last executing test programs: 6m48.615249606s ago: executing program 32 (id=4101): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) 3m59.172398583s ago: executing program 2 (id=5877): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe0040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd55000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfffffffa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff87c, 0x0, 0x0, 0x5fffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401, 0x3, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x400, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0xfffffffe, 0x4, 0x6, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2caa, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x40000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x578, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 3m58.909407288s ago: executing program 2 (id=5881): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a0f4bdf7ffffffffffffff00"}}) 3m58.667682409s ago: executing program 2 (id=5886): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0xfffffffffffffca6}}, 0xfffffe64) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}}) 3m58.47586959s ago: executing program 2 (id=5890): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 3m58.314324453s ago: executing program 2 (id=5891): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) 3m57.948160172s ago: executing program 2 (id=5895): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) 3m57.594158348s ago: executing program 33 (id=5895): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) 3m10.676712867s ago: executing program 5 (id=6340): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffa}]}, 0x40}}, 0x20) 3m10.572340883s ago: executing program 5 (id=6343): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0", 0x46}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf15", 0x57}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000004c0)=""/91, 0x5b}], 0x2}, 0x0) 3m10.504705953s ago: executing program 5 (id=6344): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x500, 0x20a, 0x808, 0xb3, 0xc, "7fff7a1404dc17a8"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1a) 3m10.387338446s ago: executing program 5 (id=6345): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 3m10.227913693s ago: executing program 5 (id=6348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x240000c0) 3m9.928241874s ago: executing program 5 (id=6352): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='fz', 0x2}], 0x1}}], 0x2, 0x24044c49) 3m9.726199572s ago: executing program 34 (id=6352): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='fz', 0x2}], 0x1}}], 0x2, 0x24044c49) 1m50.337890397s ago: executing program 1 (id=7122): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0'}, 0xb) 1m50.240691369s ago: executing program 1 (id=7123): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) r1 = socket$inet(0x2, 0x3, 0x5) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) 1m50.132404815s ago: executing program 1 (id=7125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x80000003, 0x5, 0x40, 0x1003}]}) 1m49.995207377s ago: executing program 1 (id=7127): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x41) r2 = open_tree(r1, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) 1m49.062982718s ago: executing program 1 (id=7132): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 1m48.818477615s ago: executing program 1 (id=7136): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 1m48.44145505s ago: executing program 35 (id=7136): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 1m43.37377839s ago: executing program 3 (id=7166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0x40, 0x1, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x0, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x2, 0x2000, 0x100000, [0x3, 0x401, 0x6, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xd8, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x5, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 1m43.093974141s ago: executing program 3 (id=7169): r0 = epoll_create1(0x80000) poll(&(0x7f0000000040)=[{r0, 0x240}], 0x1, 0x8000db3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 1m42.096131411s ago: executing program 3 (id=7177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1181}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) 1m41.971031357s ago: executing program 3 (id=7179): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 1m41.819820503s ago: executing program 3 (id=7180): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_setup(0x4, &(0x7f00000014c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0}]) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m41.049355492s ago: executing program 3 (id=7182): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xfffe, 0x3f00, 0x0, 0x2, 0x0}) 1m40.362243525s ago: executing program 36 (id=7182): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xfffe, 0x3f00, 0x0, 0x2, 0x0}) 38.859740251s ago: executing program 7 (id=7561): r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x400000000, 0x0, 0x0, 0xff, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 38.712230225s ago: executing program 7 (id=7563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x0) r3 = eventfd2(0x1, 0x80001) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x3, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2, 0x1}) 38.350530059s ago: executing program 7 (id=7567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_POLICE={0x850, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x762, 0x268, 0x0, 0x2cb, 0x1ff, 0x0, 0x5, 0xffff, 0x2, 0x8, 0x100, 0x5, 0x80, 0x5, 0xc, 0x8, 0x9, 0x84e, 0x2, 0x7, 0x9, 0x9, 0x3, 0xffffffff, 0x471, 0x8, 0x85d6, 0x3, 0x8, 0x6, 0xc8, 0xf, 0x1, 0x2, 0x80, 0x2, 0x3, 0xffff, 0x40, 0x4436, 0x9, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x2000000, 0x3, 0x3, 0x4, 0x5, 0x95, 0x7fff, 0x5, 0x3, 0x3, 0xb60, 0x5, 0xfffffeff, 0x8, 0x1, 0xfffffffd, 0xff, 0x5, 0x9, 0x9, 0x10, 0x7, 0x25d, 0x4, 0x1, 0x4, 0x55b, 0x593, 0x7, 0x1, 0x8001, 0x5, 0xc4, 0x2, 0x6, 0x3, 0xeb8, 0x10001, 0x3, 0xff, 0x0, 0x10000, 0xa, 0x3, 0x0, 0x3, 0x8000, 0xfe, 0x80000000, 0x30, 0xeb, 0x1f, 0x2, 0x6, 0x5, 0x7, 0x1, 0xc, 0x4, 0x8, 0x2, 0x3, 0x8, 0x1, 0xdd86, 0x7f, 0x7, 0x9, 0x2, 0xe0ac, 0x9, 0x6, 0x9, 0x0, 0x2, 0x5, 0x6, 0x1000, 0xfff, 0x0, 0x9700, 0x7, 0x4157, 0x9, 0x3, 0x10000, 0x81, 0x7, 0x7, 0xe6f, 0x8, 0x37, 0x6122, 0x3, 0x6, 0x8, 0x200, 0xfffff800, 0x8001, 0x3, 0x4ea, 0x1, 0x200, 0xfb, 0x0, 0x5, 0x3, 0x7, 0x9, 0x2, 0x1, 0x7fffffff, 0x4, 0x4, 0x0, 0x1, 0x80000000, 0x1, 0x80000001, 0x6, 0x0, 0x8, 0x7, 0x99, 0x7, 0x2f, 0x8001, 0x7ff, 0x5, 0x9b, 0xcb, 0x7, 0x3ff, 0xffffa8e6, 0x80, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x7, 0x8, 0x5, 0x7, 0x9, 0x9, 0x7fff, 0x8000, 0x2, 0x63ce, 0x2, 0x9ff, 0x10000, 0x0, 0xff, 0x1, 0x7fe2, 0x9, 0x1c, 0xb7, 0x100, 0x3, 0xfff, 0x2, 0x6, 0xffff, 0x6, 0x0, 0xfffffffb, 0x2, 0xffff, 0x2, 0x2, 0x8, 0x6, 0x1, 0x96, 0xc99, 0x9, 0x10000, 0x800, 0x0, 0x4, 0x21, 0x439c, 0x3, 0x9, 0x2, 0xc, 0xb2f0, 0x1da80, 0x3, 0x9, 0xff, 0xde34, 0x1, 0x10001, 0x7, 0x9, 0x8, 0x12c1, 0xfffffc0e, 0xfffffff9, 0x8001, 0xc, 0x9, 0x3ff, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40c, 0x3, 0x0, 0x3ff, 0x5, 0x57, 0x1, 0x20000, 0x80, 0x1, 0x8, 0x10, 0x3, 0x7, 0x643, 0x5, 0x0, 0xfb56, 0x7, 0x7ff, 0x8, 0xe40, 0x0, 0x8000, 0x7, 0x4, 0x7, 0xffff, 0x280000, 0x3, 0x9, 0x7, 0x1, 0x8, 0x1, 0x7, 0x8, 0x8, 0x8e5, 0x88, 0x9, 0x3, 0x0, 0x7fffffff, 0x9, 0x93, 0x7f, 0x6, 0x800, 0x0, 0x81, 0x2, 0x33b, 0x1ff, 0x7f, 0x90db5e3c, 0x421c, 0x6, 0x6, 0x7fffffff, 0x3, 0x9, 0xf8b, 0x40, 0x9, 0x7, 0x1, 0x2, 0xff, 0x1000, 0xc26c4a, 0x6, 0x3, 0x9127, 0xffffffff, 0x7f, 0x89, 0x80000001, 0x2, 0x7fff, 0x0, 0x6, 0xe, 0x4, 0x3, 0xb, 0xc64, 0x3, 0x9, 0x800, 0x5, 0x9, 0x2, 0x3, 0x40, 0xa, 0x0, 0x8, 0x9aa, 0x7, 0x401, 0x8, 0x4, 0xf, 0x1, 0x9, 0x3, 0xf13, 0x48000, 0x5, 0x8, 0x6, 0x200, 0x3, 0x3, 0x3, 0x2, 0x7, 0xffffa831, 0x7, 0x9, 0x81, 0x10000, 0x0, 0x2d3b, 0x2ab, 0x6, 0x6, 0x80000000, 0x7, 0x1, 0x2, 0xc, 0x6, 0x9, 0xc2c, 0x8, 0x8, 0x2, 0x4, 0x7, 0x4f4, 0x9, 0x4, 0x10, 0x9, 0x9d, 0x7b1f, 0xffffffff, 0x9, 0x8, 0xffffffd8, 0x1ff, 0x40, 0xa8, 0xfffffc01, 0x7, 0x100, 0x8, 0xfffffff7, 0x2, 0x401, 0xf, 0x0, 0xfffffff8, 0x5, 0x8000, 0x52, 0x1e, 0x1, 0x6, 0x77a2, 0x3, 0x5, 0x10d, 0x10001, 0x233, 0xa22, 0x7, 0x2, 0x7fff, 0x0, 0xe, 0x7fffffff, 0xb2c, 0xffffff25, 0x2, 0xfff, 0x7, 0xff, 0x3, 0x9, 0x4, 0xfffff7f5, 0x7, 0x4, 0x80000000, 0xe, 0x5, 0x5, 0xffffff80, 0x1ff, 0x200, 0x7, 0xa, 0x21, 0x6, 0x7, 0x5, 0x5, 0x2, 0x1, 0x7, 0x200, 0x100, 0x7ff, 0xfffffffd, 0xf0, 0x0, 0x4, 0xff, 0x1, 0x7, 0xc, 0x200, 0x8, 0x1ff, 0xe, 0x1, 0x3ff, 0x3, 0x8000, 0x1, 0x7, 0xffff, 0x3, 0x987f, 0xa, 0x0, 0xc7f, 0x200000, 0x6, 0x5, 0x5, 0x9, 0x0, 0x4, 0x6, 0x42, 0x7, 0x1ff, 0x6, 0x40, 0x6, 0x9, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0xd0a9, 0x6, 0x4, {0x1, 0x0, 0x1, 0xc0, 0xa1, 0xc}, {0x3, 0x2, 0xfff4, 0xb, 0x4, 0xf9fb}, 0x6, 0x6, 0xffffffad}}]}]}}]}, 0x884}}, 0x0) 38.210152566s ago: executing program 7 (id=7570): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 37.084430696s ago: executing program 7 (id=7576): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xb8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0xb8}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 36.740656736s ago: executing program 7 (id=7577): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1, &(0x7f0000000400)=""/17, 0x11}, 0x8000}], 0x1, 0x12123, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 35.529490165s ago: executing program 37 (id=7577): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1, &(0x7f0000000400)=""/17, 0x11}, 0x8000}], 0x1, 0x12123, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 11.42071441s ago: executing program 4 (id=7738): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x0, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbacf501922de974a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"0024139ed44bec57f2e2ad238a7b448ed886000000001214fd00", r1, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r3, 0x0) 11.199164742s ago: executing program 4 (id=7741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0xb5, 0xa9c1, 0xeffffdff, 0x0, [{0x0, 0x80}, {0x9, 0xd, 0x0, '\x00', 0x30}, {0xfc, 0x44}, {0x2, 0x90, 0x4, '\x00', 0xff}, {0xc, 0x2, 0x5, '\x00', 0x3}, {0x0, 0x60}, {0x0, 0x85, 0xbe}, {0x0, 0x6, 0xd0, '\x00', 0x67}, {0x0, 0xff, 0x0, '\x00', 0x6}, {0xc, 0x4, 0xfe, '\x00', 0x42}, {0x4, 0x2}, {0x4, 0xe, 0xb}, {0x2, 0x0, 0x31, '\x00', 0x3}, {0x3, 0x4d}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {0x0, 0x3, 0x1}, {0x1, 0xfd, 0x4, '\x00', 0x4}, {0x0, 0x40, 0x7, '\x00', 0xe0}, {0x2, 0x1, 0x7, '\x00', 0x6}, {0x80, 0x0, 0xe, '\x00', 0x5}, {0x8, 0xe5}, {0x0, 0x41, 0x0, '\x00', 0x71}, {0x1, 0x6, 0xfe, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0xf4}]}}) 10.753855935s ago: executing program 4 (id=7746): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x2de}, 0x20) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 9.887023115s ago: executing program 4 (id=7751): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 8.757451365s ago: executing program 4 (id=7762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002040)=ANY=[], 0x550}}, 0xc020) recvmsg$can_raw(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f0000000840)=""/84, 0x54}], 0x2}, 0x40000002) 8.311915993s ago: executing program 4 (id=7766): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x21d7, 0x1000, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 7.603594845s ago: executing program 38 (id=7766): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x21d7, 0x1000, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 5.13925107s ago: executing program 6 (id=7780): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4.841215767s ago: executing program 6 (id=7781): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) read$FUSE(r2, &(0x7f0000007180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x2b, 0x2, 0x22822000, 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, 0x1, 0x2635}}, 0x50) 4.833495966s ago: executing program 9 (id=7782): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000c4}, 0x4) 4.541430655s ago: executing program 9 (id=7784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x2000, 0x8000, 0xfffffffd, 0x1, 0x0, [{0x1, 0x3, 0x6, '\x00', 0x2}, {0x6c, 0xbc, 0x15, '\x00', 0xf}, {0x5, 0x83, 0x6, '\x00', 0x94}, {0x0, 0x9, 0x8, '\x00', 0xd7}, {0x3, 0x5, 0x7, '\x00', 0x4}, {0x3, 0x3, 0x7f, '\x00', 0xfa}, {0xb, 0x2, 0xb4, '\x00', 0x9}, {0x6, 0x0, 0x80, '\x00', 0x3}, {0xb, 0x4, 0x4, '\x00', 0xd}, {0xf, 0x7, 0x1, '\x00', 0x3a}, {0x5, 0xff, 0xc, '\x00', 0x5}, {0x3, 0xf2, 0x3, '\x00', 0x3e}, {0x8, 0x9, 0xd9, '\x00', 0x3}, {0x2, 0xb, 0xa4}, {0x1, 0x40, 0x6, '\x00', 0x20}, {0xe, 0x4, 0xb, '\x00', 0x1}, {0x4d, 0xe, 0x6d}, {0xe, 0x8, 0x8, '\x00', 0xd3}, {0x0, 0x5, 0x2, '\x00', 0x2}, {0x7f, 0x0, 0x76, '\x00', 0x25}, {0x9, 0x4, 0x9, '\x00', 0x7}, {0x1, 0xe, 0x1, '\x00', 0x2}, {0x72, 0xe, 0x5}, {0x80, 0x7f, 0x40}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x6e, 0xfffffffffffffffc, 0x2000, 0x20, 0x3, 0x200000000000, 0x106c, 0x2, 0x8000000000000, 0xa0000004000080, 0x0, 0x100008, 0x0, 0x6, 0x0, 0x5], 0x10000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.192044608s ago: executing program 9 (id=7786): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xf8}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c11) 3.854279958s ago: executing program 9 (id=7789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}], 0x1}, 0xebea}], 0x1, 0x40000001, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x24}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44004) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 3.697228299s ago: executing program 6 (id=7790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r3, 0x1, 0x0, 0x6, @local}, 0x14) 3.575365962s ago: executing program 9 (id=7791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x1e484912}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 3.385855061s ago: executing program 6 (id=7793): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x4, 0x0, @time={0xb, 0x1ff}, {}, {0x7a}, @raw32}], 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.148812637s ago: executing program 6 (id=7795): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.852569983s ago: executing program 6 (id=7797): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="20080200000002"], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 2.140982951s ago: executing program 0 (id=7802): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = open(&(0x7f0000000100)='.\x00', 0x100080, 0x4) flock(r2, 0x6) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') 2.087845549s ago: executing program 8 (id=7803): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x42, 0xfffffffa}, 0x10) sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x845}, 0x10) 1.996543361s ago: executing program 0 (id=7804): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.951249493s ago: executing program 8 (id=7805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffe65, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x2, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0xb, 0x200, 0x9, 0x1}, {0x6, 0x10, 0x0, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x10000009, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x80, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x80000002, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x1}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0xd, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.878217052s ago: executing program 0 (id=7806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x6, 0xb, 0x3, 0x5}, 0x4, 0x11}, [{0xfffffffc, 0xfffffff9, 0x1d47, 0x3, 0x2, 0xe}, {0x8, 0x3, 0x0, 0x7e4, 0x2, 0x3}, {0x9, 0x27c, 0x9bc, 0x7, 0x8, 0x4}, {0x6, 0x7f, 0xc, 0x9, 0x3364, 0x8001}, {0x10001, 0x5, 0xf, 0xffffffff, 0x3, 0x13b}, {0x3, 0x800, 0x4, 0x0, 0x77, 0x7ff}, {0x7, 0xc, 0xff, 0xfffffffe, 0x1, 0x3}, {0xb17, 0x5, 0x5, 0xc2, 0x8, 0x7}, {0x5, 0xffffff62, 0x0, 0x3, 0xf5, 0x2}, {0x4538, 0x4, 0x9426, 0x1, 0x85, 0x197d}, {0xfffffff9, 0x25e0, 0x1, 0x5, 0xd, 0x8}, {0x4, 0x91, 0x10004, 0x200, 0x5}, {0x0, 0xfffff4e1, 0x7fffffff, 0x1, 0x20001, 0xe2}, {0x9, 0x10001, 0x7fffffff, 0x4, 0x6, 0x4f}, {0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x9}, {0xffffc92f, 0x7fff, 0x6, 0x2, 0x5, 0x3}, {0x1, 0x6, 0x401, 0x3, 0x0, 0x881}, {0x3, 0xf, 0x6b, 0x9bb5, 0x60}, {0xf, 0x3, 0x2, 0x6a41, 0x2, 0x1}, {0x100, 0x1, 0x7, 0x7ffe, 0x5, 0x8}, {0x7, 0x0, 0x7ff, 0x9, 0x634, 0x9}, {0x2, 0x186, 0x0, 0x9, 0x4, 0x6}, {0x10001, 0x19, 0x6, 0x800, 0x7, 0xfffffffe}, {0x39, 0x8, 0x0, 0x5, 0xc3f, 0x6d}, {0xfffffff7, 0xe3, 0x1, 0xffffffd2, 0x8, 0x944}, {0x0, 0x8000, 0x4, 0xffffffff, 0x1, 0x4}, {0x4, 0x4, 0x7, 0xd16, 0xe687, 0xb}, {0xb9e, 0x800, 0x3eaa2532, 0x80000001, 0x2, 0x5}, {0x0, 0x4, 0x3, 0xa9, 0x2, 0x23f3}, {0x1f, 0x47, 0xfffffff7, 0x4, 0x6, 0x8}, {0x3, 0xb01, 0x26, 0x10000, 0x4b, 0x3}, {0x6, 0x9, 0xfffffffc, 0x4, 0x2, 0x1}, {0x668, 0x6, 0x3d, 0x10001, 0xd66e, 0x4}, {0x0, 0xf, 0x0, 0x1ff, 0xcb, 0xffff8001}, {0x4, 0x2, 0xb853, 0x9}, {0x9, 0x5, 0xa, 0x8000, 0x7, 0x1a}, {0x800, 0x4, 0x80, 0x0, 0x4, 0xa}, {0x1, 0xf1f, 0x400, 0x39, 0x40, 0xffff}, {0xe, 0xa8, 0x7fffffff, 0x6, 0x7, 0x6}, {0x10, 0x10, 0xfffffffc, 0x3, 0x3, 0x80}, {0xc, 0x8001, 0x6cbb, 0x2, 0x7fffffff, 0xfffffffc}, {0x3, 0x80000000, 0x8, 0x5, 0x10, 0x200}, {0x800, 0x8, 0x3, 0x8001, 0x81, 0x2}, {0x8, 