last executing test programs: 14m34.064958373s ago: executing program 32 (id=3505): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x90, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) 11m43.116134033s ago: executing program 33 (id=5997): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0xa}, 0x1c) 11m42.778505579s ago: executing program 34 (id=5999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x0) 11m42.277865368s ago: executing program 35 (id=6003): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r0, r0, 0x0) 11m41.840217399s ago: executing program 36 (id=6005): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000120037000000", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x48090}, 0x880) 7m54.825457824s ago: executing program 37 (id=7771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x1010}, 0x8090) 5m48.888146562s ago: executing program 38 (id=9377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc010}, 0x40) 5m22.135303386s ago: executing program 4 (id=9771): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000460a"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x2004c870}, 0x4000000) close(0x4) 5m21.960603317s ago: executing program 4 (id=9774): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 5m21.817123036s ago: executing program 4 (id=9777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m20.890061028s ago: executing program 4 (id=9788): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 5m20.64865368s ago: executing program 4 (id=9794): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000280)=0x7, 0x4) 5m19.792170553s ago: executing program 4 (id=9809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x7ff}}], 0x18}, 0x8040) 5m19.559673036s ago: executing program 39 (id=9809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x7ff}}], 0x18}, 0x8040) 3m20.00451004s ago: executing program 7 (id=11767): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f0000001540)=[{&(0x7f0000001580)=""/4108, 0x100c}], 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x10, 0x4) 3m19.765064942s ago: executing program 7 (id=11773): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) close_range(r0, r0, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendto$inet(r0, &(0x7f0000000800)="bc", 0x1, 0xc000, &(0x7f00000008c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2, 0x5}, 0x8) 3m18.735394645s ago: executing program 7 (id=11785): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r2, &(0x7f0000000400)={0xfffffffffffffffe, 0x2000000000000001, 0x100000, 0x0, 0x2, 0x3, 0x0, 0x5, 0x7fffffff}) 3m18.54746389s ago: executing program 7 (id=11788): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3m18.298894272s ago: executing program 7 (id=11793): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 3m18.179148498s ago: executing program 7 (id=11796): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0xe, 0x8, 0xfffffff1, 0xe, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7fffffff, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x104, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000004, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x3, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0xfffffff9, 0x6, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0x14, 0x87, 0x0, 0x5, 0x3ae2, 0x3b, 0xda6, 0x5, 0x80, 0x7, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x3, 0x3, 0x1, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0x8, 0x9, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0xfffffffc, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffffa1, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x7fffffff, 0xfffffffe, 0x8, 0x6, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r0 = syz_io_uring_setup(0x239, &(0x7f0000000040)={0x0, 0x54b7, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2df0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) 3m3.047376056s ago: executing program 40 (id=11796): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0xe, 0x8, 0xfffffff1, 0xe, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7fffffff, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x104, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000004, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x3, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0xfffffff9, 0x6, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0x14, 0x87, 0x0, 0x5, 0x3ae2, 0x3b, 0xda6, 0x5, 0x80, 0x7, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x3, 0x3, 0x1, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0x8, 0x9, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0xfffffffc, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffffa1, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x7fffffff, 0xfffffffe, 0x8, 0x6, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r0 = syz_io_uring_setup(0x239, &(0x7f0000000040)={0x0, 0x54b7, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2df0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) 2m44.068556978s ago: executing program 6 (id=12244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x5, 0x3, 0xa2, '\x00', 0x648c}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m42.685368944s ago: executing program 6 (id=12272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000140), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m42.480511483s ago: executing program 6 (id=12277): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) 2m42.400484036s ago: executing program 6 (id=12280): socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005b}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 2m42.289088061s ago: executing program 6 (id=12282): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 2m41.307237913s ago: executing program 6 (id=12303): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff90000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x2) lseek(r2, 0x0, 0x3) 2m26.186429452s ago: executing program 41 (id=12303): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff90000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x2) lseek(r2, 0x0, 0x3) 2m1.169536799s ago: executing program 5 (id=12838): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ff1f00000000000000000000030000000000000000000000000000000100"/44], 0x0, 0x0, 0x0}) 2m0.964546976s ago: executing program 5 (id=12843): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m0.697572197s ago: executing program 5 (id=12848): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x27c8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x5ee, &(0x7f0000000000)={@multicast, @random="86ce0e44222e", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @broadcast, @multicast1}, {0x11, 0xff, 0x0, @rand_addr=0x64010102}}}}}, 0x0) 2m0.535419529s ago: executing program 5 (id=12852): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fe1eb7aebb29590b00008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000020, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m0.324974673s ago: executing program 5 (id=12855): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 2m0.223615469s ago: executing program 5 (id=12858): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0xb, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m44.940050923s ago: executing program 42 (id=12858): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0xb, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m32.07363114s ago: executing program 0 (id=13160): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40) 1m31.896266653s ago: executing program 0 (id=13162): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000180)=0xc9, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1m30.354891903s ago: executing program 0 (id=13169): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x1c000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x4, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xa, 0x2, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m30.037458204s ago: executing program 0 (id=13173): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x8, 0x4}) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m29.744392516s ago: executing program 0 (id=13174): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0xa, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x401, &(0x7f0000003540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m29.5144875s ago: executing program 0 (id=13178): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x11c, 0x4, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r3}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 1m14.256269494s ago: executing program 43 (id=13178): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x11c, 0x4, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r3}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 14.180499006s ago: executing program 8 (id=13851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000300)=r5, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 12.04027022s ago: executing program 8 (id=13870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) readlink(0x0, 0x0, 0x0) 10.361621342s ago: executing program 8 (id=13875): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x1000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x441, 0x800000a, r3, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r5, &(0x7f0000000240)='./bus/file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x2) 10.076074597s ago: executing program 8 (id=13878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x5, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000000)=@secondary) keyctl$get_persistent(0x16, 0x0, r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) 6.775235985s ago: executing program 2 (id=13890): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, {0x12, 0x0, 0x0, @broadcast}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001200)={@void, @void, @eth={@local, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x0, 0x1, 0x2}}, {@llc={0x4, {@snap={0xaa, 0x2, "1c", "93607b", 0xa00, "ed9ff43534bd21af998da32e649dae423b8ed3e586cb469d90e9bfdaf1a1bcf8bb"}}}}}}, 0x3f) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setxattr$trusted_overlay_opaque(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.613265075s ago: executing program 1 (id=13893): r0 = fsopen(&(0x7f00000003c0)='sockfs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x0) unshare(0x22020400) setns(r1, 0x24000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r3, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7fffffff, 0x2, 0x3, 0x8, 0x2a, 0x38, 0x329, 0xb, 0x0, 0x20, 0x1, 0x9, 0x7ff}, [{0x2, 0x5dbf, 0x2, 0x6, 0x8000, 0x5, 0x400, 0xb}]}, 0x58) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x24, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x228, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1f8, 0x3, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "fde80b91b72fa437c27b47f8e96f06a2e77483f1b7b24658a400e9ca482a88de2374e981725f0baf66ec00ecc9acdfb6e16259b6a31acbcc805fdb6044513c0db09a9e19b45799ce56a77dabe19cb180ee61ce20112f4f095e4cb88775a066a944222a625ae96af1afce02646d553a68adbad1fa8f3dbc5ea9047da508ef5e12cba8ef78f1052551aef5cbfc846112d2736286594eae1c86b3a96c58eae28155600335cef4847c6e353f701fd3f48e9dda292582965936e650412c1cecaa1cffb1437c98b9"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}]}, {0x90, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "8ce1677e3343e241f994522eb45a68aaf79e7c7d4c53c8f6b14e057a1a59f45accda398dc8b9fe8577c19abbf63d7590c64fd0dc726aca8c5f47b2d01c610d80acad066f2cc9606f81fa225e0c7d9c8d1c3241d7016b5681d4b0bd62982d527c7cb8a2df458af54ca5857dc0768165e4f7473ff76ec903c65fb634dfa6b5591219"}]}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x58, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "1302a3d3596be284c900fcbe888878bf66f55ba302db5806f231d36d01237bf323a13e97745bb350d8775313fb7bc5b9d814715a9763f8be336a95d22bb0c49ec8cfaf18f32e6ae0f6db26e1092545"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2a4}, 0x1, 0x0, 0x0, 0x4004}, 0xc8010) 5.551278448s ago: executing program 2 (id=13899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_secret(0x0) ftruncate(r3, 0x51a9497) 5.221507286s ago: executing program 3 (id=13901): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x10000080) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$int_in(r0, 0x5452, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 4.363270557s ago: executing program 3 (id=13904): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r3 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.245382315s ago: executing program 2 (id=13906): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e1281"], 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)={0x48, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xd440}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x141}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4040010) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/181, 0xb5}, {&(0x7f0000000980)=""/93, 0x5d}, {&(0x7f0000000a00)=""/225, 0xe1}, {&(0x7f0000000b00)=""/188, 0xbc}], 0x5}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000e40)=""/20, 0x14}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/171, 0xab}, {&(0x7f0000001f40)=""/112, 0x70}, {&(0x7f0000001fc0)=""/57, 0x39}, {&(0x7f0000002000)=""/119, 0x77}], 0x7}, 0x4}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002180)=""/137, 0x89}, {&(0x7f0000002240)=""/21, 0x15}, {&(0x7f0000002280)=""/10, 0xa}, {&(0x7f00000022c0)=""/146, 0x92}, {&(0x7f0000002380)=""/174, 0xae}, {&(0x7f0000002440)=""/31, 0x1f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/211, 0xd3}], 0x8}, 0x228}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003800)=""/218, 0xda}, {&(0x7f0000003900)=""/115, 0x73}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x3}, 0x80000001}], 0x4, 0x40, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4.190480238s ago: executing program 1 (id=13907): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 3.992992809s ago: executing program 2 (id=13909): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r1, 0xf}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)=@x86={0x0, 0x2, 0x84, 0x0, 0x1, 0x5, 0x83, 0x4, 0x80, 0x4, 0x3, 0xbe, 0x0, 0x7f, 0x4, 0xf0, 0xd5, 0x8, 0x6, '\x00', 0xc, 0x21}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000008010040000000000600000000000000f035dee80d92182f07dcbba8152992a2f406649edb7b7455bb28a753a5359cc49d"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@rdmsr={0x32, 0x18, {0x9de}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x636}, @code={0x1, 0x4a, {"b8010000000f01c1c4827d79247bc401f9d5d6d0f366baf80cb8700bf48def66bafc0cb80e000000ef0f0866b819010f00d0c4e1815944b209"}}], 0x92}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.83639771s ago: executing program 1 (id=13911): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 3.673152364s ago: executing program 3 (id=13913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff000000"], 0x610) 3.600520562s ago: executing program 9 (id=13914): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r1, 0x8007}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.556431145s ago: executing program 1 (id=13915): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000240)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f0000000900)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x3, {0x7, 0x28, 0x4, 0x42800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x7, 0x180002, 0x81, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.274190923s ago: executing program 2 (id=13916): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x48051) epoll_create1(0x80000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000f80)={0x6, 0x0, 0x80000001, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffdffffffffffffc, 0x3, 0x800000000000, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) 2.178250054s ago: executing program 1 (id=13917): capset(&(0x7f0000000040)={0x20080522}, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0xfffffffffffffffd, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.059505568s ago: executing program 3 (id=13918): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) socket$inet6(0xa, 0x3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.998671169s ago: executing program 9 (id=13919): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x80000018}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 1.998314818s ago: executing program 8 (id=13920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.866041528s ago: executing program 9 (id=13921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 1.653941721s ago: executing program 9 (id=13922): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.647542415s ago: executing program 3 (id=13923): creat(&(0x7f00000002c0)='./file0\x00', 0x109) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x8, &(0x7f0000006680)) waitid(0x1, 0x0, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3']) 1.484283033s ago: executing