x5e0 [ 289.669411][ T8356] ? __pfx_chrdev_open+0x10/0x10 [ 289.674349][ T8356] ? __pfx_chrdev_open+0x10/0x10 [ 289.679287][ T8356] do_dentry_open+0xdf0/0x1970 [ 289.684064][ T8356] vfs_open+0x3b/0x340 [ 289.688139][ T8356] ? path_openat+0x2ecd/0x3830 [ 289.692914][ T8356] path_openat+0x2ee5/0x3830 [ 289.697515][ T8356] ? arch_stack_walk+0xfc/0x150 [ 289.702404][ T8356] ? __pfx_path_openat+0x10/0x10 [ 289.707353][ T8356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.713437][ T8356] do_filp_open+0x1fa/0x410 [ 289.717964][ T8356] ? __lock_acquire+0xab9/0xd20 [ 289.722819][ T8356] ? __pfx_do_filp_open+0x10/0x10 [ 289.727859][ T8356] ? _raw_spin_unlock+0x28/0x50 [ 289.732717][ T8356] ? alloc_fd+0x64c/0x6c0 [ 289.737058][ T8356] do_sys_openat2+0x121/0x1c0 [ 289.741839][ T8356] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.747040][ T8356] ? exc_page_fault+0x76/0xf0 [ 289.751722][ T8356] ? do_user_addr_fault+0xc8a/0x1390 [ 289.757030][ T8356] __x64_sys_openat+0x138/0x170 [ 289.761883][ T8356] do_syscall_64+0xfa/0x3b0 [ 289.766387][ T8356] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.771629][ T8356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.777695][ T8356] ? clear_bhb_loop+0x60/0xb0 [ 289.782374][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.788267][ T8356] RIP: 0033:0x7effa12a7407 [ 289.792680][ T8356] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 289.812291][ T8356] RSP: 002b:00007ffd32265b70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 289.820719][ T8356] RAX: ffffffffffffffda RBX: 00007effa198b880 RCX: 00007effa12a7407 [ 289.828741][ T8356] RDX: 0000000000000000 RSI: 00007ffd32267f1b RDI: ffffffffffffff9c [ 289.836717][ T8356] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 289.844689][ T8356] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 289.852681][ T8356] R13: 00007ffd32265dc0 R14: 00007effa1a90000 R15: 00005619e3b584d8 [ 289.860662][ T8356] [ 289.864153][ T8356] Kernel Offset: disabled [ 289.868500][ T8356] Rebooting in 86400 seconds..