0xe25, 0x8, 0xffff0001, 0x9, 0xa}, {0x3, 0x8, 0x7, 0x9, 0x4, 0x24}, {0xcd85, 0xb, 0x218a, 0x4, 0x5, 0x1}, {0x200, 0xffffffff, 0x97e, 0x1, 0xa, 0xd814}, {0x1, 0x3ff, 0x6, 0x2, 0x800, 0x11898e13}, {0x6, 0x2, 0x8000, 0x9, 0x6, 0x2}, {0x1ff, 0x852, 0xc66, 0x7, 0x6, 0x3}, {0x2, 0x9, 0xfffffffa, 0x5, 0x4, 0x2}, {0x3, 0xb, 0x1, 0x9, 0x3dbc0000, 0x200}, {0x0, 0x8, 0x5b, 0x5, 0x5, 0x2}, {0x9, 0x5, 0x8, 0xffff, 0x7f3b, 0x80}, {0x3, 0x5, 0x8, 0xf96, 0xfe0, 0x9}, {0x10001, 0x4, 0xf, 0x1, 0x401, 0x8}, {0xfffffff5, 0x7ff, 0xffff, 0x8000, 0x7, 0x8}, {0x0, 0xffe00000, 0x9, 0x2, 0xd91, 0x7}, {0x5, 0x2, 0x7fffffff, 0x0, 0xfffffff8, 0xfff}, {0x400, 0x9, 0x6, 0x5, 0x3d63, 0x2}, {0xb6f, 0x9, 0x7fff, 0x48bc, 0x2, 0x7ff}, {0x0, 0x5, 0x2, 0x8, 0x85, 0x10}, {0xff, 0x0, 0x0, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x200, 0x9, 0x5, 0x3}, {0x9, 0x40, 0x18d, 0x7, 0x0, 0x3}, {0x5, 0x7ff80000, 0xffffffff, 0xd, 0x80000000, 0x3}, {0x80000001, 0x81, 0x7a82, 0x0, 0x3, 0x4}, {0x1000, 0x298edb52, 0x8, 0x6cd, 0xfffffff8, 0xeecf}, {0x5, 0x2, 0x6, 0x3ff, 0x8, 0x10}, {0x4, 0x9, 0x7, 0x1, 0x7, 0x1}, {0x80000001, 0xffffff80, 0x7ff, 0x9, 0x9, 0x6}, {0x3, 0x8, 0x7, 0xb2d, 0x8, 0x85}, {0xb3b, 0x9fee, 0xbe1, 0xb1a0, 0x9, 0x100}, {0x0, 0x5b, 0x6fc, 0x9, 0x7, 0x41}, {0x5, 0x7, 0x3, 0x3, 0x0, 0x10001}, {0x8, 0x84, 0x3, 0x80000001, 0x3}, {0x8, 0x8001, 0x7, 0x7f, 0x2, 0x8}, {0x4, 0x1ff, 0x6d3, 0x6, 0x6, 0xa000}, {0x10001, 0xbf4, 0x2, 0x8001, 0x7f, 0x9}, {0x3800000, 0x6, 0x1ff, 0x10000, 0xffffff9e, 0x3}, {0x87, 0x0, 0x4, 0x1, 0x3, 0x7}, {0x8, 0x7, 0x5, 0x5, 0x10000, 0x1}, {0x6, 0x4, 0x80090f3, 0x4, 0xa9, 0x3}, {0x7fffffff, 0x9, 0x6, 0x3, 0xd105, 0x4}, {0x5, 0x4, 0xa, 0x6, 0x5, 0x2}, {0x5, 0x7a96, 0xa54, 0x100, 0x0, 0xe}, {0x1, 0xfffffffe, 0x4, 0x6, 0x6}, {0x0, 0x2, 0x4, 0x2, 0x1ff, 0xe4}, {0xc000000, 0xfff, 0x6, 0x6, 0x894, 0x6}, {0x3, 0x3, 0x2, 0x1678, 0x105, 0x2}, {0x6, 0x80000001, 0xde1, 0xff, 0x7, 0x8}, {0x2, 0x0, 0x7fff, 0x80000003, 0x2, 0x86db}, {0xf7ef, 0x7, 0x200, 0x4, 0x8, 0xc6ab}, {0x2, 0x1, 0x2, 0x2, 0x6, 0x9}, {0x5e27, 0x8, 0xffffffff, 0x6, 0x1000, 0x8}, {0x2, 0x2, 0xff, 0x3, 0xf, 0x5}, {0x7, 0x8, 0x2e16, 0x3ff, 0x40, 0x401}, {0x6, 0x3, 0x5, 0xfffffff9, 0xbd83, 0x7}, {0x7e1, 0x9, 0x7ff, 0x100000, 0x7, 0x401}, {0x4, 0xb, 0x4, 0x8, 0x3ff, 0xf32}, {0x7, 0xfff, 0x3, 0xaeb3, 0x7, 0xffff}, {0x5, 0x5f, 0x3ff, 0x8, 0x101, 0xffffd453}, {0x0, 0x9, 0x6, 0x400, 0x2, 0x7}, {0xbda0, 0xc, 0x8, 0x4, 0x553, 0x101}, {0x2, 0x1000, 0x5, 0x37, 0xbcc2, 0x345}, {0x100, 0x0, 0x7f, 0xffffff00, 0x1ff, 0x8}, {0x1, 0x4, 0xfff, 0x2, 0x2, 0x7}, {0x9, 0x9, 0x467, 0x4, 0x4, 0x2}, {0x8cd, 0x5, 0x2, 0x4c, 0xc, 0x8}, {0x2, 0x10000, 0x8, 0x0, 0x200, 0x2}, {0x7, 0x80000000, 0x101, 0x401, 0x1ff, 0x3}, {0x10, 0x8, 0x9, 0x6, 0x1, 0x3}, {0x2, 0x0, 0x9, 0x3, 0x3, 0x5}, {0xfa, 0x2, 0x6, 0xff, 0x1, 0x401}, {0x42, 0x1, 0x2, 0x4, 0x0, 0x1}, {0x6, 0x4, 0x9, 0x5, 0x2097, 0x47}, {0x10001, 0x9, 0x9, 0x2, 0x6539, 0xfffffff7}, {0x82, 0xb00, 0x86, 0x1, 0x10, 0x80000001}, {0x8, 0x9, 0xc, 0x8000, 0x3, 0x5}, {0x0, 0xfffffff7, 0x6, 0xbb, 0x7fff, 0x3}, {0x4, 0x1800000, 0xfffffffd, 0x4, 0x1c000, 0x68}, {0x0, 0xfffffffb, 0x5, 0x6c, 0x4, 0x5}, {0x5, 0x7, 0x9, 0x9, 0x2, 0x4}, {0x9, 0x1, 0xfff, 0x9, 0xc, 0xfffffffb}, {0x9, 0x7f3, 0x1000, 0x4, 0x5, 0x3}, {0x1, 0x401, 0xffffe7ad, 0xa, 0x894, 0x7}, {0x64d7e3ec, 0x2000009, 0x1ff, 0x5, 0x8001, 0x8}, {0x0, 0x78f3, 0x7fffffff, 0x78b, 0xffffffff, 0x3}], [{0x1, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x6}, {0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x1}, {0x5}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x7}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x3}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x1}, {0x1}, {0x5}, {}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x3}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0xdc11eedf34026e23}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {}, {0x3, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x1}, 0x800) 995.659449ms ago: executing program 9 (id=7807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 985.685964ms ago: executing program 8 (id=7808): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 943.757133ms ago: executing program 0 (id=7809): setxattr$incfs_metadata(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x0, 0x6) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}, {&(0x7f0000005180)=ANY=[], 0x13d8}, {&(0x7f0000002b00)={0xf20, 0x36, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@nested={0xf0d, 0x122, 0x0, 0x1, [@generic="8b4a6c041ccba4e08c89f557539b33005417ec2be876b5aeb88023529d0b6434a5d26e7a9522b4488228445f26e1db8b1d702ec95d0da3c539d4fe4f75dd6a44070724001d65b314b2dfc1437c14dcdf3bd718779c6a6c809b829cad80a67b11b86fd0", @nested={0x13d, 0xcf, 0x0, 0x1, [@generic="6d7fe668acf8baeb59432d661bd0e4a8ff7d642214430a22055e5647e07817f59476f5a75b5f639cb87f27ae2133f2b8381705e9bb6aec48ab5c286b2e31b6622776dfbcb04207a915cb2c391ab1a925a52c5f702bdd57071b80639e513f81e1ba30f0f9814a8e7076a3912a7f9aa10f099d442c4f83ac6b4a13eab74465aea4d233e2b6dc3847f7b1481362015c0fda70e48653e87379ea702d2bd32e7dc512741aed96943086dd61663cd6780e20b6d5399da1d205ff94088f7198012cc2", @generic="4e10fc493cc14638ed0f45e742a20b7d05feb52af2c3cfb64cce25d827a5f49c7250cf7aa979be132299441b235609f93ad1b66a1e3b0279423e14e1b632bae6f195262ecca49d7e815d2ac603a0a1b2d09573ab480413ce8f78beee000dacc988fdfaab3107c2c21f1fe52666272268b3e575c37a71", @nested={0x4, 0x4a}]}, @typed={0x8, 0x119, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="932225714a5d287a140f9854a147e067fcb55962128bee041bc8329b0463c84be1bda6ffd8b506def092083e97a22b489eea8bb4c7849cfe3aa42968e848467dbc39f028af96ec68f26c66d4b340f05ce6aac7ed373fd63ad2d76287033ca93b2333ee07456d0432089a15bb807fd019a3a1a6dbba400e75c5bd3770a7a28f8eae529019796292a833b02394aa116716305c049fd012af569a99321081f16fef7f6fea418ea084a772b9b324ac4f08a5dea8561003c3605de84736326afec0735bac7f475489acfabdc5f6240eca2e3c11ad8bf24b3ed7fcff20fe7f9fbfd31f651045171fca66d5d723b87d03b690a4b759a9a146a4dbce3a93929863a5f303e1f2e0456b2b639893b83dd3e44a31a1ef9e442acfa0a409f32c042dca97ef3cc7605211e2393910380e806ab20a4d83b5ce06525c0020350fa6f530b5775edc8aa594a080f3beb7afe4c9ce9548b8725a14400ca812343ea8734d2105a43972a7751a3e91c96956d573e76c244869f8bfd09f381b30244897b73fe7ef6236ac51ea985724cea310d2d497a7542ef67802273d0146a436c025f8c298af98a7fb47b73966060de82865ba4f07491e9242f57e03f3d1ff3886d3352fa69efb6004ee1a6a9d49f1d3a5442aea42b06ffd769e4e6f4ffda057d1d2e56bebc0811bfeb7bb264a066dd81b1722760778da908989844b479062087bb68e557363f44cb7d283fd4620c80206943e33344a333b67ae2af7f313faa4218794c6ea9c6d472c4d21a607edefbf892f5a5427957e7d64ff41d19cd13b00a45ae489154dd2ff8394ebd9fa8d6d4923083a8ab4bb0c6097d075ce929dfdb6924d834aafdc21f54c957f858a69d18d494d41c8ef68e50b362700d72dc980cd851e070febd0ec934ab666d077ed210e15dba0f6d6891baad497dc9e5fdcc0cddeb4fb3d80f09babb3b1f350ec97330d292c8ccd76d89ff48ea60fa571a6dc48baffc7415244f25ab675e3864960d5324120e8f1af266e1403a594f625de576698627b9b92e43ffeacc82e67e8b28f488b81f57a15fc28974c5abc5af75cb5c472b44a33f8f9e8ca0ff974c6d9e815097b346ab302c36b9a2a5f2994000a8025ea4eca719e330ba696132d714b7dbff461e77db8d5b5cba959d9d913f146c4ebbea92dd9f3e6689de3754558f1673811d8c813618ccbdd77b7dc3d8c209e683b84b69bd2ed59af0f418ab1ba3abe01954a4a8a572efa0ec2e5ead9aa552a0dda8175516e93865822d2967911b966039005949e72c1f51d704919bcb92c780e561ebcd0d0ab4ee8f7347a2c7d1e529a787cc27dc9d2c9a80d05c7f1fff9ffcc71b59c7aadd21a12119b04c14d363a10331e2ee734669aadeb1a87151ca179851ec9f95fd0e1115c1b66ed3eec1af48268386cfa23efc0dab700d3052fae8de8506d84448d29ada423df039423600544dd292d04527c168c2abf8efc6797d9219bdcb1631151fd24708945cac6ddf1dd256a15380d210e308145e5837c6febd590c74752687956d0c9611500231a5e1fe003e1203552cd76f22767c08de95370b3c7661e86c48117944a3ada84ace9a16fcfc3ead01d209416bd6b81a5ce3563231cde1075f39b423a100690e19745ea970adbc978041104bc21146816e3f567a8eaea1db4bf94f5a10434f3b64699c1325f5946858bb8ae80c8aa49bf1a1c092cc5000d2da6f3bef5a2854d7c68cb8d16bef7646915b82648399cdbee17b6089652253dd204532ef8a180578c0ac3889af96af03659fcbc31b3438c9ec8dbc1601c34a97b138a6b8e68f324f2c7e19a117dfa51ba66c8a233caeea805c93d4dffddf16f56966f7143a0a31546c86d0b62bcc5a21337c01227161e3cefa435587588e5b0cbf2600cdc4a734d6c2eff346012bdc16765a1ee1d241d70f77fd02291954e14182f3a9786ec9b2e9a75ff5dece831192149301b42f473cfda8f2c0e8cbd9a34880328c72b2aebddcc228e2ac40a9a96e62abf459c13e91a82275c30a94038b5bd5f6caee731676d597e1c063f71fd4caa7f9d0bac7d42c11355afd546e9fb2b33df3bc7f00a7965837e1cb1537750583c27b4b6a3e07c2fa2a776a60f8b0f65f7f06edaf8deb3ad95551a470e2af098fec821c478115d398404181aa656ca3a9b8442f4f1abe0c0abf163543e239afe7b44bc9871555af21ef2945250aef7a724d578da3e378b3cdf40da716c2dc425d5f1435b8bcab5bfb6bf4d8bd55c1c96832494db7915540a57e3279d91e28309a08bcd180cb04fa3fbfa174fa2e5564aea1509c5cd20b841d1fdc4ae4bbf99a0912fbb645714e803c574969b3a9d4c426b1e6da0a587bf3aaccc6c5278a1f6a7559633aa0d10ae684cb8f71ff10b5c03103cfb88a6b2130c34e0463c348b616d088ad55fd64ff2f456adeed0cea59084102b963256e757c76dfcf61ea40ad3cb49547451855c8b1e34b8e13fce3188c64bd86aefc6a9715dc7e7920db0ea55886909f42afb0d46c9918abcc232f948a45893bdc3c9ad0413801dc64a79ff9d4fc65333c2bc9bf49fdbc7fa8f1a3e30c7a46f02b23af6a2d75be980aa10471361bddcfbc113da127953964970c3916a972929203cfc0c2141c97a48e8853f4c53ef80e1c58fbca2f2d232a587b9c58bfe1d2af75b8100d5426bdd9429cd9c3711b1b2b73d8fbcc9be0a0f4bc48b3d2ef03700a0ff05fa2a2fcb337ff957003f5f7a2b3195b6c3c4aedfe125e2db5e52c199b6a310f4815e1b974bec5831aecdc469b12a18adc4220b8c0403d8d2829f799d43225c4b727d8d69560bdab800bfb1ce4147d927c9b632569a0b82dc3e3e5cce721c9f7c70395841c2e2a54969c86ef00a1d0702b0c3f38523183b4ee8a012e7d6b8dc5c627aa048ad91fb342f45f224f59e6a400b6e18692ff20d33752bd02e011b23cc3601781df7794d076b966def5926a692b726457ed18f8f3620ad0b512bb6f49fc688a8cf6edd589bb42a695f4bed984d5a46a646e194ee3e507ae8d83274d2716f7d4de33687e3ab54c40743d9c368b0dbf3f335002fe5d7c4435be62a8cf6741af8a8fee580b7f1506204e27b5b2cc9babae0ef18bf55567496c3840f07aaab0ace1b92067fb6c45e68f24d66ceafc144255915ae9b8e3d88f9b7d97277f8396605f40851b24f976b2331a959a87a713475430100f1457705432ad03ce1ec60e60463fec3ed8424d3e594f3021c29b02ad8861038e1d3b1a66cd8aaec93c4b916bdf7d4cb604cc6af56a99dbd368e2b4f57d14e367d60a1c4b4561ebb27f45298d3dc155f4e971707407425a353a17f58543530fe37487f8f31e2455a48ed4f0415ee2c11de3f7a8ba817144656b201e6901a338b310f51e45882fc1d0eb745526ec6c30d2c0deedb9f403c0bf5306e660f5815ddc6a122dc1b6977468cfe5f53b24eddb5aa402ceb260137e1eba0d087944c3e485543495ce88b2d02b75838ebfc835a37004494a2c8864366d596674dfda14d388d397c505d851d44c24fb096879036aad7682b7599aa6a91af06b40224100354163e8cc55b5b314958ad759b63407681fa4945b765bd5501d197b02595e34523a5c8e376957f4b961310aa0e4670d2fc9013827e6ad58ad4044188db214afcd8a432cf6629f3ecc0198200a9dcc127591136606075829765944fbe09ca2a7620e12ad556630ee64142d011b9b096f813a481b147fd22ed62614b9d13f79a12444c2c281b9e8feecc22b2157c86d8c7c487653f97d67d779b874fc3b36bd7f5b61a608319acce42582fc26770de2c508e2bcd0cb8490bc29dec1eb5869831206c45e160daf6782deed58b66592f63ba1ca0f0f773c648d61b9b05b37e914265ee263f950e8ba0b8b7384606e49be1d7d41b398d4058a05fe0ad722ba38abc90668faf2d6fd07fd5f7872420adab23f5830b088feec93ed68d7522672f7c535936d650bedb7ae9cc5cac7da27e4028e9c4da6a264b68e2e51a45d455cf685b1e6d8bce9b7b36444801cd3ea78ecf2a9cae273b9ef398d24c943a8ab775ecdec1199e893ba38a45be7851f535c26cc9ed64a505fdbaea5611026bf3fbea40c0cedae656271e20a80e81271a625b0bcb66729113dc7fc43b4d245a4e026c4dd40f45252929f3edf4389f90d9e796908037434e3167c38ed17196f9af1abba50f2b87d6aa5c3e9b8e650b8b3c22cb74c542feacbf6c09f10abe83a0d771f77362efec2bf1d550f5c365e5d2e0582144555091fc141b344fc7acaee8a7ac153cb0be9d763d15a8a9d0e6ebde0dc6def267723ba6bc9a53700861c09758abb5faea6b4bc65464777af7408ee6ae0d64b2d68a597a6bf38661be4fa1f313cb9f1f8d6077fd56bb84d18526a76af66bdc609f05f6d6b6433426a0d5f8088140cb9fd27eb2edb401fa4eca1ba442af251ab66360bc62e441a061e0479010011acaa6b2ed932c887c933a36ec24131602415a12bd5fed69d592f4ab7d13c2b0f583a507a30ba5617a0572b0fb66a75bf7df2d752e217b858a9e768559cdee4fe3b2c006a1186e2387cad27413b4670b69ca519e22cf0888f25a6089f1c657284f1a65860a8f2bd5db0b99dfd6e136b553f8cf3b2777516a89abcd6d5eed349594c3f93a0c6af17f2dc703921fdc704f178b428c3eea6a83f65eb46c6ed30a94935f1012d4b81c079691cb9df6374bfeb1da18b5060c3cbec82bbf5112db94992c9fa718c5b09910797e261a7688e8faf76681f6627bb08a9713243065d41a9599f599f10594a6042514b4fb985d1c292fecef95568aba7ca3cb38255791c6a9dea16e0f99360c20bfbb8a2e3df30eb3"]}]}, 0xf20}], 0x3}, 0x10) 756.931826ms ago: executing program 0 (id=7810): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x24004090) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 684.718654ms ago: executing program 8 (id=7811): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 191.514048ms ago: executing program 0 (id=7812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 134.528261ms ago: executing program 8 (id=7813): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 0s ago: executing program 8 (id=7814): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): plus: reg_r err -71 [ 740.586263][ T6027] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 740.599550][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 740.610997][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 740.631470][ T6027] usb 2-1: USB disconnect, device number 110 [ 740.638370][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 740.647819][ T5891] usb 1-1: USB disconnect, device number 99 [ 740.659354][ T10] usb 4-1: invalid MIDI in EP 0 [ 740.870173][ T10] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 740.903595][ T10] usb 4-1: USB disconnect, device number 112 [ 741.121098][ T5891] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 741.291623][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 741.311139][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.330990][ T5891] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 741.340444][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.353782][ T5891] usb 1-1: config 0 descriptor?? [ 741.371215][ T5891] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 741.412089][ T5891] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 741.614553][ C0] ldusb 1-1:0.0: Ring buffer overflow, 8 bytes dropped [ 741.948012][ C0] ldusb 1-1:0.0: Ring buffer overflow, 8 bytes dropped [ 743.024104][ T5937] usb 1-1: USB disconnect, device number 100 [ 743.072432][ T5937] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 743.988352][ T30] audit: type=1326 audit(1764982143.988:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22210 comm="syz.6.6687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 744.041034][ T30] audit: type=1326 audit(1764982144.038:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22210 comm="syz.6.6687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 744.093244][ T30] audit: type=1326 audit(1764982144.038:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22210 comm="syz.6.6687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 744.139024][ T30] audit: type=1326 audit(1764982144.038:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22210 comm="syz.6.6687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 744.186812][ T30] audit: type=1326 audit(1764982144.038:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22210 comm="syz.6.6687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 744.469041][T22216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6690'. [ 745.451704][T22242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6702'. [ 746.077017][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 746.091095][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 746.099940][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 746.109923][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 746.121163][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 746.611508][ T5891] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 746.785137][ T5891] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 746.800958][ T5891] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 746.852246][ T5891] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.903286][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.927680][ T5891] usb 1-1: Product: syz [ 746.947026][ T5891] usb 1-1: Manufacturer: syz [ 746.957895][ T5891] usb 1-1: SerialNumber: syz [ 746.981717][T22262] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 747.070734][T22258] chnl_net:caif_netlink_parms(): no params data found [ 747.222701][T22262] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 747.395019][T22258] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.413738][T22258] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.427812][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.427880][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.451782][T22258] bridge_slave_0: entered allmulticast mode [ 747.474396][T22258] bridge_slave_0: entered promiscuous mode [ 747.491874][T22258] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.499150][T22258] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.524959][T22258] bridge_slave_1: entered allmulticast mode [ 747.543121][T22258] bridge_slave_1: entered promiscuous mode [ 747.729861][T22258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.756660][T22258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.776440][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6720'. [ 747.833406][T22290] vxlan2: entered promiscuous mode [ 747.902414][T22258] team0: Port device team_slave_0 added [ 747.922270][T22258] team0: Port device team_slave_1 added [ 