program 9 (id=13924): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe40000000109026801010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 289.20892ms ago: executing program 1 (id=13925): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 196.016348ms ago: executing program 2 (id=13926): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}, {0xe, 0xffff}}}, 0x24}}, 0xc044) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 57.56437ms ago: executing program 3 (id=13927): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') 420.323µs ago: executing program 9 (id=13928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00"/69], 0x610) 0s ago: executing program 8 (id=13929): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) kernel console output (not intermixed with test programs): nk [ 872.574780][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.836714][T24315] bridge_slave_1: left allmulticast mode [ 872.836745][T24315] bridge_slave_1: left promiscuous mode [ 872.836992][T24315] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.931555][T24315] bridge_slave_0: left allmulticast mode [ 872.931586][T24315] bridge_slave_0: left promiscuous mode [ 872.931830][T24315] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.239964][T27716] Bluetooth: hci1: command tx timeout [ 873.848555][ T7683] tls_set_device_offload: netdev not found [ 875.321462][T27716] Bluetooth: hci1: command tx timeout [ 875.335766][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.060964][T24315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.141397][T24315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.184457][T24315] bond0 (unregistering): Released all slaves [ 876.440948][ T7273] team0: Port device team_slave_0 added [ 876.478958][ T7273] team0: Port device team_slave_1 added [ 876.620535][ T7657] virt_wifi0 speed is unknown, defaulting to 1000 [ 877.013880][ T7858] sctp: [Deprecated]: syz.7.9965 (pid 7858) Use of int in max_burst socket option. [ 877.013880][ T7858] Use struct sctp_assoc_value instead [ 877.170542][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.170562][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.170593][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.191176][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.191198][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.191232][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.399736][T27716] Bluetooth: hci1: command tx timeout [ 878.439456][ T7273] hsr_slave_0: entered promiscuous mode [ 878.451130][ T7273] hsr_slave_1: entered promiscuous mode [ 878.452061][ T7273] debugfs: 'hsr0' already exists in 'hsr' [ 878.452085][ T7273] Cannot create hsr debugfs directory [ 879.080715][T24315] hsr_slave_0: left promiscuous mode [ 879.121404][T24315] hsr_slave_1: left promiscuous mode [ 879.122619][T24315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.122646][T24315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.171106][T24315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.171137][T24315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.315767][T24315] veth1_macvtap: left promiscuous mode [ 879.315878][T24315] veth0_macvtap: left promiscuous mode [ 879.317681][T24315] veth1_vlan: left promiscuous mode [ 879.317878][T24315] veth0_vlan: left promiscuous mode [ 879.955718][T25720] libceph: connect (1)[c::]:6789 error -101 [ 879.955912][T25720] libceph: mon0 (1)[c::]:6789 connect error [ 879.956397][T25720] libceph: connect (1)[c::]:6789 error -101 [ 879.956579][T25720] libceph: mon0 (1)[c::]:6789 connect error [ 880.004035][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 880.004280][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 880.004696][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 880.004872][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 880.212327][T25720] libceph: connect (1)[c::]:6789 error -101 [ 880.212534][T25720] libceph: mon0 (1)[c::]:6789 connect error [ 880.294822][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 880.295053][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 880.709450][ T8043] ceph: No mds server is up or the cluster is laggy [ 880.720019][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 880.720227][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 880.739812][ T8048] ceph: No mds server is up or the cluster is laggy [ 880.825051][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 880.825263][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 882.086412][ T8115] netlink: 'syz.7.10045': attribute type 4 has an invalid length. [ 882.137999][ T8118] netlink: 'syz.7.10045': attribute type 4 has an invalid length. [ 883.192788][T24315] team0 (unregistering): Port device team_slave_1 removed [ 883.591128][T24315] team0 (unregistering): Port device team_slave_0 removed [ 888.046038][ T8395] netlink: 'syz.7.10153': attribute type 9 has an invalid length. [ 889.546791][ T7273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 889.585454][ T7273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 889.664387][ T7273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 889.695958][ T7273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 890.053655][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.095016][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.144317][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.144643][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.172580][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.172776][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.023397][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.164982][ T7273] veth0_vlan: entered promiscuous mode [ 891.197365][ T7273] veth1_vlan: entered promiscuous mode [ 891.286621][ T7273] veth0_macvtap: entered promiscuous mode [ 891.306634][ T7273] veth1_macvtap: entered promiscuous mode [ 891.355474][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.426118][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.470132][ T3486] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.470758][ T3486] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.470802][ T3486] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.470839][ T3486] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.047301][ T8577] erspan0: entered promiscuous mode [ 892.047492][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10215'. [ 892.089863][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.089882][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.263673][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.263697][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.792777][ T8613] IPv6: NLM_F_CREATE should be specified when creating new route [ 892.792930][ T8613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 892.792942][ T8613] IPv6: NLM_F_CREATE should be set when creating new route [ 892.792978][ T8613] IPv6: NLM_F_CREATE should be set when creating new route [ 892.856507][ T8615] loop6: detected capacity change from 0 to 524288000 [ 896.918492][ T8795] random: crng reseeded on system resumption [ 897.679624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 898.066098][ T8835] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3492 [ 898.406950][ T8856] input: syz1 as /devices/virtual/input/input61 [ 898.870424][ T8884] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.10345'. [ 898.870460][ T8884] openvswitch: netlink: Missing key (keys=40, expected=80) [ 899.297035][ T8902] netlink: 'syz.3.10355': attribute type 19 has an invalid length. [ 899.297060][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10355'. [ 899.337029][T24315] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.337538][T24315] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.337689][T24315] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.337732][T24315] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.337918][ T8902] netlink: 'syz.3.10355': attribute type 19 has an invalid length. [ 899.337938][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10355'. [ 900.210841][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10374'. [ 900.839969][ T1826] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 900.905131][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10390'. [ 900.905165][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10390'. [ 900.905384][ T8997] macvlan0: entered allmulticast mode [ 900.905403][ T8997] veth1_vlan: entered allmulticast mode [ 900.999786][ T1826] usb 2-1: Using ep0 maxpacket: 32 [ 901.007188][ T1826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.007225][ T1826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.007267][ T1826] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 901.007294][ T1826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.037254][ T1826] usb 2-1: config 0 descriptor?? [ 901.062193][ T1826] hub 2-1:0.0: USB hub found [ 901.509814][ T1826] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 901.519348][ T1826] usbhid 2-1:0.0: can't add hid device: -71 [ 901.519474][ T1826] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 901.571356][ T1826] usb 2-1: USB disconnect, device number 37 [ 901.990930][ T9031] Process accounting resumed [ 902.018970][ T9038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.981464][ T9082] netlink: 'syz.7.10423': attribute type 13 has an invalid length. [ 905.621806][ T9284] overlayfs: failed to clone upperpath [ 907.142532][ T9340] 9p: Unknown uid 00000000004294967295 [ 908.597606][ T9406] loop9: detected capacity change from 0 to 7 [ 908.624919][ T9406] Dev loop9: unable to read RDB block 7 [ 908.624947][ T9406] loop9: AHDI p4 [ 908.624975][ T9406] loop9: partition table partially beyond EOD, truncated [ 909.269842][T25720] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 909.452542][T25720] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.452601][T25720] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 909.477251][T25720] usb 7-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 909.477290][T25720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.477441][T25720] usb 7-1: Product: syz [ 909.477460][T25720] usb 7-1: Manufacturer: syz [ 909.477478][T25720] usb 7-1: SerialNumber: syz [ 910.775656][T25720] cdc_ncm 7-1:1.0: bind() failure [ 910.807955][T25720] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 910.809486][T25720] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 910.811757][T25720] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 910.827684][T25720] usb 7-1: USB disconnect, device number 38 [ 912.719727][ T5895] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 912.753718][ T9627] input: syz1 as /devices/virtual/input/input62 [ 912.874737][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 912.887785][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 912.887823][ T5895] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 912.887869][ T5895] usb 7-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 912.887896][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.902202][ T5895] usb 7-1: config 0 descriptor?? [ 913.321791][ T5895] hid_mf 0003:0079:1803.005A: unknown main item tag 0x0 [ 913.321833][ T5895] hid_mf 0003:0079:1803.005A: unknown main item tag 0x1 [ 913.321862][ T5895] hid_mf 0003:0079:1803.005A: item fetching failed at offset 4/5 [ 913.322733][ T5895] hid_mf 0003:0079:1803.005A: HID parse failed. [ 913.322810][ T5895] hid_mf 0003:0079:1803.005A: probe with driver hid_mf failed with error -22 [ 913.423742][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10610'. [ 913.520499][T25720] usb 7-1: USB disconnect, device number 39 [ 913.859028][ T9700] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 914.094229][ T9700] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 914.108213][ T9700] overlayfs: failed to look up (tracing) for ino (-66) [ 914.248512][ T9713] netlink: 104 bytes leftover after parsing attributes in process `syz.6.10622'. [ 915.838305][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10663'. [ 919.181278][ T9916] netlink: 'syz.1.10711': attribute type 1 has an invalid length. [ 919.181303][ T9916] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.10711'. [ 920.219776][ T5893] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 920.309767][T25720] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 920.369851][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 920.372357][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 920.375932][ T5893] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 920.375961][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.375984][ T5893] usb 2-1: Product: syz [ 920.376000][ T5893] usb 2-1: Manufacturer: syz [ 920.376014][ T5893] usb 2-1: SerialNumber: syz [ 920.432891][ T5893] usb 2-1: config 0 descriptor?? [ 920.446719][ T5893] hub 2-1:0.0: bad descriptor, ignoring hub [ 920.446761][ T5893] hub 2-1:0.0: probe with driver hub failed with error -5 [ 920.470422][ T5893] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input63 [ 920.505741][T25720] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 920.505770][T25720] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 920.505795][T25720] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 920.508495][T25720] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 920.508524][T25720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.508544][T25720] usb 7-1: Product: syz [ 920.508559][T25720] usb 7-1: Manufacturer: syz [ 920.508574][T25720] usb 7-1: SerialNumber: syz [ 920.585013][T25720] hub 7-1:1.0: bad descriptor, ignoring hub [ 920.585053][T25720] hub 7-1:1.0: probe with driver hub failed with error -5 [ 920.807810][T25720] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 921.134616][T25720] usb 7-1: USB disconnect, device number 40 [ 921.148295][T25720] usblp0: removed [ 921.190287][ T5895] usb 2-1: USB disconnect, device number 38 [ 921.276085][ T9969] virt_wifi0 speed is unknown, defaulting to 1000 [ 921.973819][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10764'. [ 921.973843][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10764'. [ 922.032534][ T2231] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.032806][ T2231] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.032849][ T2231] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.032886][ T2231] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.033095][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10764'. [ 922.033115][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10764'. [ 922.199194][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10769'. [ 923.401699][T10151] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10788'. [ 923.937066][T10174] netlink: 'syz.1.10798': attribute type 1 has an invalid length. [ 924.010254][T10181] netlink: 156 bytes leftover after parsing attributes in process `syz.6.10799'. [ 924.052509][T10174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 924.295061][T10196] bond1: (slave ip6erspan0): making interface the new active one [ 924.300233][T10196] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 926.211676][T10236] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 926.461937][T25720] hid-generic 0000:0000:0000.005B: unknown main item tag 0x0 [ 926.510211][ T5893] kernel write not supported for file bpf-prog (pid: 5893 comm: kworker/1:5) [ 926.528985][T25720] hid-generic 0000:0000:0000.005B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 926.973480][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10845'. [ 927.179927][T25720] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 927.263413][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10849'. [ 927.263436][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10849'. [ 927.332128][T25720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.332162][T25720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.332184][T25720] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 927.332227][T25720] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 927.332249][T25720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.341162][T25720] usb 2-1: config 0 descriptor?? [ 927.699862][T10337] virt_wifi0 speed is unknown, defaulting to 1000 [ 927.866781][T25720] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 928.113983][T10395] kvm: MONITOR instruction emulated as NOP! [ 928.801308][T10440] Process accounting resumed [ 929.663665][T10485] input: syz1 as /devices/virtual/input/input65 [ 929.926670][ T5895] usb 2-1: USB disconnect, device number 39 [ 933.175917][T10647] netlink: 67 bytes leftover after parsing attributes in process `syz.1.10955'. [ 935.549488][T10737] netlink: 'syz.3.10995': attribute type 12 has an invalid length. [ 935.549513][T10737] netlink: 'syz.3.10995': attribute type 29 has an invalid length. [ 935.549528][T10737] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10995'. [ 935.583926][T10737] netlink: 'syz.3.10995': attribute type 2 has an invalid length. [ 