748.028474][T22258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.041320][T22258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.101053][T22258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.123368][T22258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.130448][T22258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.190917][T22258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.230957][ T5845] Bluetooth: hci1: command tx timeout [ 748.283332][ T5891] cdc_ncm 1-1:1.0: bind() failure [ 748.287081][T22258] hsr_slave_0: entered promiscuous mode [ 748.312535][T22258] hsr_slave_1: entered promiscuous mode [ 748.317343][ T5891] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 748.319424][T22258] debugfs: 'hsr0' already exists in 'hsr' [ 748.331498][T22258] Cannot create hsr debugfs directory [ 748.354856][ T5891] cdc_ncm 1-1:1.1: bind() failure [ 748.378180][ T5891] usb 1-1: USB disconnect, device number 101 [ 748.774664][T22258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.797382][T22258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.961764][T22258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.991169][T22258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.135367][T22258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.156028][T22258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.254174][T22258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.281175][T22258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.639709][T22258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 749.651733][ T5937] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 749.655568][T22258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 749.692341][T22258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 749.722324][T22258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 749.834600][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.868297][ T5937] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 749.907837][ T5937] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 749.938553][ T5937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.972918][ T5937] usb 8-1: config 0 descriptor?? [ 750.049245][T22258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.123046][T22258] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.159557][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.166817][ T8466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.218520][T20643] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.225744][T20643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.301073][ T5845] Bluetooth: hci1: command tx timeout [ 750.458029][ T5937] kovaplus 0003:1E7D:2D50.0087: unknown main item tag 0x0 [ 750.488825][ T5937] kovaplus 0003:1E7D:2D50.0087: unknown main item tag 0x0 [ 750.508472][ T5937] kovaplus 0003:1E7D:2D50.0087: unknown main item tag 0x0 [ 750.544369][ T5937] kovaplus 0003:1E7D:2D50.0087: unknown main item tag 0x0 [ 750.569700][ T5937] kovaplus 0003:1E7D:2D50.0087: unknown main item tag 0x0 [ 750.598281][T22258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.613584][ T5937] kovaplus 0003:1E7D:2D50.0087: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.7-1/input0 [ 750.756510][T22258] veth0_vlan: entered promiscuous mode [ 750.797577][T22258] veth1_vlan: entered promiscuous mode [ 750.867060][T22258] veth0_macvtap: entered promiscuous mode [ 750.882324][T22258] veth1_macvtap: entered promiscuous mode [ 750.915046][T22258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.941978][T22258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.963164][T22323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.986925][T22323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.026291][T22323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.073016][T22323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.132919][ T5937] kovaplus 0003:1E7D:2D50.0087: couldn't init struct kovaplus_device [ 751.141213][ T5937] kovaplus 0003:1E7D:2D50.0087: couldn't install mouse [ 751.157077][ T5937] kovaplus 0003:1E7D:2D50.0087: probe with driver kovaplus failed with error -71 [ 751.192330][T19729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.195403][ T5937] usb 8-1: USB disconnect, device number 10 [ 751.220059][T19729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.357403][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.384292][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.781054][ T30] audit: type=1326 audit(1764982151.778:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.1.6740" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d539 code=0x0 [ 751.990271][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6742'. [ 752.219520][ T30] audit: type=1326 audit(1764982152.218:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22356 comm="syz.6.6743" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd4539 code=0x0 [ 752.381451][ T5845] Bluetooth: hci1: command tx timeout [ 752.494739][T22375] team_slave_0: entered promiscuous mode [ 752.500995][T22375] team_slave_1: entered promiscuous mode [ 752.523843][T22375] team_slave_0: left promiscuous mode [ 752.529732][T22375] team_slave_1: left promiscuous mode [ 752.989875][T22390] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6756'. [ 753.402049][ T5891] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 753.563075][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.611614][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.645327][ T5891] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 753.664827][ T5891] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 753.680986][ T5891] usb 2-1: Manufacturer: syz [ 753.694624][ T5891] usb 2-1: config 0 descriptor?? [ 754.461842][ T5845] Bluetooth: hci1: command tx timeout [ 754.744617][ T5891] uclogic 0003:256C:006D.0088: v1 frame probing failed: -71 [ 754.764922][ T5891] uclogic 0003:256C:006D.0088: failed probing parameters: -71 [ 754.779702][ T5891] uclogic 0003:256C:006D.0088: probe with driver uclogic failed with error -71 [ 754.799887][ T5891] usb 2-1: USB disconnect, device number 111 [ 755.160981][ T5937] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 755.322134][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 755.329415][ T5937] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 755.343705][ T5937] usb 1-1: config 0 has no interface number 0 [ 755.361060][ T5937] usb 1-1: config 0 interface 12 has no altsetting 0 [ 755.386769][ T5937] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 755.413538][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.441297][ T5937] usb 1-1: Product: syz [ 755.451154][ T5937] usb 1-1: Manufacturer: syz [ 755.460089][ T5937] usb 1-1: SerialNumber: syz [ 755.479522][ T5937] usb 1-1: config 0 descriptor?? [ 755.736663][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6796'. [ 755.911073][ T5904] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 756.099901][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 756.113004][ T5904] usb 2-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 756.129682][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.159307][ T5904] usb 2-1: config 0 descriptor?? [ 756.169631][T22474] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 756.507893][T22498] netlink: 'syz.7.6805': attribute type 6 has an invalid length. [ 756.615960][ T5904] saitek 0003:0738:1709.0089: report_id 1146923740 is invalid [ 756.624563][ T5904] saitek 0003:0738:1709.0089: item 0 4 1 8 parsing failed [ 756.634263][ T5904] saitek 0003:0738:1709.0089: parse failed [ 756.640369][ T5904] saitek 0003:0738:1709.0089: probe with driver saitek failed with error -22 [ 756.708353][ T5937] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 756.724552][ T5937] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 756.733208][ T5937] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 756.743057][ T5937] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 756.756711][ T5937] usb 1-1: USB disconnect, device number 102 [ 756.855630][ T5904] usb 2-1: USB disconnect, device number 112 [ 757.528649][T22517] IPv4: Oversized IP packet from 172.20.20.24 [ 757.537486][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 757.544218][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 757.691257][T22524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6814'. [ 758.221254][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6819'. [ 758.251959][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6819'. [ 759.549230][T22560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6828'. [ 759.681279][ T10] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 759.851147][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 759.861739][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 759.882190][ T10] usb 1-1: config 0 has no interface number 0 [ 759.906388][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 759.917660][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.940919][ T10] usb 1-1: Product: syz [ 759.945343][ T10] usb 1-1: Manufacturer: syz [ 759.949981][ T10] usb 1-1: SerialNumber: syz [ 759.961589][ T10] usb 1-1: config 0 descriptor?? [ 759.974153][ T10] smsc95xx v2.0.0 [ 760.404140][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 760.436448][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 760.611001][ T5891] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 760.745669][T22596] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 760.788824][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 760.802819][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 760.831364][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 760.865679][ T5891] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 760.890974][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.940030][ T5891] usb 4-1: config 0 descriptor?? [ 761.084468][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 761.111538][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 761.140062][ T10] usb 1-1: USB disconnect, device number 103 [ 761.392437][ T5891] lg-g15 0003:046D:C222.008A: hidraw0: USB HID v0.05 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 761.622931][ T5946] usb 4-1: USB disconnect, device number 113 [ 762.286150][ T10] hid-generic 0002:0004:0009.008B: unknown main item tag 0x0 [ 762.298011][ T10] hid-generic 0002:0004:0009.008B: unknown main item tag 0x0 [ 762.312534][ T10] hid-generic 0002:0004:0009.008B: unknown main item tag 0x0 [ 762.325843][ T10] hid-generic 0002:0004:0009.008B: unknown main item tag 0x0 [ 762.335037][ T10] hid-generic 0002:0004:0009.008B: unknown main item tag 0x0 [ 762.344202][ T10] hid-generic 0002:0004:0009.008B: unknown main item tag 0x0 [ 762.353491][ T10] hid-generic 0002:0004:0009.008B: unknown main item tag 0x0 [ 762.361638][ T10] hid-generic 0002:0004:0009.008B: unknown main item tag 0x0 [ 762.369360][ T10] hid-generic 0002:0004:0009.008B: unknown main item tag 0x0 [ 762.377339][ T10] hid-generic 0002:0004:0009.008B: unknown main item tag 0x0 [ 762.425403][ T10] hid-generic 0002:0004:0009.008B: hidraw0: HID v0.04 Device [syz0] on syz0 [ 762.606376][T22647] fido_id[22647]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 763.175634][T22665] tipc: Started in network mode [ 763.197952][T22665] tipc: Node identity ac1414aa, cluster identity 4711 [ 763.235539][T22665] tipc: Enabled bearer , priority 10 [ 764.365260][ T5937] tipc: Node number set to 2886997162 [ 764.508189][T22702] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6889'. [ 764.517690][T22702] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6889'. [ 764.519739][T22700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 764.623046][ T5842] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 764.789246][ T5842] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 764.800988][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.809106][ T5842] usb 1-1: Product: syz [ 764.818816][ T5842] usb 1-1: Manufacturer: syz [ 764.825618][ T5842] usb 1-1: SerialNumber: syz [ 764.834688][ T5842] usb 1-1: config 0 descriptor?? [ 764.853563][ T5842] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 764.875005][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 764.892112][ T5842] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 764.908595][ T5842] usb 1-1: media controller created [ 764.932586][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 764.992393][ T5842] DVB: Unable to find symbol mt352_attach() [ 765.026718][ T5842] DVB: Unable to find symbol nxt6000_attach() [ 765.033327][ T5842] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 765.050399][ T5842] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input152 [ 765.063978][ T5842] dvb-usb: schedule remote query interval to 1000 msecs. [ 765.073537][ T5842] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 765.085391][ T5842] dvb-usb: bulk message failed: -22 (7/0) [ 765.091219][ T5842] dvb-usb: bulk message failed: -22 (7/0) [ 765.107799][ T5842] usb 1-1: USB disconnect, device number 104 [ 765.241073][ T5842] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 766.651494][ T5937] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 766.956128][ T5937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 766.981035][ T5946] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 766.989839][ T5937] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 766.997834][ T5937] usb 2-1: can't read configurations, error -71 [ 767.013723][ T30] audit: type=1326 audit(1764982167.018:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22767 comm="syz.7.6916" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0 [ 767.157309][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 767.170076][ T5946] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 767.178887][ T5946] usb 4-1: config 0 has no interface number 0 [ 767.185986][ T5946] usb 4-1: config 0 interface 184 has no altsetting 0 [ 767.198208][ T5946] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 767.221008][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.229062][ T5946] usb 4-1: Product: syz [ 767.233949][ T5946] usb 4-1: Manufacturer: syz [ 767.241404][ T5946] usb 4-1: SerialNumber: syz [ 767.259071][ T5946] usb 4-1: config 0 descriptor?? [ 767.283937][ T5946] smsc75xx v1.0.0 [ 767.398721][T22791] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.6926'. [ 768.315742][ T5946] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 768.516707][ T5946] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 768.538065][ T5946] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 768.556279][ T5946] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 768.577759][ T5946] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 768.593831][ T5946] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 768.609414][ T5946] usb 4-1: USB disconnect, device number 114 [ 769.661078][ T5946] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 769.785694][T22848] gretap0: entered promiscuous mode [ 769.791555][T22848] vlan2: entered promiscuous mode [ 769.822094][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 769.832828][ T5946] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 769.842197][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.850269][ T5946] usb 1-1: Product: syz [ 769.855460][ T5946] usb 1-1: Manufacturer: syz [ 769.860072][ T5946] usb 1-1: SerialNumber: syz [ 769.867520][ T5946] usb 1-1: config 0 descriptor?? [ 769.882237][ T5946] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 770.931102][T19763] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 771.104457][ T5946] gspca_sonixj: reg_w1 err -71 [ 771.112688][ T5946] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 771.121348][T19763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.139303][ T5946] usb 1-1: USB disconnect, device number 105 [ 771.148765][T19763] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 771.174075][T19763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.198449][T19763] usb 2-1: Product: syz [ 771.204013][T19763] usb 2-1: Manufacturer: syz [ 771.208875][T19763] usb 2-1: SerialNumber: syz [ 771.881168][ T10] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 772.051443][ T10] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 772.100964][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.110737][ T10] usb 4-1: Product: syz [ 772.125074][ T10] usb 4-1: Manufacturer: syz [ 772.129849][ T10] usb 4-1: SerialNumber: syz [ 772.138830][ T10] usb 4-1: config 0 descriptor?? [ 772.152284][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 772.179354][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 772.202565][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 772.229556][ T10] usb 4-1: media controller created [ 772.249675][T19763] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 772.278609][T19763] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 772.294653][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 772.410616][ T10] DVB: Unable to find symbol mt352_attach() [ 772.479347][T19763] usb 2-1: USB disconnect, device number 115 [ 772.499514][ T10] DVB: Unable to find symbol nxt6000_attach() [ 772.504791][T19763] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 772.534645][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 772.576704][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input153 [ 772.620754][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 772.648592][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 772.684267][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 