935.583947][T10737] netlink: 23 bytes leftover after parsing attributes in process `syz.3.10995'. [ 936.787827][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.339915][ T1826] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 937.501196][ T1826] usb 7-1: Using ep0 maxpacket: 8 [ 937.504015][ T1826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.504061][ T1826] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 937.504085][ T1826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.510285][ T1826] usb 7-1: config 0 descriptor?? [ 937.744692][ T1826] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 938.166066][ T1826] usb 7-1: USB disconnect, device number 41 [ 939.193647][T10853] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.210464][T10853] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.235381][T10853] bridge0: entered allmulticast mode [ 939.323204][T10853] bridge_slave_1: left allmulticast mode [ 939.323405][T10853] bridge_slave_1: left promiscuous mode [ 939.353009][T10853] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.482553][T10863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.508796][T10853] bridge_slave_0: left allmulticast mode [ 939.508830][T10853] bridge_slave_0: left promiscuous mode [ 939.509132][T10853] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.005855][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11051'. [ 940.008211][T10884] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11051'. [ 940.557241][T10901] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11059'. [ 940.580019][T10900] netlink: 'syz.1.11058': attribute type 298 has an invalid length. [ 941.199943][ T5895] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 941.357196][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 941.357252][ T5895] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 941.357278][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.382064][ T5895] usb 2-1: config 0 descriptor?? [ 941.619844][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11078'. [ 941.622338][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11078'. [ 941.622711][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11078'. [ 941.644510][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11078'. [ 941.992136][T10969] syzkaller1: entered promiscuous mode [ 941.992163][T10969] syzkaller1: entered allmulticast mode [ 942.019702][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11082'. [ 942.235602][ T5895] letsketch 0003:6161:4D15.005D: Device info: 㡵 [ 942.437192][ T5895] letsketch 0003:6161:4D15.005D: Device info: 劸 [ 942.674495][ T5895] usb 2-1: Max retries (5) exceeded reading string descriptor 202 [ 942.674576][ T5895] letsketch 0003:6161:4D15.005D: probe with driver letsketch failed with error -71 [ 942.692672][ T5895] usb 2-1: USB disconnect, device number 40 [ 945.585263][T11112] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.177207][T11112] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.643451][T11112] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.786349][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 946.786378][ T38] audit: type=1326 audit(1761698817.120:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 946.789460][ T38] audit: type=1326 audit(1761698817.120:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 946.789510][ T38] audit: type=1326 audit(1761698817.120:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 946.789555][ T38] audit: type=1326 audit(1761698817.120:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 946.813255][ T38] audit: type=1326 audit(1761698817.120:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 946.813318][ T38] audit: type=1326 audit(1761698817.130:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 946.813371][ T38] audit: type=1326 audit(1761698817.130:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 946.813424][ T38] audit: type=1326 audit(1761698817.150:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 946.813478][ T38] audit: type=1326 audit(1761698817.150:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 946.813531][ T38] audit: type=1326 audit(1761698817.150:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 947.352581][T11112] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 947.353273][T11112] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.844349][ T3533] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.911049][ T3533] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.980437][ T37] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.070098][ T37] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.254311][T11266] netlink: 'syz.7.11199': attribute type 29 has an invalid length. [ 949.257736][T11266] netlink: 'syz.7.11199': attribute type 29 has an invalid length. [ 949.258510][T11266] netlink: 500 bytes leftover after parsing attributes in process `syz.7.11199'. [ 950.104301][T11296] netlink: 'syz.7.11211': attribute type 6 has an invalid length. [ 950.213902][T11305] netlink: 'syz.6.11214': attribute type 1 has an invalid length. [ 950.373952][T11305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 950.455111][T11323] bond1: (slave geneve4): making interface the new active one [ 950.471534][T11323] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 950.779811][ T5813] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 950.853278][T11375] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 950.934344][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11228'. [ 950.936507][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.936540][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 950.936586][ T5813] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 950.936613][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.960562][ T5813] usb 2-1: config 0 descriptor?? [ 951.238452][T11399] netlink: 88 bytes leftover after parsing attributes in process `syz.6.11231'. [ 951.238500][T11399] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11231'. [ 951.239443][T11399] netlink: 88 bytes leftover after parsing attributes in process `syz.6.11231'. [ 951.239478][T11399] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11231'. [ 951.420676][ T5813] kovaplus 0003:1E7D:2D50.005E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 951.791150][ T5813] kovaplus 0003:1E7D:2D50.005E: couldn't init struct kovaplus_device [ 951.791210][ T5813] kovaplus 0003:1E7D:2D50.005E: couldn't install mouse [ 951.794727][ T5813] kovaplus 0003:1E7D:2D50.005E: probe with driver kovaplus failed with error -71 [ 951.813958][ T5813] usb 2-1: USB disconnect, device number 41 [ 952.344257][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11252'. [ 952.422755][ C1] vkms_vblank_simulate: vblank timer overrun [ 952.574908][T11464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11256'. [ 952.574940][T11464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11256'. [ 952.790889][T11477] input: syz1 as /devices/virtual/input/input66 [ 952.929885][ T5895] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 953.083796][ T5895] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.086922][ T5895] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 953.086952][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.086975][ T5895] usb 2-1: Product: syz [ 953.086992][ T5895] usb 2-1: Manufacturer: syz [ 953.087008][ T5895] usb 2-1: SerialNumber: syz [ 953.879589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 954.572699][ T5895] cdc_ncm 2-1:1.0: bind() failure [ 954.597998][ T5895] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 954.598047][ T5895] cdc_ncm 2-1:1.1: bind() failure [ 954.812657][ T5895] usb 2-1: USB disconnect, device number 42 [ 958.106481][T11687] hpfs: hpfs_map_sector(): read error [ 958.907372][T11689] Process accounting paused [ 959.379811][ T5813] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 959.534602][ T5813] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 959.534635][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.542473][ T5813] usb 7-1: config 0 descriptor?? [ 959.562477][ T5813] cp210x 7-1:0.0: cp210x converter detected [ 959.979009][ T5813] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 959.983209][T11710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.983690][T11710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.036404][ T5813] usb 7-1: cp210x converter now attached to ttyUSB0 [ 960.222375][ T5813] usb 7-1: USB disconnect, device number 42 [ 960.235151][ T5813] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 960.351912][ T5813] cp210x 7-1:0.0: device disconnected [ 960.449770][ T1826] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 960.599857][ T1826] usb 2-1: Using ep0 maxpacket: 32 [ 960.602316][ T1826] usb 2-1: config 0 has an invalid interface number: 82 but max is 0 [ 960.602342][ T1826] usb 2-1: config 0 has no interface number 0 [ 960.602377][ T1826] usb 2-1: config 0 interface 82 has no altsetting 0 [ 960.606209][ T1826] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=48.5c [ 960.606258][ T1826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.606282][ T1826] usb 2-1: Product: syz [ 960.606298][ T1826] usb 2-1: Manufacturer: syz [ 960.606314][ T1826] usb 2-1: SerialNumber: syz [ 960.670915][ T1826] usb 2-1: config 0 descriptor?? [ 960.685678][ T1826] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.82/input/input67 [ 960.696815][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11377'. [ 960.877327][T25720] usb 2-1: USB disconnect, device number 43 [ 962.882670][ T38] kauditd_printk_skb: 12 callbacks suppressed [ 962.882690][ T38] audit: type=1326 audit(1761698833.220:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11875 comm="syz.3.11406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x0 [ 963.449765][T25720] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 963.601508][T25720] usb 7-1: Using ep0 maxpacket: 8 [ 963.607358][T25720] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 963.607391][T25720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.607425][T25720] usb 7-1: Product: syz [ 963.607440][T25720] usb 7-1: Manufacturer: syz [ 963.607456][T25720] usb 7-1: SerialNumber: syz [ 963.620705][T25720] usb 7-1: config 0 descriptor?? [ 963.847117][T25720] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 964.055647][T25720] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 964.067080][T25720] usb 7-1: USB disconnect, device number 43 [ 968.438149][T12015] gretap0: entered promiscuous mode [ 969.071377][T12031] loop2: detected capacity change from 0 to 7 [ 969.074680][T12031] Dev loop2: unable to read RDB block 7 [ 969.074725][T12031] loop2: unable to read partition table [ 969.075544][T12031] loop2: partition table beyond EOD, truncated [ 969.075567][T12031] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 970.525204][T12067] tipc: Failed to remove unknown binding: 66,1,1/0:1162841035/1162841037 [ 970.525245][T12067] tipc: Failed to remove unknown binding: 66,1,1/0:1162841035/1162841037 [ 970.803316][T12076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 970.949912][ T5895] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 971.122366][ T5895] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.125473][ T5895] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 971.125502][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.125524][ T5895] usb 7-1: Product: syz [ 971.125539][ T5895] usb 7-1: Manufacturer: syz [ 971.125555][ T5895] usb 7-1: SerialNumber: syz [ 972.219859][ T5895] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 972.219889][ T5895] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 972.219909][ T5895] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 972.420956][ T5895] cdc_ncm 7-1:1.0: setting tx_max = 136 [ 972.453604][ T5895] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 972.581308][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11524'. [ 972.626014][ T5895] usb 7-1: USB disconnect, device number 44 [ 972.628287][T12177] erspan0: entered promiscuous mode [ 972.628488][T12177] macvtap1: entered promiscuous mode [ 972.628655][T12177] macvtap1: entered allmulticast mode [ 972.628669][T12177] erspan0: entered allmulticast mode [ 972.657763][ T5895] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 972.857294][T12177] erspan0: left allmulticast mode [ 972.857574][T12177] erspan0: left promiscuous mode [ 973.113659][T12218] evm: overlay not supported [ 974.150146][ T1826] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 974.306951][ T1826] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 974.306984][ T1826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.307006][ T1826] usb 2-1: Product: syz [ 974.307022][ T1826] usb 2-1: Manufacturer: syz [ 974.307039][ T1826] usb 2-1: SerialNumber: syz [ 974.346124][ T1826] usb 2-1: config 0 descriptor?? [ 974.560183][ T1826] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 975.784130][ T1826] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 975.810779][ T1826] usb 2-1: USB disconnect, device number 44 [ 979.586095][T12483] netlink: 51 bytes leftover after parsing attributes in process `syz.7.11641'. [ 979.876973][T12496] overlayfs: failed to clone upperpath [ 980.669997][ T31] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 980.736431][T12536] overlayfs: failed to clone upperpath [ 980.835430][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.835467][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.835491][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 980.835538][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 980.835563][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.852120][ T31] usb 7-1: config 0 descriptor?? [ 980.966037][ T38] audit: type=1326 audit(1761698851.300:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12537 comm="syz.7.11662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 980.966682][ T38] audit: type=1326 audit(1761698851.300:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12537 comm="syz.7.11662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6756cefc9 code=0x7ffc0000 [ 981.470031][ T31] plantronics 0003:047F:FFFF.005F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 981.703054][ T1826] usb 7-1: USB disconnect, device number 45 [ 981.938709][T12593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.321182][T12700] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 985.451819][T12710] overlayfs: failed to clone upperpath [ 989.184887][T12844] Process accounting resumed [ 989.998596][T12907] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 990.030025][T12907] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 990.101318][T12913] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11805'. [ 990.453486][T12921] netlink: 'syz.6.11809': attribute type 6 has an invalid length. [ 990.453509][T12921] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11809'. [ 990.751667][ T1826] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 990.781710][ T1826] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz1] on syz0 [ 990.783534][T12929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11812'. [ 990.783628][T12929] bond0: option prio: mode dependency failed, not supported in mode balance-rr(0) [ 992.541832][T12999] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11839'. [ 992.541860][T12999] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11839'. [ 992.541880][T12999] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11839'. [ 992.542136][T12999] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11839'. [ 993.611245][ T38] audit: type=1326 audit(1761698863.940:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13014 comm="syz.1.11845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 993.652026][ T38] audit: type=1326 audit(1761698863.950:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13014 comm="syz.1.11845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 993.652081][ T38] audit: type=1326 audit(1761698863.990:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13014 comm="syz.1.11845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 993.652135][ T38] audit: type=1326 audit(1761698863.990:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13014 comm="syz.1.11845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 993.652177][ T38] audit: type=1326 audit(1761698863.990:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13014 comm="syz.1.11845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 993.652222][ T38] audit: type=1326 audit(1761698863.990:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13014 comm="syz.1.11845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 993.656736][ T38] audit: type=1326 audit(1761698863.990:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13014 comm="syz.1.11845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 993.656791][ T38] audit: type=1326 audit(1761698863.990:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13014 comm="syz.1.11845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 993.656839][ T38] audit: type=1326 audit(1761698863.990:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13014 comm="syz.1.11845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 993.656887][ T38] audit: type=1326 audit(1761698863.990:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13014 comm="syz.1.11845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 995.159914][T13011] Bluetooth: hci1: command 0x0406 tx timeout [ 996.008215][T13099] netlink: 'syz.3.11880': attribute type 10 has an invalid length. [ 996.090442][T13102] netlink: 'syz.3.11880': attribute type 10 has an invalid length. [ 996.552062][T13099] bond0: (slave dummy0): Releasing backup interface [ 996.632366][T13099] team0: Failed to send options change via netlink (err -105) [ 996.632392][T13099] team0: Port device dummy0 added [ 996.664519][T13102] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 996.751066][T13102] team0: Failed to send options change via netlink (err -105) [ 996.751305][T13102] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 996.754094][T13102] team0: Port device dummy0 removed [ 996.779957][T13102] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 997.457801][T13145] netlink: 'syz.3.11902': attribute type 1 has an invalid length. [ 997.457824][T13145] netlink: 'syz.3.11902': attribute type 4 has an invalid length. [ 997.457839][T13145] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11902'. [ 998.212638][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.618092][T13174] ceph: No mds server is up or the cluster is laggy [ 999.708085][T13222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1000.714019][T13269] usb usb4: usbfs: process 13269 (syz.6.11950) did not claim interface 0 before use [ 1001.126476][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11954'. [ 1001.269052][T13288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1001.348876][ T5895] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1001.511529][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 1001.513939][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.513996][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1001.514026][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1001.514051][ T5895] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1001.514075][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1001.516214][ T5895] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1001.516242][ T5895] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1001.516281][ T5895] usb 2-1: Manufacturer: syz [ 1001.575759][ T5895] usb 2-1: config 0 descriptor?? [ 1001.596474][T13339] kvm: emulating exchange as write [ 1001.930309][ T5895] rc_core: IR keymap rc-hauppauge not found [ 1001.930331][ T5895] Registered IR keymap rc-empty [ 1001.930592][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1001.950822][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1001.978410][ T5895] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1001.995006][ T5895] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input68 [ 1002.022792][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.056371][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.074143][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.089946][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.128688][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.141343][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.163888][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.179977][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.211149][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.236563][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.261776][ T5895] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.302376][ T5895] mceusb 2-1:0.0: Registered 艣閦뙿X with mce emulator interface version 1 [ 1002.302402][ T5895] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1002.329739][ T5895] usb 2-1: USB disconnect, device number 45 [ 1002.922406][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11974'. [ 1003.769712][ T5895] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1003.933131][ T5895] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.933160][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1003.934738][ T5895] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1003.934767][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1003.934789][ T5895] usb 2-1: SerialNumber: syz [ 1004.184879][ T5895] usb 2-1: 0:2 : does not exist [ 1004.257839][ T5895] usb 2-1: USB disconnect, device number 46 [ 1005.935858][T13486] virt_wifi0 speed is unknown, defaulting to 1000 [ 1006.005880][T13011] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1006.011642][T13011] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1006.014625][T13011] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1006.015844][T13011] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1006.016754][T13011] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1006.429869][T13496] virt_wifi0 speed is unknown, defaulting to 1000 [ 1006.560254][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12019'. [ 1006.629712][T27182] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1006.780455][T27182] usb 2-1: Using ep0 maxpacket: 32 [ 1006.782941][T27182] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1006.782968][T27182] usb 2-1: config 0 has no interface number 0 [ 1006.786981][T27182] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1006.787010][T27182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.787031][T27182] usb 2-1: Product: syz [ 1006.787048][T27182] usb 2-1: Manufacturer: syz [ 1006.787064][T27182] usb 2-1: SerialNumber: syz [ 1006.797291][T27182] usb 2-1: config 0 descriptor?? [ 1006.803442][T27182] smsc95xx v2.0.0 [ 1007.068749][T13496] chnl_net:caif_netlink_parms(): no params data found [ 1007.224935][T27182] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1007.224973][T27182] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1008.046539][T13496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.046681][T13496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.046954][T13496] bridge_slave_0: entered allmulticast mode [ 1008.071607][T27182] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1008.071896][T27182] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1008.074451][T13496] bridge_slave_0: entered promiscuous mode [ 1008.081091][T27182] usb 2-1: USB disconnect, device number 47 [ 1008.170620][T13496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.178333][T13496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.178602][T13496] bridge_slave_1: entered allmulticast mode [ 1008.199101][T13496] bridge_slave_1: entered promiscuous mode [ 1008.199718][T13011] Bluetooth: hci3: command tx timeout [ 1008.554287][T13496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.575271][T13496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.150114][T13496] team0: Port device team_slave_0 added [ 1009.163742][T13496] team0: Port device team_slave_1 added [ 1009.934764][T13496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.934782][T13496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.934810][T13496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.937345][T13496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.937361][T13496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.937392][T13496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.279742][T13011] Bluetooth: hci3: command tx timeout [ 1010.399056][T13496] hsr_slave_0: entered promiscuous mode [ 1010.400782][T13496] hsr_slave_1: entered promiscuous mode [ 1010.403568][T13496] debugfs: 'hsr0' already exists in 'hsr' [ 1010.403598][T13496] Cannot create hsr debugfs directory [ 1011.085857][T13972] loop2: detected capacity change from 0 to 7 [ 1011.093823][T13972] Dev loop2: unable to read RDB block 7 [ 1011.093879][T13972] loop2: unable to read partition table [ 1011.094153][T13972] loop2: partition table beyond EOD, truncated [ 1011.094187][T13972] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1011.369619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1011.999590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1012.359694][T13011] Bluetooth: hci3: command tx timeout [ 1012.793270][ T38] audit: type=1326 audit(1761698883.130:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14047 comm="syz.3.12096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1012.793320][ T38] audit: type=1326 audit(1761698883.130:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14047 comm="syz.3.12096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1012.796123][ T38] audit: type=1326 audit(1761698883.130:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14047 comm="syz.3.12096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1012.796613][ T38] audit: type=1326 audit(1761698883.130:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14047 comm="syz.3.12096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1012.796662][ T38] audit: type=1326 audit(1761698883.130:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14047 comm="syz.3.12096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd3c486da7f code=0x7ffc0000 [ 1012.797734][ T38] audit: type=1326 audit(1761698883.130:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14047 comm="syz.3.12096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1012.797781][ T38] audit: type=1326 audit(1761698883.130:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14047 comm="syz.3.12096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1012.799415][ T38] audit: type=1326 audit(1761698883.130:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14047 comm="syz.3.12096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1012.799453][ T38] audit: type=1326 audit(1761698883.130:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14047 comm="syz.3.12096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1012.799485][ T38] audit: type=1326 audit(1761698883.130:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14047 comm="syz.3.12096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1013.657842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1014.056610][T13496] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1014.090809][T13496] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1014.148487][T13496] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1014.189690][T27182] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1014.210298][T13496] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1014.261435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 1014.358360][T27182] usb 7-1: Using ep0 maxpacket: 16 [ 1014.389305][T27182] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1014.389335][T27182] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.389350][T27182] usb 7-1: Product: syz [ 1014.389360][T27182] usb 7-1: Manufacturer: syz [ 1014.389371][T27182] usb 7-1: SerialNumber: syz [ 1014.413893][T27182] usb 7-1: config 0 descriptor?? [ 1014.439811][T13011] Bluetooth: hci3: command tx timeout [ 1014.859136][T27182] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1014.871077][T27182] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1014.872286][T27182] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1014.872476][T27182] usb 7-1: media controller created [ 1014.954155][T13496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.982972][T27182] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1015.106157][T27182] zl10353_read_register: readreg error (reg=127, ret==0) [ 1015.106227][T27182] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1015.106242][T27182] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1015.112592][T13496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.139077][ T2231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.139282][ T2231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.165837][T27182] usb 7-1: USB disconnect, device number 46 [ 1015.175530][ T2231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.175674][ T2231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.253488][T27182] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1015.919575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1016.086934][T13496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.891771][T13496] veth0_vlan: entered promiscuous mode [ 1016.912195][T13496] veth1_vlan: entered promiscuous mode [ 1016.978421][T13496] veth0_macvtap: entered promiscuous mode [ 1017.020746][T13496] veth1_macvtap: entered promiscuous mode [ 1017.074534][T13496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.088569][T13496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.109740][ T2231] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.111661][ T2231] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.111710][ T2231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.111749][ T2231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.729865][ T3630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.729888][ T3630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.987672][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.987693][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.750945][T14284] Process accounting paused [ 1019.879126][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12176'. [ 1019.882765][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12176'. [ 1020.400672][T14333] bond0: (slave dummy0): Releasing backup interface [ 1020.446554][T14336] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1020.493015][T14333] bridge_slave_0: left allmulticast mode [ 1020.493385][T14333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.572648][T14333] bridge_slave_1: left allmulticast mode [ 1020.572670][T14333] bridge_slave_1: left promiscuous mode [ 1020.572878][T14333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.579867][T27182] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1020.692090][T14333] bond0: (slave bond_slave_0): Releasing backup interface [ 1020.744992][T27182] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1020.745025][T27182] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.745048][T27182] usb 7-1: Product: syz [ 1020.745064][T27182] usb 7-1: Manufacturer: syz [ 1020.745082][T27182] usb 7-1: SerialNumber: syz [ 1020.763021][T27182] usb 7-1: config 0 descriptor?? [ 1020.855184][T14333] bond0: (slave bond_slave_1): Releasing backup interface [ 1020.994672][T14333] team0: Port device team_slave_0 removed [ 1021.042630][T14333] team0: Port device team_slave_1 removed [ 1021.043140][T14333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.093883][T14333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.130891][T14333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1021.893259][T27182] usb 7-1: non-Atmel transceiver xxxx7f00 [ 1022.095936][T27182] usb 7-1: Firmware version (0.0) predates our first public release. [ 1022.095962][T27182] usb 7-1: Please update to version 0.2 or newer [ 1022.096580][T27182] usb 7-1: atusb_probe: initialization failed, error = -19 [ 1022.141188][T27182] usb 7-1: USB disconnect, device number 47 [ 1022.174986][T14393] veth2: entered promiscuous mode [ 1022.175012][T14393] veth2: entered allmulticast mode [ 1022.854444][T14443] netlink: 'syz.5.12221': attribute type 10 has an invalid length. [ 1022.864007][T14443] team0: Port device dummy0 added [ 1023.409697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1023.569977][ C0] vkms_vblank_simulate: vblank timer overrun [ 1024.123462][T14510] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 1024.799000][T14540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1026.239714][T27182] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1026.394931][T27182] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1026.394982][T27182] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1026.395006][T27182] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.441564][T27182] usb 2-1: config 0 descriptor?? [ 1027.255570][T27182] letsketch 0003:6161:4D15.0061: Device info: 㡵 [ 1027.480059][T27182] letsketch 0003:6161:4D15.0061: Device info: 劸 [ 1027.682030][T27182] letsketch 0003:6161:4D15.0061: Device info:   [ 1028.158406][T27182] usb 2-1: Max retries (5) exceeded reading string descriptor 2 [ 1028.158498][T27182] letsketch 0003:6161:4D15.0061: probe with driver letsketch failed with error -71 [ 1028.188402][T27182] usb 2-1: USB disconnect, device number 48 [ 1028.629825][ T5893] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1028.799101][ T5893] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1028.799134][ T5893] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1028.815119][ T5893] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1028.815156][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.815181][ T5893] usb 6-1: Product: syz [ 1028.815199][ T5893] usb 