772.696902][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 772.719229][ T10] usb 4-1: USB disconnect, device number 115 [ 772.841405][ T5842] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 772.896336][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 773.040935][ T5842] usb 1-1: Using ep0 maxpacket: 32 [ 773.075314][ T5842] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 773.089170][ T5842] usb 1-1: config 0 has no interface number 0 [ 773.099634][ T5842] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 773.132303][ T5842] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 773.163620][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.195311][ T5842] usb 1-1: Product: syz [ 773.199563][ T5842] usb 1-1: Manufacturer: syz [ 773.244806][ T5842] usb 1-1: SerialNumber: syz [ 773.277488][ T5842] usb 1-1: config 0 descriptor?? [ 773.296213][T22925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 773.542917][T22925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 773.938074][T22978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6998'. [ 773.967944][T22978] netlink: 'syz.1.6998': attribute type 5 has an invalid length. [ 774.028368][T22978] vxlan0: entered promiscuous mode [ 774.054015][ T1002] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.083741][ T1002] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.099953][ T1002] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.120374][ T1002] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.179727][ T5842] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 774.585069][ T5842] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 774.614717][ T5842] asix 1-1:0.188: probe with driver asix failed with error -71 [ 774.647944][ T5842] usb 1-1: USB disconnect, device number 106 [ 775.281485][T23022] kvm: user requested TSC rate below hardware speed [ 775.313768][T23022] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 775.542106][T23031] loop4: detected capacity change from 0 to 7 [ 775.574610][T23031] Dev loop4: unable to read RDB block 7 [ 775.591361][T23031] loop4: unable to read partition table [ 775.611470][T23031] loop4: partition table beyond EOD, truncated [ 775.636544][T23031] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 776.877797][T23070] gretap0: entered promiscuous mode [ 776.941027][T23070] vlan0: entered promiscuous mode [ 777.043001][T23076] vivid-000: disconnect [ 777.072350][T23075] vivid-000: reconnect [ 777.520976][T19763] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 777.601247][ T10] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 777.650941][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 777.682900][T19763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.694057][T19763] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 777.707707][T19763] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 777.717406][T19763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.729016][T19763] usb 2-1: config 0 descriptor?? [ 777.750993][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 777.758346][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.769202][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.784279][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 777.793629][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.804020][ T10] usb 1-1: Product: syz [ 777.808352][ T10] usb 1-1: Manufacturer: syz [ 777.813613][ T10] usb 1-1: SerialNumber: syz [ 777.828323][ T9] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 777.839408][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.848080][ T9] usb 8-1: Product: syz [ 777.856433][ T9] usb 8-1: Manufacturer: syz [ 777.861509][ T9] usb 8-1: SerialNumber: syz [ 777.869638][ T9] usb 8-1: config 0 descriptor?? [ 778.060113][ T10] usb 1-1: 0:2 : does not exist [ 778.075838][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 778.109385][ T10] usb 1-1: USB disconnect, device number 107 [ 778.148992][T19763] hid_parser_main: 7 callbacks suppressed [ 778.149019][T19763] kovaplus 0003:1E7D:2D50.008C: unknown main item tag 0x0 [ 778.168710][T19763] kovaplus 0003:1E7D:2D50.008C: unknown main item tag 0x0 [ 778.177061][T19763] kovaplus 0003:1E7D:2D50.008C: unknown main item tag 0x0 [ 778.189920][T19763] kovaplus 0003:1E7D:2D50.008C: unknown main item tag 0x0 [ 778.197992][T15713] udevd[15713]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.218050][T19763] kovaplus 0003:1E7D:2D50.008C: unknown main item tag 0x0 [ 778.233380][T19763] kovaplus 0003:1E7D:2D50.008C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 778.295641][ T9] usb 8-1: Firmware: major: 84, minor: 111, hardware type: UNKNOWN (228) [ 778.497331][ T9] usb 8-1: Read permanent extended address e8:d2:11:09:3c:e9:ea:3a from device [ 778.509524][ T9] usb 8-1: atusb_probe: initialization failed, error = -524 [ 778.517229][ T9] atusb 8-1:0.0: probe with driver atusb failed with error -524 [ 778.553218][T23106] netlink: 'syz.3.7047': attribute type 12 has an invalid length. [ 778.677050][T23108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7048'. [ 778.716803][ T5937] usb 8-1: USB disconnect, device number 11 [ 778.962182][T19763] kovaplus 0003:1E7D:2D50.008C: couldn't init struct kovaplus_device [ 778.980620][T19763] kovaplus 0003:1E7D:2D50.008C: couldn't install mouse [ 779.003517][T19763] kovaplus 0003:1E7D:2D50.008C: probe with driver kovaplus failed with error -71 [ 779.025656][T19763] usb 2-1: USB disconnect, device number 116 [ 779.240562][T23128] netlink: 'syz.3.7057': attribute type 11 has an invalid length. [ 779.332132][T23130] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7058'. [ 779.928115][T23154] loop6: detected capacity change from 0 to 7 [ 779.938025][T15713] Dev loop6: unable to read RDB block 7 [ 779.949966][T15713] loop6: AHDI p1 p2 p3 [ 779.960902][T15713] loop6: partition table partially beyond EOD, truncated [ 779.969838][T15713] loop6: p1 start 4217409618 is beyond EOD, truncated [ 779.995692][T15713] loop6: p2 size 98 extends beyond EOD, truncated [ 780.018967][T23154] Dev loop6: unable to read RDB block 7 [ 780.025253][T23154] loop6: AHDI p1 p2 p3 [ 780.036922][T23154] loop6: partition table partially beyond EOD, truncated [ 780.065773][T23154] loop6: p1 start 4217409618 is beyond EOD, truncated [ 780.080682][T23154] loop6: p2 size 98 extends beyond EOD, truncated [ 780.188169][T15713] udevd[15713]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 780.265245][T15713] udevd[15713]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 780.429189][ T5842] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 780.487228][ T5842] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 780.939604][T23172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7075'. [ 781.594548][ T5946] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 781.771368][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 781.824648][ T5946] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 781.837477][ T5946] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 781.846598][ T5946] usb 1-1: config 166 has no interface number 0 [ 781.870423][ T5946] usb 1-1: config 166 has no interface number 1 [ 781.877775][ T5946] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 781.890933][ T5946] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 781.903829][ T5946] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 781.915623][ T5946] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 781.929715][ T5946] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 781.942857][ T5946] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 781.954135][ T5946] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 781.965864][ T5946] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 781.978275][ T5946] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 781.996207][ T5946] usb 1-1: config 166 interface 177 has no altsetting 0 [ 782.003623][ T5946] usb 1-1: config 166 interface 34 has no altsetting 0 [ 782.013849][ T5946] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 782.039369][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.058954][ T5946] usb 1-1: Product: syz [ 782.067871][ T5946] usb 1-1: Manufacturer: syz [ 782.076710][ T5946] usb 1-1: SerialNumber: syz [ 782.271587][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 782.332342][ T5946] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 782.471455][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 782.480052][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 782.506669][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 782.521233][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 782.533228][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 782.534404][ T5946] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 782.543324][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.543387][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 782.543410][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.728226][T23218] loop2: detected capacity change from 0 to 7 [ 782.738769][T23218] Dev loop2: unable to read RDB block 7 [ 782.747113][ T5937] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 782.747492][T23218] loop2: AHDI p1 p2 p3 [ 782.762809][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 782.768330][ T10] usbtmc 4-1:16.0: can't read capabilities [ 782.771208][T23218] loop2: partition table partially beyond EOD, truncated [ 782.783369][T23218] loop2: p1 start 1601398130 is beyond EOD, truncated [ 782.791277][T23218] loop2: p2 start 1702059890 is beyond EOD, truncated [ 782.826904][ T5946] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 782.921335][ T5937] usb 8-1: Using ep0 maxpacket: 32 [ 782.941375][ T5937] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 782.950556][ T5937] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.964038][ T5937] usb 8-1: Product: syz [ 782.968475][ T5937] usb 8-1: Manufacturer: syz [ 782.981977][ T5946] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 782.994338][ T5937] usb 8-1: SerialNumber: syz [ 783.001381][ T5946] uvcvideo 1-1:166.34: No valid video chain found. [ 783.010779][ T5937] usb 8-1: config 0 descriptor?? [ 783.034591][ T5937] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 783.053443][ T5946] usb 1-1: USB disconnect, device number 108 [ 783.128814][T23196] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 783.154581][ T10] usb 4-1: USB disconnect, device number 116 [ 783.411033][ T5891] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 783.571095][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 783.578053][ T5891] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 783.586769][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.597506][ T5891] usb 2-1: config 0 has no interface number 0 [ 783.606104][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 783.615297][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.624656][ T5891] usb 2-1: Product: syz [ 783.628864][ T5891] usb 2-1: Manufacturer: syz [ 783.633770][ T5891] usb 2-1: SerialNumber: syz [ 783.642268][ T5891] usb 2-1: config 0 descriptor?? [ 783.658037][ T5891] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 783.680594][ T5891] uvcvideo 2-1:0.105: No valid video chain found. [ 783.855638][ T5891] usb 2-1: USB disconnect, device number 117 [ 784.245166][ T5937] gspca_stk1135: reg_w 0xd err -71 [ 784.252855][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 784.259231][ T5937] gspca_stk1135: Sensor write failed [ 784.278956][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 784.294622][ T5937] gspca_stk1135: Sensor write failed [ 784.294660][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 784.294674][ T5937] gspca_stk1135: Sensor read failed [ 784.294703][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 784.294715][ T5937] gspca_stk1135: Sensor read failed [ 784.294725][ T5937] gspca_stk1135: Detected sensor type unknown (0x0) [ 784.294759][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 784.294771][ T5937] gspca_stk1135: Sensor read failed [ 784.294800][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 784.294812][ T5937] gspca_stk1135: Sensor read failed [ 784.294841][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 784.294853][ T5937] gspca_stk1135: Sensor write failed [ 784.294881][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 784.294893][ T5937] gspca_stk1135: Sensor write failed [ 784.294988][ T5937] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 784.306822][ T5937] usb 8-1: USB disconnect, device number 12 [ 784.631271][ T5891] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 784.796031][ T5891] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 784.815944][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.827691][ T5891] usb 4-1: Product: syz [ 784.853532][ T5891] usb 4-1: Manufacturer: syz [ 784.858296][ T5891] usb 4-1: SerialNumber: syz [ 784.881669][ T5891] usb 4-1: config 0 descriptor?? [ 785.059563][T23271] overlayfs: missing 'lowerdir' [ 785.081171][ T9] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 785.263263][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.279893][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.290190][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 785.303494][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.313618][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.329181][ T9] usb 1-1: config 0 descriptor?? [ 785.378394][T23283] syz_tun: entered allmulticast mode [ 785.387730][T23282] syz_tun: left allmulticast mode [ 785.797389][ T9] plantronics 0003:047F:FFFF.008E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 786.150417][ T5891] usb 4-1: f81604_read: reg: 100e failed: -EPROTO [ 786.178562][ T5891] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 786.195232][ T5891] usb 4-1: USB disconnect, device number 117 [ 786.234579][ T5891] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 786.282356][ T5497] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 786.291809][ T5891] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 786.868360][T19729] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.881429][T19729] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.063985][T19729] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.075616][ T5904] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 787.084198][T19729] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.211673][T19729] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.233162][T19729] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.250955][ T5904] usb 8-1: Using ep0 maxpacket: 16 [ 787.259917][ T5904] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.281502][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 787.293172][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 787.300805][ T5904] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 787.313033][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 787.324635][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 787.327181][ T5904] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 787.353282][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 787.360749][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.401342][ T5904] usb 8-1: Product: syz [ 787.405568][ T5904] usb 8-1: Manufacturer: syz [ 787.411411][ T5904] usb 8-1: SerialNumber: syz [ 787.479281][T19729] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.490213][T19729] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.857994][ T5904] usb 8-1: cannot find UAC_HEADER [ 787.885641][ T5891] usb 1-1: USB disconnect, device number 109 [ 787.902826][T19729] bridge_slave_1: left allmulticast mode [ 787.935434][T19729] bridge_slave_1: left promiscuous mode [ 787.962578][T19729] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.991350][ T5904] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 788.028686][ T5904] usb 8-1: USB disconnect, device number 13 [ 788.041395][T19729] bridge_slave_0: left allmulticast mode [ 788.055754][T19729] bridge_slave_0: left promiscuous mode [ 788.064865][T19729] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.120110][T15713] udevd[15713]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.279198][ T5904] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 788.318529][ T5904] hid-generic 0000:0000:0000.008F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 789.017680][ T30] audit: type=1326 audit(1764982189.018:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.7.7147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 789.080950][ T30] audit: type=1326 audit(1764982189.048:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.7.7147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 789.117546][ T30] audit: type=1326 audit(1764982189.048:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.7.7147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 789.141113][ T30] audit: type=1326 audit(1764982189.048:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.7.7147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 789.193602][ T30] audit: type=1326 audit(1764982189.048:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.7.7147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 789.245568][ T30] audit: type=1326 audit(1764982189.048:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.7.7147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 789.308909][ T30] audit: type=1326 