6-1: Manufacturer: syz [ 1028.815216][ T5893] usb 6-1: SerialNumber: syz [ 1028.842162][ T5893] usb 6-1: config 0 descriptor?? [ 1028.844469][T14687] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1028.844773][T14687] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1029.052575][T14687] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1029.052810][T14687] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1029.456190][ T5893] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1030.066411][ T5893] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1030.088522][ T5893] dm9601 6-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, ee:28:bf:14:29:ba [ 1030.091885][ T5893] usb 6-1: USB disconnect, device number 27 [ 1030.096230][ T5893] dm9601 6-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 1030.479709][T27182] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1030.633367][T27182] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1030.633426][T27182] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1030.634887][T27182] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1030.634920][T27182] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1030.634940][T27182] usb 2-1: SerialNumber: syz [ 1030.694855][T27182] cdc_acm 2-1:1.0: invalid descriptor buffer length [ 1030.694881][T27182] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1030.694910][T27182] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 1030.694955][T27182] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1030.827342][T14816] netlink: 'syz.5.12369': attribute type 1 has an invalid length. [ 1030.827366][T14816] netlink: 'syz.5.12369': attribute type 4 has an invalid length. [ 1030.827381][T14816] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.12369'. [ 1030.828204][T14816] netlink: 'syz.5.12369': attribute type 1 has an invalid length. [ 1030.828223][T14816] netlink: 'syz.5.12369': attribute type 4 has an invalid length. [ 1030.828238][T14816] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.12369'. [ 1030.926014][ T31] usb 2-1: USB disconnect, device number 49 [ 1031.366300][T14849] overlayfs: failed to clone upperpath [ 1032.542090][T14897] overlayfs: failed to clone upperpath [ 1033.959771][T27182] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1034.023359][ T38] kauditd_printk_skb: 20 callbacks suppressed [ 1034.023379][ T38] audit: type=1326 audit(1761698904.360:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14944 comm="syz.3.12425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x0 [ 1034.127329][T27182] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1034.127360][T27182] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1034.135588][T27182] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1034.135615][T27182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1034.135633][T27182] usb 6-1: SerialNumber: syz [ 1034.407933][T27182] usb 6-1: 0:2 : does not exist [ 1034.408023][T27182] usb 6-1: usbmixer: too many channels (61) in unit 5 [ 1034.452139][T27182] usb 6-1: USB disconnect, device number 28 [ 1034.524807][T14981] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12432'. [ 1035.464668][T15024] kvm: Disabled LAPIC found during irq injection [ 1038.860919][T15156] GUP no longer grows the stack in syz.5.12509 (15156): 200000004000-20000000a000 (200000002000) [ 1038.861809][T15156] CPU: 1 UID: 0 PID: 15156 Comm: syz.5.12509 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1038.861835][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1038.861853][T15156] Call Trace: [ 1038.861866][T15156] [ 1038.861876][T15156] dump_stack_lvl+0x189/0x250 [ 1038.861918][T15156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1038.861951][T15156] ? __pfx__printk+0x10/0x10 [ 1038.861975][T15156] ? find_vma+0xe7/0x160 [ 1038.862028][T15156] __get_user_pages+0x22f0/0x2860 [ 1038.862093][T15156] get_user_pages_remote+0x2f1/0xac0 [ 1038.862121][T15156] ? __pfx_mtree_load+0x10/0x10 [ 1038.862156][T15156] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1038.862187][T15156] ? __access_remote_vm+0x367/0x7d0 [ 1038.862223][T15156] __access_remote_vm+0x211/0x7d0 [ 1038.862261][T15156] ? __pfx___access_remote_vm+0x10/0x10 [ 1038.862289][T15156] ? set_page_refcounted+0xa0/0x1e0 [ 1038.862341][T15156] ? alloc_pages_noprof+0xe4/0x1e0 [ 1038.862379][T15156] proc_pid_cmdline_read+0x433/0x810 [ 1038.862405][T15156] ? __asan_memset+0x22/0x50 [ 1038.862438][T15156] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1038.862463][T15156] ? rw_verify_area+0x2ac/0x4e0 [ 1038.862496][T15156] vfs_readv+0x5b3/0x850 [ 1038.862531][T15156] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1038.862556][T15156] ? __pfx_vfs_readv+0x10/0x10 [ 1038.862608][T15156] ? __fget_files+0x2a/0x420 [ 1038.862645][T15156] ? __fget_files+0x3a6/0x420 [ 1038.862675][T15156] ? __fget_files+0x2a/0x420 [ 1038.862717][T15156] __x64_sys_preadv+0x19a/0x2a0 [ 1038.862750][T15156] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1038.862786][T15156] ? do_syscall_64+0xbe/0xfa0 [ 1038.862820][T15156] do_syscall_64+0xfa/0xfa0 [ 1038.862846][T15156] ? lockdep_hardirqs_on+0x9c/0x150 [ 1038.862875][T15156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.862897][T15156] ? clear_bhb_loop+0x60/0xb0 [ 1038.862926][T15156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.862947][T15156] RIP: 0033:0x7fc39a4fefc9 [ 1038.862968][T15156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.862987][T15156] RSP: 002b:00007fc398766038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1038.863018][T15156] RAX: ffffffffffffffda RBX: 00007fc39a755fa0 RCX: 00007fc39a4fefc9 [ 1038.863036][T15156] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1038.863050][T15156] RBP: 00007fc39a581f91 R08: 0000000000000000 R09: 0000000000000000 [ 1038.863064][T15156] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1038.863079][T15156] R13: 00007fc39a756038 R14: 00007fc39a755fa0 R15: 00007fff4d0da1e8 [ 1038.863117][T15156] [ 1040.543830][T15192] ÿ: renamed from bond_slave_0 (while UP) [ 1042.817757][T27716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1042.848354][T27716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1042.850174][T27716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1042.862294][T27716] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1042.862982][T27716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1043.028725][T15264] virt_wifi0 speed is unknown, defaulting to 1000 [ 1043.029676][ T5813] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1043.179772][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 1043.185716][ T5813] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1043.185746][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.185767][ T5813] usb 6-1: Product: syz [ 1043.185789][ T5813] usb 6-1: Manufacturer: syz [ 1043.185810][ T5813] usb 6-1: SerialNumber: syz [ 1043.204318][ T5813] usb 6-1: config 0 descriptor?? [ 1043.217823][ T5813] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1043.234658][ T5813] pctv452e: pctv452e_power_ctrl: 1 [ 1043.234658][ T5813] [ 1043.234736][ T5813] usb 6-1: selecting invalid altsetting 3 [ 1043.234753][ T5813] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1043.234753][ T5813] [ 1043.234773][ T5813] dvb-usb: bulk message failed: -22 (5/0) [ 1043.271879][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1043.285203][ T5813] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1043.285274][ T5813] usb 6-1: media controller created [ 1043.286430][ T5813] dvb-usb: bulk message failed: -22 (8/0) [ 1043.286454][ T5813] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1043.286620][ T5813] dvb-usb: MAC address reading failed. [ 1043.428623][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1043.803125][ T5813] DVB: Unable to find symbol stb0899_attach() [ 1043.803143][ T5813] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1043.833607][T15264] chnl_net:caif_netlink_parms(): no params data found [ 1043.929698][ T5813] rc_core: IR keymap rc-tt-1500 not found [ 1043.929719][ T5813] Registered IR keymap rc-empty [ 1043.946364][ T5813] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1043.968692][ T5813] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input69 [ 1043.990221][ T5813] dvb-usb: schedule remote query interval to 100 msecs. [ 1043.990243][ T5813] pctv452e: pctv452e_power_ctrl: 0 [ 1043.990243][ T5813] [ 1043.990256][ T5813] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1044.029829][ T5813] usb 6-1: USB disconnect, device number 29 [ 1044.514989][ T5813] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1044.777869][T15264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.812452][T15264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.812745][T15264] bridge_slave_0: entered allmulticast mode [ 1044.815665][T15264] bridge_slave_0: entered promiscuous mode [ 1044.836131][T15264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.841907][T15264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.842197][T15264] bridge_slave_1: entered allmulticast mode [ 1044.853291][T15264] bridge_slave_1: entered promiscuous mode [ 1044.920753][T27716] Bluetooth: hci5: command tx timeout [ 1045.116922][T15264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.138223][T15264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.402338][T15264] team0: Port device team_slave_0 added [ 1045.406442][T15264] team0: Port device team_slave_1 added [ 1045.459109][ C1] vkms_vblank_simulate: vblank timer overrun [ 1045.797864][T15540] virt_wifi0 speed is unknown, defaulting to 1000 [ 1045.807265][T15264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.807282][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.807313][T15264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.986288][T27182] IPVS: starting estimator thread 0... [ 1046.062647][T15264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.062667][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.062698][T15264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.079742][T15597] IPVS: using max 7 ests per chain, 16800 per kthread [ 1046.145253][T15594] bridge1: entered promiscuous mode [ 1046.145273][T15594] bridge1: entered allmulticast mode [ 1046.174950][T15594] team0: Port device bridge1 added [ 1046.176981][T15601] bridge0: port 1(team0) entered blocking state [ 1046.177060][T15601] bridge0: port 1(team0) entered disabled state [ 1046.177200][T15601] team0: entered allmulticast mode [ 1046.177213][T15601] team_slave_0: entered allmulticast mode [ 1046.177228][T15601] team_slave_1: entered allmulticast mode [ 1046.232983][T15601] team0: entered promiscuous mode [ 1046.233001][T15601] team_slave_0: entered promiscuous mode [ 1046.233425][T15601] team_slave_1: entered promiscuous mode [ 1046.955145][T15264] hsr_slave_0: entered promiscuous mode [ 1046.957615][T15264] hsr_slave_1: entered promiscuous mode [ 1046.958608][T15264] debugfs: 'hsr0' already exists in 'hsr' [ 1046.958633][T15264] Cannot create hsr debugfs directory [ 1046.999930][T27716] Bluetooth: hci5: command tx timeout [ 1047.223816][T15697] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12596'. [ 1047.429853][ T5893] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1047.592882][ T5893] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1047.592912][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.617147][ T5893] usb 2-1: config 0 descriptor?? [ 1049.079665][T27716] Bluetooth: hci5: command tx timeout [ 1049.266305][ T5893] pegasus 2-1:0.0: can't reset MAC [ 1049.266670][ T5893] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 1049.304856][ T5893] usb 2-1: USB disconnect, device number 50 [ 1049.762796][T15264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1049.767388][T15841] overlayfs: failed to clone upperpath [ 1049.811754][T15264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1049.839315][T15264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1049.894889][T15264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1049.939994][T15837] Process accounting resumed [ 1050.356161][T15264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.472226][T15264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.535465][T24324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.535641][T24324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.574277][T24324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.574422][T24324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.159758][T27716] Bluetooth: hci5: command tx timeout [ 1051.467936][T15264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.607783][T15264] veth0_vlan: entered promiscuous mode [ 1051.643410][T15264] veth1_vlan: entered promiscuous mode [ 1051.748412][T15264] veth0_macvtap: entered promiscuous mode [ 1051.772220][T15264] veth1_macvtap: entered promiscuous mode [ 1051.813494][T15264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.849362][T15264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.897532][T24324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.899797][T24315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.934695][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.937975][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.520224][T24324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.520245][T24324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.618545][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.618567][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.126672][T16065] virt_wifi0 speed is unknown, defaulting to 1000 [ 1053.872924][ T31] IPVS: starting estimator thread 0... [ 1053.960237][T16125] IPVS: using max 8 ests per chain, 19200 per kthread [ 1054.288343][T24324] Bluetooth: hci6: Frame reassembly failed (-84) [ 1055.139003][ T3486] IPVS: stop unused estimator thread 0... [ 1056.280040][T27716] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1058.729947][T25720] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1058.882363][T25720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.882413][T25720] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1058.882437][T25720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.887519][T25720] usb 6-1: config 0 descriptor?? [ 1059.175077][T25720] usbhid 6-1:0.0: can't add hid device: -71 [ 1059.175198][T25720] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1059.219366][T25720] usb 6-1: USB disconnect, device number 30 [ 1059.644441][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.730661][T25720] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1059.900115][T25720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1059.900172][T25720] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1059.900199][T25720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.942434][T25720] usb 6-1: config 0 descriptor?? [ 1059.946902][T25720] hub 6-1:0.0: USB hub found [ 1060.160041][T25720] hub 6-1:0.0: 1 port detected [ 1061.197263][ T5805] usb 6-1: USB disconnect, device number 31 [ 1063.668156][T16451] overlayfs: failed to clone upperpath [ 1064.309945][T16469] virt_wifi0 speed is unknown, defaulting to 1000 [ 1064.411890][T16475] block nbd1: shutting down sockets [ 1065.662429][T16528] ref_ctr increment failed for inode: 0x392b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803955a280 [ 1065.789823][T16528] uprobe: syz.3.12821:16528 failed to unregister, leaking uprobe [ 1066.960009][T16528] uprobe: syz.3.12821:16528 failed to unregister, leaking uprobe [ 1068.643867][ T38] audit: type=1326 audit(1761698938.980:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.3.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1068.652482][ T38] audit: type=1326 audit(1761698938.990:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.3.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1068.661054][ T38] audit: type=1326 audit(1761698939.000:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.3.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1068.661110][ T38] audit: type=1326 audit(1761698939.000:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.3.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1068.661158][ T38] audit: type=1326 audit(1761698939.000:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.3.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1068.661208][ T38] audit: type=1326 audit(1761698939.000:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.3.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1068.669742][ T38] audit: type=1326 audit(1761698939.000:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.3.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1068.669800][ T38] audit: type=1326 audit(1761698939.000:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.3.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1068.676729][ T38] audit: type=1326 audit(1761698939.010:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.3.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1068.676790][ T38] audit: type=1326 audit(1761698939.010:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.3.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1069.552486][T16675] bridge1: entered promiscuous mode [ 1069.552508][T16675] bridge1: entered allmulticast mode [ 1069.603587][T16675] team0: Port device bridge1 added [ 1069.605075][T16676] bridge0: port 3(team0) entered blocking state [ 1069.605264][T16676] bridge0: port 3(team0) entered disabled state [ 1069.605478][T16676] team0: entered allmulticast mode [ 1069.605496][T16676] team_slave_0: entered allmulticast mode [ 1069.605517][T16676] team_slave_1: entered allmulticast mode [ 1069.700259][T16676] team0: entered promiscuous mode [ 1069.700283][T16676] team_slave_0: entered promiscuous mode [ 1069.700505][T16676] team_slave_1: entered promiscuous mode [ 1069.737710][T16676] bridge0: port 3(team0) entered blocking state [ 1069.737793][T16676] bridge0: port 3(team0) entered forwarding state [ 1070.969888][ T5805] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1071.122729][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.122762][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.122783][ T5805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1071.122849][ T5805] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1071.122871][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.188533][ T5805] usb 2-1: config 0 descriptor?? [ 1071.628096][ T5805] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0 [ 1071.628134][ T5805] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0 [ 1071.628162][ T5805] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0 [ 1071.628188][ T5805] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0 [ 1071.628216][ T5805] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0 [ 1071.628242][ T5805] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0 [ 1071.628269][ T5805] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0 [ 1071.628295][ T5805] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0 [ 1071.628321][ T5805] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0 [ 1071.729793][ T5805] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1071.824127][T27182] usb 2-1: USB disconnect, device number 51 [ 1072.642904][T16789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1073.502575][T16828] netlink: 'syz.0.12934': attribute type 4 has an invalid length. [ 1074.729892][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.796586][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.908260][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.236181][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.562242][T27716] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1077.562573][T27716] Bluetooth: hci5: Injecting HCI hardware error event [ 1077.585971][T13011] Bluetooth: hci5: hardware error 0x00 [ 1077.932990][T16960] overlayfs: failed to clone upperpath [ 1079.241942][T16985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12995'. [ 1079.800823][T13011] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1079.993185][T16998] fuse: Bad value for 'fd' [ 1080.752767][T16990] Process accounting paused [ 1080.870266][T17018] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1082.485212][ T38] kauditd_printk_skb: 39 callbacks suppressed [ 1082.485232][ T38] audit: type=1326 audit(1761698952.820:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17067 comm="syz.3.13026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1082.485517][ T38] audit: type=1326 audit(1761698952.820:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17067 comm="syz.3.13026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1082.485792][ T38] audit: type=1326 audit(1761698952.820:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17067 comm="syz.3.13026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1082.486120][ T38] audit: type=1326 audit(1761698952.820:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17067 comm="syz.3.13026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1082.489953][ T38] audit: type=1326 audit(1761698952.830:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17067 comm="syz.3.13026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1082.505288][ T38] audit: type=1326 audit(1761698952.840:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17067 comm="syz.3.13026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1082.505353][ T38] audit: type=1326 audit(1761698952.840:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17067 comm="syz.3.13026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1082.509309][ T38] audit: type=1326 audit(1761698952.840:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17067 comm="syz.3.13026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1082.512349][ T38] audit: type=1326 audit(1761698952.850:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17067 comm="syz.3.13026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1082.517171][ T38] audit: type=1326 audit(1761698952.850:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17067 comm="syz.3.13026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1084.025221][T27716] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1084.032026][T27716] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1084.040191][T27716] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1084.044375][T27716] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1084.045287][T27716] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1084.694847][T17102] virt_wifi0 speed is unknown, defaulting to 1000 [ 1084.827772][T17148] overlayfs: failed to resolve './file1': -2 [ 1085.303744][T17102] chnl_net:caif_netlink_parms(): no params data found [ 1085.550421][T17288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1085.863543][T17102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.863638][T17102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.863809][T17102] bridge_slave_0: entered allmulticast mode [ 1085.865873][T17102] bridge_slave_0: entered promiscuous mode [ 1085.876155][T17102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.876397][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.876658][T17102] bridge_slave_1: entered allmulticast mode [ 1085.901406][T17102] bridge_slave_1: entered promiscuous mode [ 1086.239181][T17102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.259732][T17102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.301473][T27716] Bluetooth: hci6: command tx timeout [ 1086.643312][T17102] team0: Port device team_slave_0 added [ 1086.648178][T17102] team0: Port device team_slave_1 added [ 1087.243920][T17102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.243960][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.243990][T17102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.246424][T17102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.246434][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.246455][T17102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.816124][T17102] hsr_slave_0: entered promiscuous mode [ 1087.827240][T17102] hsr_slave_1: entered promiscuous mode [ 1087.837299][T17102] debugfs: 'hsr0' already exists in 'hsr' [ 1087.837328][T17102] Cannot create hsr debugfs directory [ 1088.361829][T27716] Bluetooth: hci6: command tx timeout [ 1090.440136][T27716] Bluetooth: hci6: command tx timeout [ 1091.838347][T17102] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1092.119644][T17680] vivid-003: disconnect [ 1092.131353][T17102] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1092.180471][T17676] vivid-003: reconnect [ 1092.255981][T17102] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1092.330600][T17102] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1092.521950][T27716] Bluetooth: hci6: command tx timeout [ 1093.861659][T17102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.016855][T17102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.238217][T24324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.244158][T24324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.279085][T24315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.279315][T24315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.072264][T17728] netlink: 'syz.0.13150': attribute type 1 has an invalid length. [ 1095.185394][T17728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1095.298303][T17731] bond1: (slave ip6erspan0): making interface the new active one [ 1095.304913][T17731] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1095.409455][T17102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.541631][T17102] veth0_vlan: entered promiscuous mode [ 1096.578130][T17102] veth1_vlan: entered promiscuous mode [ 1096.691816][T17102] veth0_macvtap: entered promiscuous mode [ 1096.717806][T17102] veth1_macvtap: entered promiscuous mode [ 1096.833088][T17102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.883400][T17102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.994358][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.010601][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.047640][ T37] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.053028][ T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.533975][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.534006][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.625514][ T1534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.625538][ T1534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.891445][ T38] kauditd_printk_skb: 15 callbacks suppressed [ 1097.891463][ T38] audit: type=1326 audit(1761698968.230:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17828 comm="syz.0.13173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795afdefc9 code=0x7ffc0000 [ 1097.891767][ T38] audit: type=1326 audit(1761698968.230:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17828 comm="syz.0.13173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795afdefc9 code=0x7ffc0000 [ 1097.892076][ T38] audit: type=1326 audit(1761698968.230:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17828 comm="syz.0.13173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795afdefc9 code=0x7ffc0000 [ 1097.892741][ T38] audit: type=1326 audit(1761698968.230:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17828 comm="syz.0.13173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795afdefc9 code=0x7ffc0000 [ 1097.917979][ T38] audit: type=1326 audit(1761698968.230:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17828 comm="syz.0.13173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795afdefc9 code=0x7ffc0000 [ 1097.918049][ T38] audit: type=1326 audit(1761698968.230:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17828 comm="syz.0.13173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f795afdefc9 code=0x7ffc0000 [ 1097.918911][ T38] audit: type=1326 audit(1761698968.250:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17828 comm="syz.0.13173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795afdefc9 code=0x7ffc0000 [ 1097.919756][ T38] audit: type=1326 audit(1761698968.250:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17828 comm="syz.0.13173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795afdefc9 code=0x7ffc0000 [ 1097.921146][ T38] audit: type=1326 audit(1761698968.260:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17828 comm="syz.0.13173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f795afdefc9 code=0x7ffc0000 [ 1097.921214][ T38] audit: type=1326 audit(1761698968.260:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17828 comm="syz.0.13173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795afdefc9 code=0x7ffc0000 [ 1101.009681][T25720] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1101.173486][T25720] usb 9-1: Using ep0 maxpacket: 8 [ 1101.187804][T25720] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1101.187837][T25720] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.222046][T25720] usb 9-1: config 0 descriptor?? [ 1101.441601][T25720] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1103.057826][T25720] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1103.058105][T25720] asix 9-1:0.0: probe with driver asix failed with error -71 [ 1103.173242][T25720] usb 9-1: USB disconnect, device number 12 [ 1103.950017][T25720] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1104.106819][T25720] usb 9-1: Using ep0 maxpacket: 8 [ 1104.116486][T25720] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.116512][T25720] usb 9-1: config 0 has no interfaces? [ 1104.119980][T25720] usb 9-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 1104.120008][T25720] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.120029][T25720] usb 9-1: Product: syz [ 1104.120044][T25720] usb 9-1: Manufacturer: syz [ 1104.120061][T25720] usb 9-1: SerialNumber: syz [ 1104.173987][T25720] usb 9-1: config 0 descriptor?? [ 1104.664033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.923694][T15947] usb 9-1: USB disconnect, device number 13 [ 1106.195711][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13243'. [ 1107.820954][T18049] tipc: Started in network mode [ 1107.820986][T18049] tipc: Node identity b676f39d62b3, cluster identity 4711 [ 1107.821203][T18049] tipc: Enabled bearer , priority 0 [ 1107.826185][T18049] syzkaller0: MTU too low for tipc bearer [ 1107.826208][T18049] tipc: Disabling bearer [ 1109.224730][ T38] kauditd_printk_skb: 24 callbacks suppressed [ 1109.224752][ T38] audit: type=1326 audit(1761698979.560:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.3.13269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1109.224805][ T38] audit: type=1326 audit(1761698979.560:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.3.13269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1109.225727][ T38] audit: type=1326 audit(1761698979.560:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.3.13269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1109.225778][ T38] audit: type=1326 audit(1761698979.560:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.3.13269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1109.225824][ T38] audit: type=1326 audit(1761698979.560:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.3.13269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1109.226090][ T38] audit: type=1326 audit(1761698979.560:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.3.13269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1109.270165][ T38] audit: type=1326 audit(1761698979.610:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.3.13269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1109.270462][ T38] audit: type=1326 audit(1761698979.610:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.3.13269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1109.292649][ T38] audit: type=1326 audit(1761698979.630:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.3.13269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1109.292719][ T38] audit: type=1326 audit(1761698979.630:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.3.13269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c486efc9 code=0x7ffc0000 [ 1109.662023][T18102] overlayfs: failed to clone upperpath [ 1109.788975][T18093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.810137][T18093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.734043][T18093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.766981][T18093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.196501][T18120] Process accounting resumed [ 1112.187022][ T3566] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.187410][ T3566] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.187561][ T3566] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.187599][ T3566] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.403795][T27182] IPVS: starting estimator thread 0... [ 1112.407133][T18179] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1112.489858][T18181] IPVS: using max 7 ests per chain, 16800 per kthread [ 1112.512078][T18179] netlink: 'syz.1.13309': attribute type 13 has an invalid length. [ 1114.919928][T18179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.954829][T13011] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1114.984249][T13011] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1115.005934][T13011] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1115.007285][T13011] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1115.008139][T13011] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1115.035168][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13327'. [ 1115.035230][T18223] netlink: 324 bytes leftover after parsing attributes in process `syz.3.13327'. [ 1115.092792][T18179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.159863][T27716] Bluetooth: hci3: command tx timeout [ 1118.031333][ T1486] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.055338][ T1486] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.590488][ T1486] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.239899][T27716] Bluetooth: hci3: command tx timeout [ 1119.508967][ T1486] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.530127][T15377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.753385][T18217] virt_wifi0 speed is unknown, defaulting to 1000 [ 1121.084859][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.319930][T27716] Bluetooth: hci3: command tx timeout [ 1121.537376][T15377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.279699][T14374] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1123.290143][T15377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.402097][T27716] Bluetooth: hci3: command tx timeout [ 1123.865616][T14374] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1123.865650][T14374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.889103][T14374] usb 2-1: config 0 descriptor?? [ 1123.931165][T14374] pwc: Creative Labs Webcam Pro Ex detected. [ 1124.131127][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13410'. [ 1124.355030][T15377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.522335][T14374] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1124.524230][T14374] pwc: recv_control_msg error -32 req 02 val 2700 [ 1124.728173][T14374] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1124.738622][T14374] pwc: recv_control_msg error -71 req 04 val 1000 [ 1124.739256][T14374] pwc: recv_control_msg error -71 req 04 val 1300 [ 1124.752727][T14374] pwc: recv_control_msg error -71 req 04 val 1400 [ 1124.753250][T14374] pwc: recv_control_msg error -71 req 02 val 2000 [ 1124.755957][T14374] pwc: recv_control_msg error -71 req 02 val 2100 [ 1124.756470][T14374] pwc: recv_control_msg error -71 req 06 val 0600 [ 1124.757082][T14374] pwc: recv_control_msg error -71 req 04 val 1500 [ 1124.757618][T14374] pwc: recv_control_msg error -71 req 02 val 2500 [ 1124.758123][T14374] pwc: recv_control_msg error -71 req 02 val 2400 [ 1124.776907][T18563] overlayfs: failed to clone upperpath [ 1124.814580][T14374] pwc: recv_control_msg error -71 req 02 val 2600 [ 1124.815105][T14374] pwc: recv_control_msg error -71 req 02 val 2900 [ 1124.815614][T14374] pwc: recv_control_msg error -71 req 02 val 2800 [ 1124.816451][T14374] pwc: recv_control_msg error -71 req 04 val 1100 [ 1124.816950][T14374] pwc: recv_control_msg error -71 req 04 val 1200 [ 1124.854554][T14374] pwc: Registered as video103. [ 1124.865250][T14374] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input70 [ 1124.881585][T14374] usb 2-1: USB disconnect, device number 52 [ 1125.004091][T18217] chnl_net:caif_netlink_parms(): no params data found [ 1125.768945][T18217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.769108][T18217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.769414][T18217] bridge_slave_0: entered allmulticast mode [ 1125.809866][T18217] bridge_slave_0: entered promiscuous mode [ 1126.712096][T18217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.712225][T18217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.712845][T18217] bridge_slave_1: entered allmulticast mode [ 1126.740135][T18217] bridge_slave_1: entered promiscuous mode [ 1127.122941][T15377] team0: left allmulticast mode [ 1127.122965][T15377] team_slave_0: left allmulticast mode [ 1127.122987][T15377] team_slave_1: left allmulticast mode [ 1127.123246][T15377] team0: left promiscuous mode [ 1127.123260][T15377] team_slave_0: left promiscuous mode [ 1127.123479][T15377] team_slave_1: left promiscuous mode [ 1127.124067][T15377] bridge0: port 3(team0) entered disabled state [ 1127.225106][T15377] bridge_slave_1: left allmulticast mode [ 1127.225138][T15377] bridge_slave_1: left promiscuous mode [ 1127.225408][T15377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.350436][T15377] bridge_slave_0: left allmulticast mode [ 1127.350469][T15377] bridge_slave_0: left promiscuous mode [ 1127.350728][T15377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.401050][ T38] kauditd_printk_skb: 36 callbacks suppressed [ 1127.401070][ T38] audit: type=1326 audit(1761698997.740:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18719 comm="syz.8.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f1efc9 code=0x7ffc0000 [ 1127.401142][ T38] audit: type=1326 audit(1761698997.740:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18719 comm="syz.8.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff6d8f1efc9 code=0x7ffc0000 [ 1127.404694][ T38] audit: type=1326 audit(1761698997.740:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18719 comm="syz.8.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f1efc9 code=0x7ffc0000 [ 1127.404754][ T38] audit: type=1326 audit(1761698997.740:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18719 comm="syz.8.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f1efc9 code=0x7ffc0000 [ 1127.406936][ T38] audit: type=1326 audit(1761698997.740:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18719 comm="syz.8.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6d8f1efc9 code=0x7ffc0000 [ 1127.406991][ T38] audit: type=1326 audit(1761698997.740:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18719 comm="syz.8.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f1efc9 code=0x7ffc0000 [ 1127.407041][ T38] audit: type=1326 audit(1761698997.740:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18719 comm="syz.8.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff6d8f1efc9 code=0x7ffc0000 [ 1127.407279][ T38] audit: type=1326 audit(1761698997.740:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18719 comm="syz.8.13443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 1127.407584][ T38] audit: type=1326 audit(1761698997.740:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18719 comm="syz.8.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f1efc9 code=0x7ffc0000 [ 1127.408242][ T38] audit: type=1326 audit(1761698997.740:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18719 comm="syz.8.13443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d8f1efc9 code=0x7ffc0000 [ 1128.349827][ T5893] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1128.509703][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 1128.513642][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1128.513689][ T5893] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1128.513713][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.519105][ T5893] usb 2-1: config 0 descriptor?? [ 1128.558713][T15377] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1128.700534][ T5813] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1128.783665][ T5893] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1128.853332][ T5813] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.853392][ T5813] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1128.853410][ T5813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.857427][ T5813] usb 9-1: config 0 descriptor?? [ 1128.900593][ T5813] pwc: Askey VC010 type 2 USB webcam detected. [ 1129.248142][ T5893] usb 2-1: USB disconnect, device number 53 [ 1129.276993][ T5813] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1129.277782][ T5813] pwc: recv_control_msg error -32 req 02 val 2700 [ 1129.278485][ T5813] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1129.279112][ T5813] pwc: recv_control_msg error -32 req 04 val 1000 [ 1129.279808][ T5813] pwc: recv_control_msg error -32 req 04 val 1300 [ 1129.298040][ T5813] pwc: recv_control_msg error -32 req 04 val 1400 [ 1129.318847][ T5813] pwc: recv_control_msg error -32 req 02 val 2000 [ 1129.521206][ T5813] pwc: recv_control_msg error -71 req 04 val 1500 [ 1129.522198][ T5813] pwc: recv_control_msg error -71 req 02 val 2500 [ 1129.522750][ T5813] pwc: recv_control_msg error -71 req 02 val 2400 [ 1129.523200][ T5813] pwc: recv_control_msg error -71 req 02 val 2600 [ 1129.523654][ T5813] pwc: recv_control_msg error -71 req 02 val 2900 [ 1129.524182][ T5813] pwc: recv_control_msg error -71 req 02 val 2800 [ 1129.524898][ T5813] pwc: recv_control_msg error -71 req 04 val 1100 [ 1129.525463][ T5813] pwc: recv_control_msg error -71 req 04 val 1200 [ 1129.527934][ T5813] pwc: Registered as video103. [ 1129.593874][ T5813] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input71 [ 1129.654578][ T5813] usb 9-1: USB disconnect, device number 14 [ 1129.838515][T18838] binder: 18837:18838 ioctl c0306201 200000000080 returned -14 [ 1129.973970][T15377] team0: Port device bridge1 removed [ 1130.058060][T18846] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1130.058092][T18846] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1130.058142][T18846] overlayfs: conflicting lowerdir path [ 1130.547279][T18861] 9pnet_fd: Insufficient options for proto=fd [ 1131.407314][T18901] netlink: 64 bytes leftover after parsing attributes in process `syz.8.13510'. [ 1131.407345][T18901] nbd: couldn't find a device at index 0 [ 1131.515189][T15377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.611076][T15377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.659203][T15377] bond0 (unregistering): Released all slaves [ 1132.923623][T15377] bond1 (unregistering): Released all slaves [ 1132.991582][T18217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.995727][T18723] netlink: 'syz.3.13445': attribute type 12 has an invalid length. [ 1133.035843][T18217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.304291][T18966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1134.035512][T18217] team0: Port device team_slave_0 added [ 1134.523613][T18217] team0: Port device team_slave_1 added [ 1135.966680][T15377] hsr_slave_0: left promiscuous mode [ 1136.000845][T15377] hsr_slave_1: left promiscuous mode [ 1136.001970][T15377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1136.001989][T15377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.348664][T15377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1136.355539][T15377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.904764][T15377] veth1_macvtap: left promiscuous mode [ 1136.906660][T15377] veth0_macvtap: left promiscuous mode [ 1136.906940][T15377] veth1_vlan: left promiscuous mode [ 1136.907125][T15377] veth0_vlan: left promiscuous mode [ 1137.489731][ T31] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1137.686843][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1137.686878][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.686901][ T31] usb 2-1: Product: syz [ 1137.686918][ T31] usb 2-1: Manufacturer: syz [ 1137.686935][ T31] usb 2-1: SerialNumber: syz [ 1138.279758][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1138.279815][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1138.279836][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1138.334634][ T31] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1138.358571][ T31] usb 2-1: USB disconnect, device number 54 [ 1142.041098][T19212] usb usb5: usbfs: process 19212 (syz.8.13607) did not claim interface 0 before use [ 1143.255963][T15377] team0 (unregistering): Port device team_slave_1 removed [ 1143.565010][T15377] team0 (unregistering): Port device team_slave_0 removed [ 1143.938996][T19267] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 1143.942224][T19267] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 1143.942887][T19267] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 1143.943544][T19267] kvm: requested 117333 ns i8254 timer period limited to 200000 ns [ 1143.945277][T19267] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 1143.945939][T19267] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 1143.946740][T19267] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 1143.948399][T19267] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 1143.972153][T19267] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 1143.984657][T19267] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 1145.562801][ T38] audit: type=1804 audit(1761699015.880:639): pid=19322 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.13656" name="bus" dev="ramfs" ino=135040 res=1 errno=0 [ 1145.624199][ T38] audit: type=1804 audit(1761699015.960:640): pid=19325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.8.13656" name="bus" dev="ramfs" ino=135040 res=1 errno=0 [ 1149.351994][T18217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.352012][T18217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.352040][T18217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.400650][T18217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.400670][T18217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.400701][T18217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.475364][T19067] Process accounting paused [ 1150.247133][T18217] hsr_slave_0: entered promiscuous mode [ 1150.291586][T18217] hsr_slave_1: entered promiscuous mode [ 1150.336815][T18217] debugfs: 'hsr0' already exists in 'hsr' [ 1150.336848][T18217] Cannot create hsr debugfs directory [ 1150.932142][ T7273] block device autoloading is deprecated and will be removed. [ 1151.033264][ T38] audit: type=1326 audit(1761699021.370:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19482 comm="syz.1.13699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 1151.034023][ T38] audit: type=1326 audit(1761699021.370:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19482 comm="syz.1.13699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 1151.091233][ T38] audit: type=1326 audit(1761699021.420:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19482 comm="syz.1.13699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 1151.091277][ T38] audit: type=1326 audit(1761699021.430:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19482 comm="syz.1.13699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 1151.091313][ T38] audit: type=1326 audit(1761699021.430:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19482 comm="syz.1.13699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 1151.111222][ T38] audit: type=1326 audit(1761699021.450:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19482 comm="syz.1.13699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 1151.111290][ T38] audit: type=1326 audit(1761699021.450:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19482 comm="syz.1.13699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 1151.111349][ T38] audit: type=1326 audit(1761699021.450:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19482 comm="syz.1.13699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 1151.111400][ T38] audit: type=1326 audit(1761699021.450:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19482 comm="syz.1.13699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 1151.111758][ T38] audit: type=1326 audit(1761699021.450:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19482 comm="syz.1.13699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5ddfe5efc9 code=0x7ffc0000 [ 1153.464913][T18217] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.729444][T18217] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.008590][T18217] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.857622][T18217] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.758687][T18217] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1159.806630][T18217] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1159.981403][T18217] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1161.179278][T18217] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1161.483234][T19670] netlink: 136 bytes leftover after parsing attributes in process `syz.1.13751'. [ 1161.483258][T19670] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1161.724140][T18217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.849928][T18217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.884042][ T2231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.885124][ T2231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.953049][ T2231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.953214][ T2231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.282379][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13760'. [ 1162.282405][T19695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.332605][T19695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.514277][T19700] create_pit_timer: 1 callbacks suppressed [ 1162.514295][T19700] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1162.620644][T19700] kvm: pic: non byte read [ 1162.634854][T19700] kvm: pic: level sensitive irq not supported [ 1162.635218][T19700] kvm: pic: non byte read [ 1162.635483][T19700] kvm: pic: level sensitive irq not supported [ 1162.635604][T19700] kvm: pic: non byte read [ 1162.883189][T18217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.087226][T18217] veth0_vlan: entered promiscuous mode [ 1163.128404][T18217] veth1_vlan: entered promiscuous mode [ 1163.313818][T18217] veth0_macvtap: entered promiscuous mode [ 1163.360033][T18217] veth1_macvtap: entered promiscuous mode [ 1163.391791][T18217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.415087][T18217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1163.473379][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.473448][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.473490][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.473532][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.879830][ T5813] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1164.051843][ T5813] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.051875][ T5813] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1164.053403][ T5813] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1164.053434][ T5813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1164.053456][ T5813] usb 9-1: SerialNumber: syz [ 1164.165269][ T5813] usb 9-1: 0:2 : does not exist [ 1164.418081][T13631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.418106][T13631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.611106][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.611128][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.603569][T19800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1166.111503][T19831] netlink: 'syz.3.13799': attribute type 4 has an invalid length. [ 1166.134376][T19831] netlink: 'syz.3.13799': attribute type 4 has an invalid length. [ 1166.153177][T19820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1167.409678][T14374] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1167.484603][ T5813] usb 9-1: USB disconnect, device number 15 [ 1167.563535][T14374] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.563594][T14374] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1167.563619][T14374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.572539][T14374] usb 3-1: config 0 descriptor?? [ 1167.594418][T14374] pwc: Askey VC010 type 2 USB webcam detected. [ 1167.799748][T25720] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1167.949747][T25720] usb 2-1: Using ep0 maxpacket: 16 [ 1167.952885][T25720] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1167.952917][T25720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1167.990044][T25720] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1167.990073][T25720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.990092][T25720] usb 2-1: Product: syz [ 1167.990106][T25720] usb 2-1: Manufacturer: syz [ 1167.990119][T25720] usb 2-1: SerialNumber: syz [ 1168.014130][T14374] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1168.026416][T14374] pwc: recv_control_msg error -32 req 02 val 2700 [ 1168.027609][T14374] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1168.044762][T14374] pwc: recv_control_msg error -32 req 04 val 1000 [ 1168.045926][T14374] pwc: recv_control_msg error -32 req 04 val 1300 [ 1168.050735][T14374] pwc: recv_control_msg error -32 req 04 val 1400 [ 1168.051994][T14374] pwc: recv_control_msg error -32 req 02 val 2000 [ 1168.059421][T14374] pwc: recv_control_msg error -32 req 02 val 2100 [ 1168.061162][T14374] pwc: recv_control_msg error -32 req 04 val 1500 [ 1168.091096][T25720] usb 2-1: config 0 descriptor?? [ 1168.098503][T25720] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1168.098534][T25720] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1168.266297][T14374] pwc: recv_control_msg error -71 req 02 val 2400 [ 1168.268003][T14374] pwc: recv_control_msg error -71 req 02 val 2600 [ 1168.282879][T14374] pwc: recv_control_msg error -71 req 02 val 2900 [ 1168.290002][T14374] pwc: recv_control_msg error -71 req 02 val 2800 [ 1168.290719][T14374] pwc: recv_control_msg error -71 req 04 val 1100 [ 1168.291287][T14374] pwc: recv_control_msg error -71 req 04 val 1200 [ 1168.298689][T14374] pwc: Registered as video103. [ 1168.325855][T14374] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input72 [ 1168.393486][T14374] usb 3-1: USB disconnect, device number 30 [ 1168.712913][T24369] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.746447][T25720] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1168.749116][T25720] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1170.089173][T25720] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1170.324931][T25720] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1170.395813][T24369] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.655925][T19955] netlink: 'syz.8.13828': attribute type 1 has an invalid length. [ 1170.740582][T25720] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1170.741004][T25720] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1170.741397][T25720] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1170.741785][T25720] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1170.776781][T19964] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13828'. [ 1170.835538][T25720] usb 2-1: USB disconnect, device number 55 [ 1170.948837][T24369] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.413431][T19959] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1172.415384][T19964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1173.911331][T24369] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.649187][T24369] bridge_slave_1: left allmulticast mode [ 1175.649218][T24369] bridge_slave_1: left promiscuous mode [ 1175.667372][T24369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.814496][T24369] bridge_slave_0: left allmulticast mode [ 1175.814519][T24369] bridge_slave_0: left promiscuous mode [ 1175.814695][T24369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.977860][T20141] snd_dummy snd_dummy.0: control 0:0:128:syz0:0 is already present [ 1181.125444][T20125] Process accounting resumed [ 1182.629911][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.399941][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13901'. [ 1183.399968][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13901'. [ 1187.768248][ T39] INFO: task syz.6.12303:14637 blocked for more than 143 seconds. [ 1187.768274][ T39] Not tainted syzkaller #0 [ 1187.768284][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1187.768294][ T39] task:syz.6.12303 state:D stack:25160 pid:14637 tgid:14637 ppid:23811 task_flags:0x400040 flags:0x00080003 [ 1187.768354][ T39] Call Trace: [ 1187.768362][ T39] [ 1187.768377][ T39] __schedule+0x16f3/0x4c20 [ 1187.768420][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1187.768450][ T39] ? __lock_acquire+0xab9/0xd20 [ 1187.768487][ T39] ? __lock_acquire+0xab9/0xd20 [ 1187.768514][ T39] ? __pfx___schedule+0x10/0x10 [ 1187.768557][ T39] ? schedule+0x91/0x360 [ 1187.768586][ T39] schedule+0x165/0x360 [ 1187.768613][ T39] __fuse_simple_request+0x11d2/0x1bb0 [ 1187.768655][ T39] ? __pfx___fuse_simple_request+0x10/0x10 [ 1187.768684][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1187.768724][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1187.768766][ T39] fuse_flush+0x5dd/0x810 [ 1187.768792][ T39] ? rcu_is_watching+0x15/0xb0 [ 1187.768828][ T39] ? __pfx_fuse_flush+0x10/0x10 [ 1187.768879][ T39] ? filp_close+0x21/0x40 [ 1187.768899][ T39] ? filp_flush+0x31/0x190 [ 1187.768921][ T39] ? kasan_check_range+0x9f/0x2c0 [ 1187.768957][ T39] ? __pfx_fuse_flush+0x10/0x10 [ 1187.768984][ T39] filp_flush+0xc0/0x190 [ 1187.769008][ T39] filp_close+0x1d/0x40 [ 1187.769030][ T39] __se_sys_close_range+0x35c/0x650 [ 1187.769065][ T39] ? __pfx___se_sys_close_range+0x10/0x10 [ 1187.769099][ T39] ? do_syscall_64+0xbe/0xfa0 [ 1187.769176][ T39] do_syscall_64+0xfa/0xfa0 [ 1187.769206][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.769227][ T39] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1187.769248][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1187.769273][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.769294][ T39] RIP: 0033:0x7f2c569fefc9 [ 1187.769313][ T39] RSP: 002b:00007ffd24162618 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1187.769336][ T39] RAX: ffffffffffffffda RBX: 00007f2c56c57da0 RCX: 00007f2c569fefc9 [ 1187.769352][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1187.769366][ T39] RBP: 00007f2c56c57da0 R08: 00000000000095c4 R09: 000000082416290f [ 1187.769381][ T39] R10: 00007f2c56c57cb0 R11: 0000000000000246 R12: 00000000000fac36 [ 1187.769395][ T39] R13: 00007ffd24162710 R14: ffffffffffffffff R15: 00007ffd24162730 [ 1187.769431][ T39] [ 1187.769603][ T39] [ 1187.769603][ T39] Showing all locks held in the system: [ 1187.769615][ T39] 4 locks held by ktimers/0/16: [ 1187.769630][ T39] 1 lock held by khungtaskd/39: [ 1187.769642][ T39] #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1187.769714][ T39] 2 locks held by getty/5563: [ 1187.769726][ T39] #0: ffff88823bf628a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1187.770037][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1187.770114][ T39] 4 locks held by kworker/u8:12/24369: [ 1187.770127][ T39] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1187.770181][ T39] #1: ffffc9000592fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1187.770234][ T39] #2: ffffffff8e855fa0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1187.784347][ T39] #3: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1187.784409][ T39] 3 locks held by kworker/1:6/25720: [ 1187.784422][ T39] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1187.784472][ T39] #1: ffffc90004c4fba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1187.784520][ T39] #2: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1187.784584][ T39] 3 locks held by kworker/u8:17/13631: [ 1187.784596][ T39] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1187.784651][ T39] #1: ffffc9000f11fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1187.784700][ T39] #2: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1187.784749][ T39] 8 locks held by kworker/u8:18/15377: [ 1187.784766][ T39] 4 locks held by syz.9.13924/20256: [ 1187.784777][ T39] 7 locks held by syz-executor/20257: [ 1187.784790][ T39] 2 locks held by syz.1.13925/20259: [ 1187.784803][ T39] [ 1187.784809][ T39] ============================================= [ 1187.784809][ T39] [ 1187.784828][ T39] NMI backtrace for cpu 1 [ 1187.784842][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1187.784864][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1187.784877][ T39] Call Trace: [ 1187.784885][ T39] [ 1187.784893][ T39] dump_stack_lvl+0x189/0x250 [ 1187.784928][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1187.784958][ T39] ? __pfx__printk+0x10/0x10 [ 1187.784995][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 1187.785019][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1187.785042][ T39] ? __pfx__printk+0x10/0x10 [ 1187.785071][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1187.785095][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1187.785119][ T39] watchdog+0xf60/0xfa0 [ 1187.785154][ T39] ? watchdog+0x1e2/0xfa0 [ 1187.785187][ T39] kthread+0x711/0x8a0 [ 1187.785221][ T39] ? __pfx_watchdog+0x10/0x10 [ 1187.785246][ T39] ? __pfx_kthread+0x10/0x10 [ 1187.785272][ T39] ? rt_spin_unlock+0x150/0x200 [ 1187.785297][ T39] ? rt_spin_unlock+0x161/0x200 [ 1187.785316][ T39] ? __pfx_kthread+0x10/0x10 [ 1187.785347][ T39] ret_from_fork+0x4bc/0x870 [ 1187.785375][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1187.785407][ T39] ? __switch_to_asm+0x39/0x70 [ 1187.785426][ T39] ? __switch_to_asm+0x33/0x70 [ 1187.785445][ T39] ? __pfx_kthread+0x10/0x10 [ 1187.785476][ T39] ret_from_fork_asm+0x1a/0x30 [ 1187.785513][ T39] [ 1187.785521][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1187.785546][ C0] NMI backtrace for cpu 0 [ 1187.785560][ C0] CPU: 0 UID: 0 PID: 5804 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1187.785579][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1187.785590][ C0] RIP: 0010:unwind_next_frame+0xc2/0x2390 [ 1187.785616][ C0] Code: 00 e8 92 39 32 00 4c 8d 3d 00 00 00 00 48 c7 c7 c0 a4 5a 8d 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 57 e8 ee 6f 28 00 <48> 83 c4 08 e8 c5 cb 4c 09 85 c0 74 3a e8 0c 7f 31 00 84 c0 75 31 [ 1187.785631][ C0] RSP: 0018:ffffc90004e3f4d0 EFLAGS: 00000282 [ 1187.785646][ C0] RAX: 92bd7b442cb0ed00 RBX: ffffffff843830bd RCX: 92bd7b442cb0ed00 [ 1187.785660][ C0] RDX: 0000000000000000 RSI: ffffffff8cf63301 RDI: ffffffff8b3ddbe0 [ 1187.785672][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81737cf5 [ 1187.785685][ C0] R10: ffffc90004e3f5f8 R11: ffffffff81aadb70 R12: 1ffff920009c7eb5 [ 1187.785698][ C0] R13: ffffc90004e3f5e0 R14: ffffc90004e3f5a8 R15: ffffffff81737cf5 [ 1187.785712][ C0] FS: 000055558d744500(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000 [ 1187.785727][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1187.785738][ C0] CR2: 000055558d75f5c8 CR3: 0000000034e30000 CR4: 00000000003526f0 [ 1187.785754][ C0] Call Trace: [ 1187.785760][ C0] [ 1187.785766][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1187.785792][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1187.785816][ C0] ? tomoyo_encode+0x28b/0x550 [ 1187.785838][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1187.785859][ C0] arch_stack_walk+0x11c/0x150 [ 1187.785885][ C0] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 1187.785908][ C0] stack_trace_save+0x9c/0xe0 [ 1187.785926][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1187.785943][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1187.785968][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1187.785991][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1187.786014][ C0] kasan_save_track+0x3e/0x80 [ 1187.786035][ C0] ? kasan_save_track+0x3e/0x80 [ 1187.786054][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1187.786080][ C0] ? __kmalloc_noprof+0x233/0x7d0 [ 1187.786103][ C0] ? tomoyo_encode+0x28b/0x550 [ 1187.786119][ C0] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 1187.786168][ C0] __kasan_kmalloc+0x93/0xb0 [ 1187.786191][ C0] __kmalloc_noprof+0x233/0x7d0 [ 1187.786213][ C0] ? tomoyo_encode+0x28b/0x550 [ 1187.786234][ C0] tomoyo_encode+0x28b/0x550 [ 1187.786257][ C0] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1187.786285][ C0] tomoyo_path_perm+0x213/0x4b0 [ 1187.786311][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 1187.786337][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1187.786386][ C0] ? __lock_acquire+0xab9/0xd20 [ 1187.786428][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 1187.786454][ C0] ? __d_lookup+0x66/0x780 [ 1187.786476][ C0] ? __d_lookup+0x66/0x780 [ 1187.786493][ C0] ? __d_lookup+0x6df/0x780 [ 1187.786513][ C0] tomoyo_path_unlink+0xa2/0xe0 [ 1187.786536][ C0] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 1187.786564][ C0] ? d_lookup+0xa0/0xc0 [ 1187.786585][ C0] security_path_unlink+0x167/0x360 [ 1187.786612][ C0] do_unlinkat+0x2c1/0x570 [ 1187.786639][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 1187.786663][ C0] ? strncpy_from_user+0x150/0x290 [ 1187.786689][ C0] ? getname_flags+0x1e5/0x540 [ 1187.786719][ C0] __x64_sys_unlink+0x47/0x50 [ 1187.786742][ C0] do_syscall_64+0xfa/0xfa0 [ 1187.786765][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.786789][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.786808][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1187.786831][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.786849][ C0] RIP: 0033:0x7fd3c486e577 [ 1187.786864][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.786880][ C0] RSP: 002b:00007ffd79244078 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1187.786899][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd3c486e577 [ 1187.786912][ C0] RDX: 00007ffd792440a0 RSI: 00007ffd79244130 RDI: 00007ffd79244130 [ 1187.786926][ C0] RBP: 00007ffd79244130 R08: 0000000000000000 R09: 0000000000000000 [ 1187.786938][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd792451c0 [ 1187.786950][ C0] R13: 00007fd3c48f1d7d R14: 0000000000121d61 R15: 00007ffd79245200 [ 1187.786976][ C0] [ 1190.075561][T20273] ptrace attach of "./syz-executor exec"[17102] was attempted by "./syz-executor exec"[20273] [ 1191.770388][T24369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1191.830947][T24369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1191.856084][T24369] bond0 (unregistering): Released all slaves [ 1193.060153][T24369] hsr_slave_0: left promiscuous mode [ 1193.079946][T24369] hsr_slave_1: left promiscuous mode [ 1193.081106][T24369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.081132][T24369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.120578][T24369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.120604][T24369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.213524][T24369] veth1_macvtap: left promiscuous mode [ 1193.213612][T24369] veth0_macvtap: left promiscuous mode [ 1193.213777][T24369] veth1_vlan: left promiscuous mode [ 1193.213888][T24369] veth0_vlan: left promiscuous mode [ 1195.930621][T24369] team0 (unregistering): Port device team_slave_1 removed [ 1196.201332][T24369] team0 (unregistering): Port device team_slave_0 removed