audit(1764982189.048:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.7.7147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 789.361632][ T30] audit: type=1326 audit(1764982189.048:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.7.7147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 789.414972][ T30] audit: type=1326 audit(1764982189.058:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.7.7147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 789.441773][ T5845] Bluetooth: hci1: command tx timeout [ 789.461780][ T30] audit: type=1326 audit(1764982189.058:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.7.7147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 789.757476][T19729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.771694][T19729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.791333][T19729] bond0 (unregistering): Released all slaves [ 790.192011][T23377] loop6: detected capacity change from 0 to 2640 [ 790.199059][T23377] buffer_io_error: 27 callbacks suppressed [ 790.199077][T23377] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.221248][T23377] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.231872][T23377] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.246724][T23377] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.259723][T23380] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.272434][T23377] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.298333][T23380] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.335679][T23376] Buffer I/O error on dev loop6, logical block 4, async page read [ 790.387627][T23380] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.418806][T23376] Buffer I/O error on dev loop6, logical block 4, async page read [ 790.442902][T23377] ldm_validate_partition_table(): Disk read failed. [ 790.449963][T23377] Dev loop6: unable to read RDB block 0 [ 790.466484][T23377] loop6: unable to read partition table [ 790.477662][T23377] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 790.657254][T23323] chnl_net:caif_netlink_parms(): no params data found [ 790.959551][ T5202] ldm_validate_partition_table(): Disk read failed. [ 790.981620][ T5202] Dev loop6: unable to read RDB block 0 [ 790.987782][ T5202] loop6: unable to read partition table [ 791.169296][T19729] hsr_slave_0: left promiscuous mode [ 791.195828][T19729] hsr_slave_1: left promiscuous mode [ 791.216410][T19729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.237338][T19729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.264601][T19729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.300510][T19729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.438626][T19729] veth1_macvtap: left promiscuous mode [ 791.470328][T19729] veth0_macvtap: left promiscuous mode [ 791.488601][T19729] veth1_vlan: left promiscuous mode [ 791.516114][T19729] veth0_vlan: left promiscuous mode [ 791.520893][ T5845] Bluetooth: hci1: command tx timeout [ 791.685113][ T5202] ldm_validate_partition_table(): Disk read failed. [ 791.895473][ T5202] Dev loop6: unable to read RDB block 0 [ 791.906762][ T5202] loop6: unable to read partition table [ 792.340240][T23403] kvm: apic: phys broadcast and lowest prio [ 793.303781][T19729] team0 (unregistering): Port device team_slave_1 removed [ 793.321624][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 793.369742][T19729] team0 (unregistering): Port device team_slave_0 removed [ 793.505651][ T9] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 793.531297][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.563022][ T9] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 793.582141][ T5845] Bluetooth: hci1: command tx timeout [ 793.585474][ T9] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 793.611211][ T9] usb 8-1: Manufacturer: syz [ 793.619290][ T9] usb 8-1: config 0 descriptor?? [ 793.678776][T23433] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 793.749585][ T9] rc_core: IR keymap rc-hauppauge not found [ 793.751112][T23433] kvm: Disabled LAPIC found during irq injection [ 793.756343][ T9] Registered IR keymap rc-empty [ 793.770048][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 793.808601][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input156 [ 793.978399][ T5925] usb 8-1: USB disconnect, device number 14 [ 794.564957][T23323] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.584648][T23323] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.601145][T23323] bridge_slave_0: entered allmulticast mode [ 794.623492][T23323] bridge_slave_0: entered promiscuous mode [ 794.658991][T23323] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.681979][T23323] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.692303][T23323] bridge_slave_1: entered allmulticast mode [ 794.716530][T23323] bridge_slave_1: entered promiscuous mode [ 794.849715][T23323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.894259][T23323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.001336][T23323] team0: Port device team_slave_0 added [ 795.055035][T23323] team0: Port device team_slave_1 added [ 795.155128][T23323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.164700][T23323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.193570][T23323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.285723][T23323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.302211][T23323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.358566][T23323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.391450][T23461] loop2: detected capacity change from 0 to 7 [ 795.440803][T23461] Dev loop2: unable to read RDB block 7 [ 795.475649][T19729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.498818][T23461] loop2: unable to read partition table [ 795.542111][T23461] loop2: partition table beyond EOD, truncated [ 795.590503][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 795.598044][T23461] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 795.617553][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 795.627877][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 795.636496][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 795.644813][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 795.660959][ T5847] Bluetooth: hci1: command tx timeout [ 795.912258][T19729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.076667][T23323] hsr_slave_0: entered promiscuous mode [ 796.083885][T23323] hsr_slave_1: entered promiscuous mode [ 796.114897][T23323] debugfs: 'hsr0' already exists in 'hsr' [ 796.120726][T23323] Cannot create hsr debugfs directory [ 796.179044][T19729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.306009][T19729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.742430][ T5904] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 796.851832][T19729] bond1: left allmulticast mode [ 796.857128][T19729] bond1: left promiscuous mode [ 796.863097][T19729] bridge0: port 4(bond1) entered disabled state [ 796.881541][T19729] vlan2: left promiscuous mode [ 796.887296][T19729] bridge0: port 3(vlan2) entered disabled state [ 796.897833][T19729] bridge_slave_1: left allmulticast mode [ 796.904476][T19729] bridge_slave_1: left promiscuous mode [ 796.912004][T19729] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.924851][ T5904] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 796.938101][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.946765][ T5904] usb 8-1: Product: syz [ 796.954848][T19729] bridge_slave_0: left promiscuous mode [ 796.960656][T19729] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.968484][ T5904] usb 8-1: Manufacturer: syz [ 796.976283][ T5904] usb 8-1: SerialNumber: syz [ 797.002169][ T5904] usb 8-1: config 0 descriptor?? [ 797.035210][ T5904] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 797.144286][T19729] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 797.740991][ T5847] Bluetooth: hci4: command tx timeout [ 797.791870][T19729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.802735][T19729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.815242][T19729] bond0 (unregistering): (slave team0): Releasing backup interface [ 797.831974][T19729] bond0 (unregistering): Released all slaves [ 797.857919][ T5842] psmouse serio6: Failed to reset mouse on : -5 [ 798.016392][T19729] bond1 (unregistering): Released all slaves [ 798.035232][T19729] bond2 (unregistering): (slave lo): Releasing backup interface [ 798.044833][T19729] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 798.059107][T19729] bond2 (unregistering): Released all slaves [ 798.077582][T19729] bond3 (unregistering): Released all slaves [ 798.116470][T23469] chnl_net:caif_netlink_parms(): no params data found [ 798.241549][T19729] tipc: Disabling bearer [ 798.252620][T19729] tipc: Left network mode [ 798.429840][T23469] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.438712][T23469] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.439193][T19763] usb 8-1: USB disconnect, device number 15 [ 798.446948][T23469] bridge_slave_0: entered allmulticast mode [ 798.462912][T23469] bridge_slave_0: entered promiscuous mode [ 798.499069][T23469] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.507525][T23469] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.516270][T23469] bridge_slave_1: entered allmulticast mode [ 798.525046][T23469] bridge_slave_1: entered promiscuous mode [ 798.672657][T23469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.682096][T23323] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 798.740715][T23469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.763244][T23323] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 798.780137][T23323] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 798.879216][T23323] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 798.926705][T23469] team0: Port device team_slave_0 added [ 798.942304][T23469] team0: Port device team_slave_1 added [ 799.024610][T19729] hsr_slave_0: left promiscuous mode [ 799.042854][T19729] hsr_slave_1: left promiscuous mode [ 799.049089][T19729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.063696][T19729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.523489][T19729] team0 (unregistering): Port device team_slave_1 removed [ 799.577344][T19729] team0 (unregistering): Port device team_slave_0 removed [ 799.835840][ T5847] Bluetooth: hci4: command tx timeout [ 800.253468][T23469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.260475][T23469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.290151][T23469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.342282][T23469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.358777][T23469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.386493][T23469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.506239][T23469] hsr_slave_0: entered promiscuous mode [ 800.515159][T23469] hsr_slave_1: entered promiscuous mode [ 800.521855][T23469] debugfs: 'hsr0' already exists in 'hsr' [ 800.528032][T23469] Cannot create hsr debugfs directory [ 800.679095][T23559] netlink: 'syz.6.7207': attribute type 1 has an invalid length. [ 800.757096][T23561] bond1: (slave bridge1): making interface the new active one [ 800.765766][T23561] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 801.106801][T23323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.227059][T23323] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.243319][T23469] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 801.259138][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.266570][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.277744][T23469] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 801.302386][T23469] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 801.328097][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.335354][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.349280][T23469] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 801.671918][ T5842] misc userio: Buffer overflowed, userio client isn't keeping up [ 801.704847][T23323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.867808][T23469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.903007][ T5847] Bluetooth: hci4: command tx timeout [ 801.930577][T23323] veth0_vlan: entered promiscuous mode [ 801.979878][T23469] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.005088][T23323] veth1_vlan: entered promiscuous mode [ 802.039946][T20643] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.047215][T20643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.087472][T20643] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.094819][T20643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.194081][T23323] veth0_macvtap: entered promiscuous mode [ 802.237765][T23323] veth1_macvtap: entered promiscuous mode [ 802.306999][T23323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.351262][T23323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.408040][ T6215] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.419405][ T6215] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.429361][ T6215] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.466027][ T6215] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.650185][T23469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.708743][T19729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.727362][T19729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.785827][ T5842] input: PS/2 Generic Mouse as /devices/serio6/input/input157 [ 802.911308][ T6215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.919227][ T6215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.063207][ T5842] psmouse serio6: Failed to enable mouse on [ 803.073423][T23469] veth0_vlan: entered promiscuous mode [ 803.143176][T23469] veth1_vlan: entered promiscuous mode [ 803.371507][T23469] veth0_macvtap: entered promiscuous mode [ 803.399334][T23469] veth1_macvtap: entered promiscuous mode [ 803.512760][T23469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.565403][T23469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.651619][ T1002] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.684749][ T1002] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.719861][ T1002] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.728996][T23619] input: syz1 as /devices/virtual/input/input158 [ 803.732567][ T1002] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.927880][T23626] loop2: detected capacity change from 0 to 7 [ 803.965068][T23626] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 803.981978][ T5847] Bluetooth: hci4: command tx timeout [ 804.022970][T23626] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 804.029722][T23626] Dev loop2: unable to read RDB block 7 [ 804.047650][T23626] loop2: unable to read partition table [ 804.095491][T23626] loop2: partition table beyond EOD, truncated [ 804.120279][T23626] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 804.538171][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.569456][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.756363][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.785349][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.931420][T19729] bridge_slave_1: left allmulticast mode [ 804.947414][T19729] bridge_slave_1: left promiscuous mode [ 804.967041][T19729] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.074375][T19729] bridge_slave_0: left allmulticast mode [ 805.124885][T19729] bridge_slave_0: left promiscuous mode [ 805.161211][T19729] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.507364][T23684] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7236'. [ 807.383358][T19729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.434421][T19729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.456166][T23706] kernel read not supported for file /rmdF¼ì (pid: 23706 comm: syz.0.7243) [ 807.467379][T19729] bond0 (unregistering): Released all slaves [ 807.493958][T23684] bridge_slave_1: left allmulticast mode [ 807.505330][T23684] bridge_slave_1: left promiscuous mode [ 807.514865][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 807.514877][ T30] audit: type=1800 audit(1764982207.518:1331): pid=23706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7243" name=726D64461716BCEC dev="mqueue" ino=102875 res=0 errno=0 [ 807.531203][T23684] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.573677][T23684] bridge_slave_0: left allmulticast mode [ 807.602863][T23684] bridge_slave_0: left promiscuous mode [ 807.608759][T23684] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.858047][T19729] tipc: Disabling bearer [ 807.871415][T19729] tipc: Left network mode [ 807.954932][ T40] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 808.121355][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 808.140252][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.158331][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.180966][ T40] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 808.238367][ T40] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 808.283732][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.371571][ T40] usb 1-1: config 0 descriptor?? [ 808.827461][T23708] random: crng reseeded on system resumption [ 808.866204][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.877204][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.920224][ T40] input: HID 0955:7214 Haptics as /devices/virtual/input/input159 [ 809.046398][ T40] shield 0003:0955:7214.0090: Registered Thunderstrike controller [ 809.082792][ T40] shield 0003:0955:7214.0090: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 809.218011][ T5925] shield 0003:0955:7214.0090: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 809.255464][ T40] usb 1-1: USB disconnect, device number 110 [ 809.341338][T19729] hsr_slave_0: left promiscuous mode [ 809.350778][ T5925] shield 0003:0955:7214.0090: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 809.362814][ T5925] shield 0003:0955:7214.0090: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 809.381270][T19729] hsr_slave_1: left promiscuous mode [ 809.381702][ T5925] shield 0003:0955:7214.0090: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 809.515668][T19729] pim6reg (unregistering): left allmulticast mode [ 809.841446][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7258'. [ 809.888244][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7258'. [ 809.928533][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7258'. [ 810.760515][T19729] team0 (unregistering): Port device team_slave_1 removed [ 812.164312][ T40] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 812.360178][ T40] usb 9-1: Using ep0 maxpacket: 16 [ 812.380624][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.423752][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.440045][ T40] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 812.470901][ T40] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 812.498756][ T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.580108][ T40] usb 9-1: config 0 descriptor?? [ 812.764669][T23824] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7277'. [ 812.883830][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 812.890314][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 812.897018][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 812.903534][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 812.910115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 812.918123][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 812.926289][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 812.934175][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 812.942341][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 812.950263][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 812.958326][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 812.966215][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 812.974202][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 812.982104][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 812.990057][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 812.997972][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 813.005943][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 813.013844][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 813.021808][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 813.029706][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 813.037796][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 813.045696][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 813.053667][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 813.062461][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 813.070413][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 813.078374][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 813.248065][T23835] random: crng reseeded on system resumption [ 813.332496][ T40] input: HID 0955:7214 Haptics as /devices/virtual/input/input160 [ 813.480085][ T40] shield 0003:0955:7214.0091: Registered Thunderstrike controller [ 813.529770][ T40] shield 0003:0955:7214.0091: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 813.625416][ T5904] shield 0003:0955:7214.0091: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 813.645624][ T40] usb 9-1: USB disconnect, device number 2 [ 813.693250][ T5904] shield 0003:0955:7214.0091: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 813.742184][ T5904] shield 0003:0955:7214.0091: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 813.821099][ T5904] shield 0003:0955:7214.0091: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 814.066664][ T30] audit: type=1326 audit(1764982214.058:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23844 comm="syz.0.7284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 814.178220][ T30] audit: type=1326 audit(1764982214.058:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23844 comm="syz.0.7284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 814.290350][ T30] audit: type=1326 audit(1764982214.058:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23844 comm="syz.0.7284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 814.376152][ T30] audit: type=1326 audit(1764982214.058:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23844 comm="syz.0.7284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 814.504479][ T30] audit: type=1326 audit(1764982214.058:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23844 comm="syz.0.7284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 814.626896][ T30] audit: type=1326 audit(1764982214.058:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23844 comm="syz.0.7284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 814.722719][ T30] audit: type=1326 audit(1764982214.058:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23844 comm="syz.0.7284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 814.789523][ T30] audit: type=1326 audit(1764982214.058:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23844 comm="syz.0.7284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 814.854662][ T30] audit: type=1326 audit(1764982214.058:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23844 comm="syz.0.7284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 814.942907][ T30] audit: type=1326 audit(1764982214.058:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23844 comm="syz.0.7284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 815.364906][T23883] input: syz1 as /devices/virtual/input/input161 [ 815.981030][ T5924] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 816.187339][ T5924] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 816.204843][ T5904] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 816.214564][ T5924] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 816.244638][ T5924] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 816.288477][ T5924] usb 9-1: config 1 has no interface number 0 [ 816.314438][ T5924] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 816.359296][ T5924] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 816.421202][ T5904] usb 10-1: Using ep0 maxpacket: 16 [ 816.441927][ T5904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.458269][ T5924] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 816.493234][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.518439][ T5904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.568334][ T5924] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 816.568742][ T5904] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 816.626739][ T5904] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 816.662628][ T5904] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.697204][ T5904] usb 10-1: config 0 descriptor?? [ 817.140361][ T5924] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 817.149241][T23892] random: crng reseeded on system resumption [ 817.274187][ T5904] input: HID 0955:7214 Haptics as /devices/virtual/input/input162 [ 817.405049][ T5904] shield 0003:0955:7214.0092: Registered Thunderstrike controller [ 817.453498][ T5904] shield 0003:0955:7214.0092: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 817.561439][ T5925] shield 0003:0955:7214.0092: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 817.603824][ T5925] shield 0003:0955:7214.0092: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 817.624180][ T5904] usb 10-1: USB disconnect, device number 2 [ 817.646619][ T5925] shield 0003:0955:7214.0092: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 817.701233][ T40] usb 9-1: USB disconnect, device number 3 [ 817.708820][ T40] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 817.734151][ T5925] shield 0003:0955:7214.0092: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 817.859182][T23929] all: renamed from bridge_slave_0 (while UP) [ 818.785993][T23958] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7317'. [ 819.266818][T23971] kvm: emulating exchange as write [ 820.437855][T24004] netlink: 'syz.7.7329': attribute type 1 has an invalid length. [ 820.601158][ T40] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 820.736863][T24010] bond1: (slave geneve2): making interface the new active one [ 820.786579][T24010] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 820.813886][ T40] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.830660][ T40] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 820.849873][T22370] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 820.867304][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.897895][ T40] usb 10-1: config 0 descriptor?? [ 820.898152][T22370] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 820.955256][T22370] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 820.991166][T22370] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 821.150406][ T40] usbhid 10-1:0.0: can't add hid device: -71 [ 821.161995][ T40] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 821.211084][ T40] usb 10-1: USB disconnect, device number 3 [ 821.544703][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7336'. [ 821.569802][T24031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7336'. [ 821.711484][ T40] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 821.881266][ T40] usb 10-1: Using ep0 maxpacket: 32 [ 821.898064][ T40] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.943982][ T40] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 821.967110][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.978865][ T40] usb 10-1: config 0 descriptor?? [ 821.999957][ T40] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 822.047333][ T40] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 822.496369][ T40] usb 10-1: USB disconnect, device number 4 [ 822.521551][ T40] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 822.813627][T24065] loop6: detected capacity change from 0 to 7 [ 822.839524][T24065] Dev loop6: unable to read RDB block 7 [ 822.860798][T24065] loop6: unable to read partition table [ 822.873459][T24065] loop6: partition table beyond EOD, truncated [ 822.879700][T24065] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 824.891928][T24108] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7356'. [ 825.451371][ T5946] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 825.635901][ T5946] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 825.650889][ T5946] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.720428][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 825.775869][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.797830][ T5946] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 825.813834][ T5946] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 825.825616][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.838977][ T5946] usb 10-1: config 0 descriptor?? [ 825.853219][T24114] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 826.292181][ T5946] plantronics 0003:047F:FFFF.0093: reserved main item tag 0xd [ 826.325494][ T5946] plantronics 0003:047F:FFFF.0093: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 826.593679][ T10] usb 10-1: USB disconnect, device number 5 [ 826.701775][ T5946] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 826.877993][ T5946] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.890207][ T5946] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 826.904184][ T5946] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 826.915931][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.926861][ T5946] usb 9-1: Product: syz [ 826.931155][ T5946] usb 9-1: Manufacturer: syz [ 826.937926][ T5946] usb 9-1: SerialNumber: syz [ 826.959738][ T5946] cdc_mbim 9-1:1.0: skipping garbage [ 827.106686][T24162] loop6: detected capacity change from 0 to 7 [ 827.132749][T24162] Dev loop6: unable to read RDB block 7 [ 827.145422][T24162] loop6: AHDI p1 p2 p3 [ 827.150124][T24162] loop6: partition table partially beyond EOD, truncated [ 827.159052][T24162] loop6: p1 start 4217409618 is beyond EOD, truncated [ 827.170432][T24153] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 827.179568][T24162] loop6: p2 size 98 extends beyond EOD, truncated [ 827.296623][T17471] udevd[17471]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 827.791880][T24153] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 827.799834][ T5946] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 827.859993][ T5946] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 828.062437][ T5946] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 828.073134][ T5946] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 828.089744][ T5946] wwan wwan0: port wwan0mbim0 attached [ 828.157650][ T5946] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, d2:49:8d:4d:99:f5 [ 828.364316][ C0] wdm_int_callback: 6 callbacks suppressed [ 828.364347][ C0] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 828.376991][ C0] wdm_int_callback: 6 callbacks suppressed [ 828.377014][ C0] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 828.390762][ C0] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 828.397571][ C0] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 828.404741][ C0] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 828.411454][ C0] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 828.418023][ C0] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 828.424782][ C0] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 828.431389][ C0] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 828.438088][ C0] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 828.454446][ T9] usb 9-1: USB disconnect, device number 4 [ 828.464054][ T9] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 828.564005][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 828.762322][T24199] syzkaller0: entered promiscuous mode [ 828.767969][T24199] syzkaller0: entered allmulticast mode [ 828.814761][T24199] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 829.310165][T24218] loop9: detected capacity change from 0 to 7 [ 829.330028][T24218] Dev loop9: unable to read RDB block 7 [ 829.342018][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 829.354386][T24218] loop9: unable to read partition table [ 829.360330][T24218] loop9: partition table beyond EOD, truncated [ 829.421474][T24218] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 830.746586][T24267] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 830.939436][ T9] IPVS: starting estimator thread 0... [ 831.031594][T24275] IPVS: using max 26 ests per chain, 62400 per kthread [ 831.228627][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 831.228646][ T30] audit: type=1326 audit(1764982231.228:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24241 comm="syz.7.7398" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0 [ 831.392823][T22370] IPVS: stop unused estimator thread 0... [ 831.449913][T18993] Bluetooth: hci0: command 0x0406 tx timeout [ 831.667444][T24294] netlink: 'syz.0.7410': attribute type 1 has an invalid length. [ 831.927600][T24298] bond4: (slave geneve5): making interface the new active one [ 831.937935][T24298] bond4: (slave geneve5): Enslaving as an active interface with an up link [ 832.003254][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 832.191561][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 832.249998][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 832.651219][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 834.249743][T24347] loop2: detected capacity change from 0 to 7 [ 834.289394][T24347] Dev loop2: unable to read RDB block 7 [ 834.325704][T24347] loop2: unable to read partition table [ 834.338027][T24347] loop2: partition table beyond EOD, truncated [ 834.391637][T24347] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 835.196114][T24358] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.204719][T24358] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.978183][T24358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.021321][T24358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.747337][T20640] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.803967][T20640] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.835959][T20640] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.868860][T20640] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.131385][T24397] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 839.590971][ T5946] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 839.650418][T24475] syzkaller1: entered promiscuous mode [ 839.668047][T24475] syzkaller1: entered allmulticast mode [ 839.762986][ T5946] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.781274][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.801287][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 839.821811][ T5946] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 839.851289][ T5946] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 839.860481][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.892350][ T5946] usb 10-1: config 0 descriptor?? [ 840.371456][ T5946] plantronics 0003:047F:FFFF.0094: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 842.652473][ T5891] usb 10-1: USB disconnect, device number 6 [ 843.924317][T24557] loop3: detected capacity change from 0 to 7 [ 843.950136][T24557] Dev loop3: unable to read RDB block 7 [ 843.997465][T24557] loop3: unable to read partition table [ 844.024224][T24557] loop3: partition table beyond EOD, truncated [ 844.066066][T24557] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 844.961780][T19763] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 845.153895][T19763] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 845.190931][T19763] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 845.233156][T19763] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 845.276988][T19763] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 845.350457][T19763] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 845.411007][T19763] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 845.457505][T19763] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 845.531302][T19763] usb 1-1: config 168 interface 0 has no altsetting 0 [ 845.553471][T19763] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 845.575292][T19763] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 845.607891][T19763] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 845.630949][T19763] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 845.672607][T19763] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 845.729819][T19763] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 845.755231][T19763] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 845.800943][T19763] usb 1-1: config 168 interface 0 has no altsetting 0 [ 845.824062][T19763] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 845.842175][T19763] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 845.868284][T19763] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 845.896858][T19763] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 845.929463][T19763] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 845.952453][T19763] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 845.991194][T19763] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 846.034996][T19763] usb 1-1: config 168 interface 0 has no altsetting 0 [ 846.071239][T19763] usb 1-1: string descriptor 0 read error: -22 [ 846.091231][T19763] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 846.111299][T19763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.163731][T19763] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 846.771928][T24620] bond0: (slave bond_slave_0): Releasing backup interface [ 846.844694][T24620] bond0: (slave bond_slave_1): Releasing backup interface [ 846.932397][T24620] team0: Port device team_slave_0 removed [ 846.982458][T24620] team0: Port device team_slave_1 removed [ 847.002485][T24620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.021012][T24620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.047135][T24620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.085698][T24620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.103801][T24620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 847.151931][T24622] ip6gre0: entered promiscuous mode [ 847.166511][T24622] team0: Port device ip6gre0 added [ 847.205607][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7499'. [ 847.252405][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7499'. [ 847.304724][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7499'. [ 848.016192][T24656] netlink: 'syz.9.7506': attribute type 2 has an invalid length. [ 848.209927][T24664] loop2: detected capacity change from 0 to 7 [ 848.241853][T24664] Dev loop2: unable to read RDB block 7 [ 848.252440][T24664] loop2: AHDI p1 p2 p3 [ 848.256692][T24664] loop2: partition table partially beyond EOD, truncated [ 848.293705][T24664] loop2: p1 start 1601398130 is beyond EOD, truncated [ 848.345679][T24664] loop2: p2 start 1702059890 is beyond EOD, truncated [ 848.507264][T24675] netlink: 'syz.9.7510': attribute type 13 has an invalid length. [ 848.542808][T19763] usb 1-1: USB disconnect, device number 111 [ 848.550764][T24675] netlink: 'syz.9.7510': attribute type 17 has an invalid length. [ 848.717908][T24675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.728302][T24675] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.750733][T24675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 848.785509][T24683] bridge_slave_0: left allmulticast mode [ 848.791412][T24683] bridge_slave_0: left promiscuous mode [ 848.797300][T24683] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.814549][T24683] bridge_slave_1: left allmulticast mode [ 848.820328][T24683] bridge_slave_1: left promiscuous mode [ 848.827622][T24683] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.844204][T24683] bond0: (slave bond_slave_0): Releasing backup interface [ 848.858202][T24683] bond0: (slave bond_slave_1): Releasing backup interface [ 848.877224][T24683] team0: Port device team_slave_0 removed [ 848.903602][T24683] team0: Port device team_slave_1 removed [ 848.912714][T24683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.920137][T24683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.969986][T24683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 848.988244][T24685] ip6gre0: entered promiscuous mode [ 849.004333][T24685] team0: Port device ip6gre0 added [ 852.163516][T24764] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7537'. [ 852.191666][T24764] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7537'. [ 852.214072][T24764] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7537'. [ 853.238705][T24776] sctp: [Deprecated]: syz.7.7543 (pid 24776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 853.238705][T24776] Use struct sctp_sack_info instead [ 853.530908][ T5904] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 853.719971][ T5904] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 853.738988][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.771175][ T5904] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 853.800865][ T5904] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 853.819190][ T5904] usb 9-1: Manufacturer: syz [ 853.837971][ T5904] usb 9-1: config 0 descriptor?? [ 853.988173][ T5904] rc_core: IR keymap rc-hauppauge not found [ 854.004138][ T5904] Registered IR keymap rc-empty [ 854.025577][ T5904] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 854.068742][ T5904] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input165 [ 854.129583][ C1] igorplugusb 9-1:0.0: Error: urb status = -32 [ 854.165408][ T5904] usb 9-1: USB disconnect, device number 5 [ 854.550929][ T5842] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 854.711045][ T5842] usb 10-1: Using ep0 maxpacket: 8 [ 854.719630][ T5842] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.732798][ T5842] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 854.743568][ T5842] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.765994][ T5842] usb 10-1: config 0 descriptor?? [ 854.784058][ T5842] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 856.274688][ T5904] usb 10-1: USB disconnect, device number 7 [ 857.311557][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 857.361462][T24844] netlink: 'syz.0.7569': attribute type 13 has an invalid length. [ 857.452426][ T40] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 857.477291][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 857.493918][ T9] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 857.503499][ T9] usb 10-1: config 0 has no interface number 0 [ 857.524156][ T9] usb 10-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 857.534412][ T9] usb 10-1: config 0 interface 89 has no altsetting 0 [ 857.547274][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 857.574668][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.587976][ T9] usb 10-1: Product: syz [ 857.601739][T24850] fuse: root generation should be zero [ 857.607727][ T9] usb 10-1: Manufacturer: syz [ 857.613026][ T9] usb 10-1: SerialNumber: syz [ 857.626446][ T9] usb 10-1: config 0 descriptor?? [ 857.640928][ T9] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 857.665671][ T9] em28xx 10-1:0.89: Video interface 89 found: [ 857.771593][ T40] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 858.255224][ T9] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 858.702116][ T9] em28xx 10-1:0.89: AC97 command still being executed: not handled properly! [ 858.885624][ T9] em28xx 10-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 858.938092][ T9] em28xx 10-1:0.89: board has no eeprom [ 858.956323][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.983766][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 859.022159][ T9] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 859.029599][ T9] em28xx 10-1:0.89: analog set to bulk mode. [ 859.071388][ T5842] em28xx 10-1:0.89: Registering V4L2 extension [ 859.101877][ T9] usb 10-1: USB disconnect, device number 8 [ 859.152549][ T9] em28xx 10-1:0.89: Disconnecting em28xx [ 859.284144][ T5842] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 859.303043][ T5842] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 859.310229][ T5842] em28xx 10-1:0.89: No AC97 audio processor [ 859.318798][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.335347][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 859.346833][ T5842] usb 10-1: Decoder not found [ 859.353779][ T5842] em28xx 10-1:0.89: failed to create media graph [ 859.360172][ T5842] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 859.380691][ T5842] em28xx 10-1:0.89: Registering snapshot button... [ 859.414492][ T5842] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input166 [ 859.447983][ T5842] em28xx 10-1:0.89: Remote control support is not available for this card. [ 859.467084][ T9] em28xx 10-1:0.89: Closing input extension [ 859.478535][ T9] em28xx 10-1:0.89: Deregistering snapshot button [ 859.648478][ T9] em28xx 10-1:0.89: Freeing device [ 859.735900][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.768411][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 860.014708][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.082821][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 860.370277][T24876] netlink: 304 bytes leftover after parsing attributes in process `syz.6.7580'. [ 860.441592][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 860.455486][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 860.464276][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 860.474881][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 860.482975][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 860.845100][T24890] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 861.650772][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 862.068223][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.082482][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.101275][ T13] bond0 (unregistering): Released all slaves [ 862.149478][ T13] bond1 (unregistering): Released all slaves [ 862.549545][ T5847] Bluetooth: hci0: command tx timeout [ 863.233803][ T13] hsr_slave_0: left promiscuous mode [ 863.253927][ T13] hsr_slave_1: left promiscuous mode [ 863.260147][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.293466][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.309929][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.324622][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.388356][ T13] veth1_macvtap: left promiscuous mode [ 863.403481][ T13] veth0_macvtap: left promiscuous mode [ 863.429632][ T13] veth1_vlan: left promiscuous mode [ 863.440842][ T13] veth0_vlan: left promiscuous mode [ 864.622534][ T5847] Bluetooth: hci0: command tx timeout [ 865.021318][ T13] team0 (unregistering): Port device team_slave_1 removed [ 865.133357][ T13] team0 (unregistering): Port device team_slave_0 removed [ 866.701556][ T5847] Bluetooth: hci0: command tx timeout [ 866.747777][T24979] syzkaller1: entered promiscuous mode [ 866.764968][T24979] syzkaller1: entered allmulticast mode [ 867.174816][T24882] chnl_net:caif_netlink_parms(): no params data found [ 867.328408][T25008] all: renamed from lo (while UP) [ 868.063199][T24882] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.074742][T24882] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.115738][T24882] bridge_slave_0: entered allmulticast mode [ 868.134174][T24882] bridge_slave_0: entered promiscuous mode [ 868.158815][T24882] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.183053][T24882] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.230652][T24882] bridge_slave_1: entered allmulticast mode [ 868.239079][T24882] bridge_slave_1: entered promiscuous mode [ 868.567982][T24882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.615743][T24882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.782149][ T5847] Bluetooth: hci0: command tx timeout [ 868.801452][ T5946] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 868.893870][T24882] team0: Port device team_slave_0 added [ 868.927698][T24882] team0: Port device team_slave_1 added [ 868.990774][T24882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.998097][T24882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.031479][ T5946] usb 9-1: Using ep0 maxpacket: 8 [ 869.033993][T24882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.039303][ T5946] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 869.086906][T24882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.088308][ T5946] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 869.105569][T24882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.131714][ T5946] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 869.132135][ T5946] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 869.132163][ T5946] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.132212][ T5946] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 869.132235][ T5946] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.254154][T24882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.419253][ T5946] usb 9-1: GET_CAPABILITIES returned 0 [ 869.430977][ T5946] usbtmc 9-1:16.0: can't read capabilities [ 869.528118][T24882] hsr_slave_0: entered promiscuous mode [ 869.539778][T24882] hsr_slave_1: entered promiscuous mode [ 869.547799][T24882] debugfs: 'hsr0' already exists in 'hsr' [ 869.554489][T24882] Cannot create hsr debugfs directory [ 870.235787][ T5946] usb 9-1: USB disconnect, device number 6 [ 870.308845][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.330945][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.453615][T24882] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 871.476182][T24882] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 871.497505][T24882] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 871.527145][T24882] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 871.727685][T24882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.821702][T24882] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.870625][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.877884][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.947838][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.955086][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.347441][T24882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.521553][T24882] veth0_vlan: entered promiscuous mode [ 872.579971][T24882] veth1_vlan: entered promiscuous mode [ 872.713638][T24882] veth0_macvtap: entered promiscuous mode [ 872.726722][T24882] veth1_macvtap: entered promiscuous mode [ 872.819501][T24882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.873105][T24882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.934887][ T1002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.970596][ T1002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.033221][ T1002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.076217][ T1002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.379686][T21688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.398988][T21688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.507317][T21688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.531800][T21688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.868779][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7657'. [ 874.807195][ T5842] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 874.860326][ T5842] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz1] on syz0 [ 875.396321][ T5946] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 875.633659][ T5946] usb 9-1: unable to get BOS descriptor or descriptor too short [ 875.681689][ T5946] usb 9-1: not running at top speed; connect to a high speed hub [ 875.712601][ T5946] usb 9-1: config 1 has an invalid interface descriptor of length 5, skipping [ 875.743932][ T5946] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.801332][ T5946] usb 9-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 875.850901][ T5946] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 875.880935][ T5946] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 875.935543][ T5946] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 875.947411][ T30] audit: type=1326 audit(1764982275.948:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25235 comm="syz.9.7673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 875.981520][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.999753][ T5946] usb 9-1: Product: syz [ 876.010449][ T5946] usb 9-1: Manufacturer: syz [ 876.024688][ T5946] usb 9-1: SerialNumber: syz [ 876.034439][ T30] audit: type=1326 audit(1764982275.988:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25235 comm="syz.9.7673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 876.114851][ T30] audit: type=1326 audit(1764982275.988:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25235 comm="syz.9.7673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 876.170249][T25236] IPVS: Scheduler module ip_vs_ not found [ 876.185925][ T30] audit: type=1326 audit(1764982275.988:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25235 comm="syz.9.7673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 876.247263][ T30] audit: type=1326 audit(1764982275.998:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25235 comm="syz.9.7673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 876.309840][ T30] audit: type=1326 audit(1764982275.998:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25235 comm="syz.9.7673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 876.339763][ T5946] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 876.416284][ T30] audit: type=1326 audit(1764982275.998:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25235 comm="syz.9.7673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 876.459261][ T5946] usb 9-1: USB disconnect, device number 7 [ 876.524192][T17471] udevd[17471]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.559308][ T30] audit: type=1326 audit(1764982275.998:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25235 comm="syz.9.7673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 876.624177][ T30] audit: type=1326 audit(1764982276.218:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25235 comm="syz.9.7673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 876.684016][ T30] audit: type=1326 audit(1764982276.218:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25235 comm="syz.9.7673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 877.740953][ T5842] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 877.913224][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.949578][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.970737][ T5842] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 878.040069][ T5842] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 878.083086][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.118322][ T5842] usb 5-1: config 0 descriptor?? [ 878.469481][T25310] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7694'. [ 878.499430][T19420] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.594201][ T5842] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 878.657409][T19420] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.688044][T19420] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.717490][T19420] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.421474][ T5891] usb 5-1: USB disconnect, device number 62 [ 880.732910][T25365] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7704'. [ 880.774465][T25363] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7705'. [ 880.809124][T25363] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7705'. [ 880.826060][T25363] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7705'. [ 882.898030][T25439] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7727'. [ 882.951047][T25439] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7727'. [ 883.096293][ T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 883.272187][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 883.293645][ T9] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 883.302303][ T9] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 883.330858][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 883.340096][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 883.395127][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 883.425837][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 883.457849][ T9] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 883.487652][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.511264][ T9] usb 10-1: config 0 descriptor?? [ 883.732997][ T9] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 883.794918][ T9] usb 10-1: USB disconnect, device number 9 [ 883.844492][ T9] usblp0: removed [ 883.846509][T25467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7735'. [ 884.290942][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 884.461512][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 884.478410][ T9] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 884.503965][ T9] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 884.533445][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 884.570015][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 884.612518][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 884.636836][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 884.710458][ T9] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 884.732685][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.761593][ T9] usb 10-1: config 0 descriptor?? [ 884.827036][T25503] netlink: 'syz.8.7744': attribute type 8 has an invalid length. [ 884.857583][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7744'. [ 884.914534][T25509] netlink: 'syz.8.7744': attribute type 8 has an invalid length. [ 884.952484][T25503] bond0: entered promiscuous mode [ 884.964434][T25509] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7744'. [ 885.006216][ T9] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 885.028457][T25503] bond0: left promiscuous mode [ 885.109689][T25509] bond0: entered promiscuous mode [ 885.152712][T25509] bond0: left promiscuous mode [ 885.563415][ T9] usb 10-1: USB disconnect, device number 10 [ 885.596701][ T9] usblp0: removed [ 887.366274][ T4263] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.534543][ T4263] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.816264][ T4263] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.969213][ T4263] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.391172][ T5924] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 888.409887][T18993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 888.423547][T18993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 888.432591][T18993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 888.446907][T18993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 888.454787][T18993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 888.537174][ T4263] bridge_slave_1: left allmulticast mode [ 888.551009][ T4263] bridge_slave_1: left promiscuous mode [ 888.561480][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.562980][ T5924] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 888.616693][ T4263] bridge_slave_0: left allmulticast mode [ 888.630953][ T4263] bridge_slave_0: left promiscuous mode [ 888.635004][ T5924] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 888.636947][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.707996][ T5924] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 888.744001][ T5924] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 888.772506][ T5924] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 888.820913][ T5924] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 888.828483][ T5924] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 888.865149][ T5924] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 889.086291][ T5924] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 889.131191][ T5924] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 889.162175][ T5924] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 889.174323][ T5924] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 889.189066][ T5924] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 889.204018][ T5924] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 889.215763][ T5924] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 889.259277][ T5924] usb 9-1: string descriptor 0 read error: -22 [ 889.266440][ T5924] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 889.293024][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.353553][ T5924] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 889.772269][ T24] usb 9-1: USB disconnect, device number 8 [ 889.958952][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.970048][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.980463][ T4263] bond0 (unregistering): Released all slaves [ 890.541023][T18993] Bluetooth: hci0: command tx timeout [ 890.544361][T25648] loop2: detected capacity change from 0 to 7 [ 890.566338][T15713] loop2: [ 890.569426][T15713] loop2: partition table partially beyond EOD, truncated [ 890.619260][T25648] loop2: [ 890.625070][T25648] loop2: partition table partially beyond EOD, truncated [ 890.906175][ T4263] hsr_slave_0: left promiscuous mode [ 890.927687][T25657] loop0: detected capacity change from 0 to 2560 [ 890.938377][ T4263] hsr_slave_1: left promiscuous mode [ 890.952660][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.984231][T15713] buffer_io_error: 1533 callbacks suppressed [ 890.984253][T15713] Buffer I/O error on dev loop0, logical block 0, async page read [ 890.987228][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.030295][T25657] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 891.072602][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.080052][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.083665][T25660] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 891.144770][T25657] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 891.161406][T25660] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 891.211190][T25657] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 891.214280][ T4263] veth1_macvtap: left promiscuous mode [ 891.249394][ T4263] veth0_macvtap: left promiscuous mode [ 891.256647][T25657] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 891.277111][ T4263] veth1_vlan: left promiscuous mode [ 891.287253][T25657] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 891.308421][ T4263] veth0_vlan: left promiscuous mode [ 891.357287][T25657] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 891.411157][T25657] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 892.258489][T25697] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 892.621270][T18993] Bluetooth: hci0: command tx timeout [ 893.750028][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 893.810328][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 893.846214][T25733] netlink: 3672 bytes leftover after parsing attributes in process `syz.8.7805'. [ 894.469782][T25604] chnl_net:caif_netlink_parms(): no params data found [ 894.704948][T18993] Bluetooth: hci0: command tx timeout [ 894.943817][T25749] netlink: 'syz.0.7810': attribute type 1 has an invalid length. [ 895.067544][T25604] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.086104][T25604] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.113253][T25604] bridge_slave_0: entered allmulticast mode [ 895.141672][T25604] bridge_slave_0: entered promiscuous mode [ 895.198449][T25754] bond5: (slave bridge2): making interface the new active one [ 895.224509][T25754] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 895.252347][T25604] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.288297][T25604] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.306205][T25604] bridge_slave_1: entered allmulticast mode [ 895.330226][T25604] bridge_slave_1: entered promiscuous mode [ 895.565400][T25604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.597046][T25604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.686462][T25772] team0: Port device ip6gre0 removed [ 895.736827][T25772] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 895.763751][ T5924] skbuff: skb_under_panic: text:ffffffff8a1c8748 len:136 put:40 head:ffff88802828e000 data:ffff88802828dfe8 tail:0x70 end:0x6c0 dev:team0 [ 895.784513][ T5924] ------------[ cut here ]------------ [ 895.790051][ T5924] kernel BUG at net/core/skbuff.c:213! [ 895.802433][ T5924] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 895.808985][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.819954][ T5924] Tainted: [L]=SOFTLOCKUP [ 895.824296][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 895.834463][ T5924] Workqueue: mld mld_ifc_work [ 895.839182][ T5924] RIP: 0010:skb_panic+0x157/0x160 [ 895.844336][ T5924] Code: c7 e0 12 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 4e 94 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 895.864233][ T5924] RSP: 0018:ffffc90004a8f2c0 EFLAGS: 00010286 [ 895.870404][ T5924] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 5606d157db4bc000 [ 895.878386][ T5924] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 895.886367][ T5924] RBP: 00000000000006c0 R08: ffffc90004a8efc7 R09: 1ffff92000951df8 [ 895.894513][ T5924] R10: dffffc0000000000 R11: fffff52000951df9 R12: ffff88809d4558d0 [ 895.902484][ T5924] R13: ffff88802828e000 R14: ffff88802828dfe8 R15: 0000000000000070 [ 895.910465][ T5924] FS: 0000000000000000(0000) GS:ffff888126087000(0000) knlGS:0000000000000000 [ 895.919393][ T5924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 895.925977][ T5924] CR2: 000000002e721ffc CR3: 0000000077bec000 CR4: 00000000003526f0 [ 895.933959][ T5924] DR0: 0000000000000400 DR1: 0000000000000000 DR2: 0000000000000000 [ 895.941949][ T5924] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 895.949923][ T5924] Call Trace: [ 895.953206][ T5924] [ 895.956204][ T5924] ? ip6gre_header+0xc8/0x790 [ 895.960884][ T5924] ? ip6gre_header+0xc8/0x790 [ 895.965559][ T5924] skb_push+0xc3/0xe0 [ 895.969539][ T5924] ip6gre_header+0xc8/0x790 [ 895.974044][ T5924] ? __pfx_ip6gre_header+0x10/0x10 [ 895.979152][ T5924] ? read_seqbegin+0x1ac/0x250 [ 895.983922][ T5924] ? __pfx_read_seqbegin+0x10/0x10 [ 895.989041][ T5924] ? ___neigh_create+0x1c5f/0x2230 [ 895.994149][ T5924] ? __pfx_ip6gre_header+0x10/0x10 [ 895.999265][ T5924] neigh_connected_output+0x286/0x460 [ 896.004728][ T5924] ip6_finish_output2+0xfb3/0x1480 [ 896.009848][ T5924] ? __pfx_ip6_finish_output2+0x10/0x10 [ 896.015403][ T5924] ? ip6_mtu+0x7d/0x490 [ 896.019651][ T5924] ? ip6_mtu+0x38c/0x490 [ 896.023894][ T5924] ? ip6_finish_output+0x2ef/0x4e0 [ 896.029015][ T5924] ? ip6_output+0x126/0x550 [ 896.033813][ T5924] ip6_output+0x340/0x550 [ 896.038153][ T5924] NF_HOOK+0x9e/0x380 [ 896.042147][ T5924] ? NF_HOOK+0x101/0x380 [ 896.046406][ T5924] ? __pfx_NF_HOOK+0x10/0x10 [ 896.050997][ T5924] ? __pfx_dst_output+0x10/0x10 [ 896.055854][ T5924] ? icmp6_dst_alloc+0x3a5/0x420 [ 896.060797][ T5924] ? icmp6_dst_alloc+0x3a5/0x420 [ 896.065755][ T5924] mld_sendpack+0x8d4/0xe60 [ 896.070275][ T5924] ? mld_sendpack+0x1e7/0xe60 [ 896.075046][ T5924] ? __pfx_mld_sendpack+0x10/0x10 [ 896.080439][ T5924] mld_ifc_work+0x83e/0xd60 [ 896.085154][ T5924] ? _raw_spin_unlock_irq+0x23/0x50 [ 896.090354][ T5924] ? process_scheduled_works+0x9ef/0x1770 [ 896.096074][ T5924] process_scheduled_works+0xad1/0x1770 [ 896.101821][ T5924] ? __pfx_process_scheduled_works+0x10/0x10 [ 896.107820][ T5924] worker_thread+0x8a0/0xda0 [ 896.112418][ T5924] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 896.118761][ T5924] ? __kthread_parkme+0x7b/0x200 [ 896.123847][ T5924] kthread+0x711/0x8a0 [ 896.127944][ T5924] ? __pfx_worker_thread+0x10/0x10 [ 896.133064][ T5924] ? __pfx_kthread+0x10/0x10 [ 896.137660][ T5924] ? _raw_spin_unlock_irq+0x23/0x50 [ 896.142859][ T5924] ? lockdep_hardirqs_on+0x98/0x140 [ 896.148054][ T5924] ? __pfx_kthread+0x10/0x10 [ 896.152644][ T5924] ret_from_fork+0x599/0xb30 [ 896.157236][ T5924] ? __pfx_ret_from_fork+0x10/0x10 [ 896.162344][ T5924] ? __switch_to_asm+0x39/0x70 [ 896.167107][ T5924] ? __switch_to_asm+0x33/0x70 [ 896.171872][ T5924] ? __pfx_kthread+0x10/0x10 [ 896.176459][ T5924] ret_from_fork_asm+0x1a/0x30 [ 896.181228][ T5924] [ 896.184243][ T5924] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 896.190104][ T5924] ---[ end trace 0000000000000000 ]--- [ 896.383057][ T5924] RIP: 0010:skb_panic+0x157/0x160 [ 896.388351][ T5924] Code: c7 e0 12 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 4e 94 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 896.412738][ T5924] RSP: 0018:ffffc90004a8f2c0 EFLAGS: 00010286 [ 896.418960][ T5924] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 5606d157db4bc000 [ 896.440970][ T5924] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 896.449112][ T5924] RBP: 00000000000006c0 R08: ffffc90004a8efc7 R09: 1ffff92000951df8 [ 896.463139][ T5924] R10: dffffc0000000000 R11: fffff52000951df9 R12: ffff88809d4558d0 [ 896.471210][ T5924] R13: ffff88802828e000 R14: ffff88802828dfe8 R15: 0000000000000070 [ 896.479496][ T5924] FS: 0000000000000000(0000) GS:ffff888126087000(0000) knlGS:0000000000000000 [ 896.488474][ T5924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.495270][ T5924] CR2: 000000002ef22ffc CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 896.503357][ T5924] DR0: 0000000000000400 DR1: 0000000000000000 DR2: 0000000000000000 [ 896.511553][ T5924] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 896.519623][ T5924] Kernel panic - not syncing: Fatal exception [ 896.526198][ T5924] Kernel Offset: disabled [ 896.530549][ T5924] Rebooting in 86400 seconds..