last executing test programs: 9m10.403841307s ago: executing program 1 (id=1012): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) pwrite64(r3, 0x0, 0x0, 0xf) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x1, 0x0, 0xfffffffc}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) 9m6.92934383s ago: executing program 1 (id=1022): timerfd_create(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x347183, 0x15a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0xa65}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 9m5.350480935s ago: executing program 1 (id=1024): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x3, 0x1, 0x8, 0x6}, {0x7ff, 0xcb, 0x81, 0x6}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0xfd, 0x4, 0xb753, 0x20, @loopback, @mcast2={0xff, 0x3}, 0x8000, 0xba08, 0x0, 0x1004}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18e379cdcc23aca21c04ea5069f36c2e8a25d5c7a266000000000000eb2b7f", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd6000000000383a0008880000000000000000000000000001ff0200000000000000000000000000010300a1780a0000006e101074000729fffe8000000000000000000000000000bb20010000000000000000000000000001f738369f031271a1"], 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r8 = syz_open_pts(r7, 0x28101) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) r10 = dup3(r8, r7, 0x0) write$UHID_INPUT(r10, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0xe00}}, 0xffffff5c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m3.427068227s ago: executing program 1 (id=1027): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) 9m3.295799619s ago: executing program 1 (id=1029): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) r6 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) prlimit64(0x0, 0x7, 0x0, 0x0) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@polexpire={0xcc, 0x1b, 0x57a500b9b82fd89, 0x0, 0x0, {{{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {0x0, 0xfffffffffffffffe}}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) 8m53.286415123s ago: executing program 1 (id=1046): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000a, 0x50032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc1485544, &(0x7f0000000000)=0x5) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x47d}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0xc0, &(0x7f0000000000)=0x4, 0x0, 0x4) ioctl$UFFDIO_REGISTER(r4, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x200000000000000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000640)={0x21, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000300)=[0x0]) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000200), 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8m38.21370002s ago: executing program 32 (id=1046): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000a, 0x50032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc1485544, &(0x7f0000000000)=0x5) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x47d}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0xc0, &(0x7f0000000000)=0x4, 0x0, 0x4) ioctl$UFFDIO_REGISTER(r4, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x200000000000000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000640)={0x21, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000300)=[0x0]) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000200), 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6m46.943926233s ago: executing program 4 (id=1277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) 6m45.210420325s ago: executing program 4 (id=1281): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) pwrite64(r3, 0x0, 0x0, 0xf) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x1, 0x0, 0xfffffffc}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) 6m39.95717897s ago: executing program 4 (id=1293): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat(0xffffffffffffff9c, 0x0, 0x40942, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpgid(r1, r1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6m38.112664338s ago: executing program 4 (id=1295): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x280a40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r6, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 6m36.47248814s ago: executing program 4 (id=1304): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb08004500001c00000000008d0a6284375a8926141415384e4dbea862106c"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f00000007c0)=""/222, 0xde, 0x18000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x1, 0x9, 0x0}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 6m32.258400133s ago: executing program 4 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x20040880) syz_emit_ethernet(0x10f, &(0x7f00000008c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "4c8b77", 0xd9, 0x0, 0xff, @mcast1, @loopback, {[@dstopts={0x2b}, @fragment={0x62, 0x0, 0xd2, 0x0, 0x0, 0x16, 0x65}, @hopopts={0x2f, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xe4}]}], "26265726ecd32960de9896fafb49c4d1c829a6b938d4b41281b960d50b5d2d903a286d2b77b948d8de0cf8467f5898677a5e14a6ca5e8e7c3d0a0fb10ec053c178b189190c665d0aae7e9778ed5d446317761286ca956aa4a18f01c6f712a84a19e3cea96b524b52d170744c19244581a67467960e4270ba57e07df0a535952906eb6949f10182c964e43225245fe1dd7708848fabe6ebc9c44296778c0621280a8efdea35d563a266bdfe0da89a4e76e3"}}}}}, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {0x0}], 0x2) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000300)="$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") r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000802000085000000950000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m16.241293064s ago: executing program 33 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x20040880) syz_emit_ethernet(0x10f, &(0x7f00000008c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "4c8b77", 0xd9, 0x0, 0xff, @mcast1, @loopback, {[@dstopts={0x2b}, @fragment={0x62, 0x0, 0xd2, 0x0, 0x0, 0x16, 0x65}, @hopopts={0x2f, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xe4}]}], "26265726ecd32960de9896fafb49c4d1c829a6b938d4b41281b960d50b5d2d903a286d2b77b948d8de0cf8467f5898677a5e14a6ca5e8e7c3d0a0fb10ec053c178b189190c665d0aae7e9778ed5d446317761286ca956aa4a18f01c6f712a84a19e3cea96b524b52d170744c19244581a67467960e4270ba57e07df0a535952906eb6949f10182c964e43225245fe1dd7708848fabe6ebc9c44296778c0621280a8efdea35d563a266bdfe0da89a4e76e3"}}}}}, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {0x0}], 0x2) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000300)="$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") r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000802000085000000950000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.1491543s ago: executing program 0 (id=2998): r0 = socket$inet6(0xa, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "f8d0795308ab7dcd6b16d60155f0e4f75257ebcea827aa2b9a5308dae765cb33cb35badf4802defde177e36aaa76b3ce4309f1c31b0bea734d5fa2f289be35c9", 0x2a}, 0x48, 0xfffffffffffffffb) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000380)="0f35baf80c66b8c2473f8c66efbafc0cb80600ef0f072ed0649e64363e0f5b8c191366b92109000066b80000000066ba000000000f30baf80c66b8847c678866efbafc0cec66b97d0300000f320fc73e9a4a640fc7a8073a", 0x58}], 0x1, 0x53, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x2, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000008000000000000000000000000000000001010000000400000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100000000000000"], 0xfc}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0}, 0x810) 6.892473642s ago: executing program 0 (id=3003): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x81ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 6.825670279s ago: executing program 0 (id=3004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000004, 0x42031, 0xffffffffffffffff, 0x0) 6.17066674s ago: executing program 6 (id=3005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000380)={0x0, 0x2b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x701}, 0x14}}, 0x0) 6.081752422s ago: executing program 3 (id=3007): add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000044000000080003", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 6.053367615s ago: executing program 0 (id=3008): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0xa, "3c8dde86"}, @local=@item_012={0x0, 0x2, 0x5}]}}, 0x0}, 0x0) 5.832239872s ago: executing program 2 (id=3010): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000003b7030000100000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x3}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000640)=ANY=[], 0x0) 5.763746936s ago: executing program 3 (id=3011): mkdir(&(0x7f0000000580)='./file0\x00', 0x41) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) 5.66910374s ago: executing program 3 (id=3012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.319915484s ago: executing program 2 (id=3013): add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "f8d0795308ab7dcd6b16d60155f0e4f75257ebcea827aa2b9a5308dae765cb33cb35badf4802defde177e36aaa76b3ce4309f1c31b0bea734d5fa2f289be35c9", 0x2a}, 0x48, 0xfffffffffffffffb) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000380)="0f35baf80c66b8c2473f8c66efbafc0cb80600ef0f072ed0649e64363e0f5b8c191366b92109000066b80000000066ba000000000f30baf80c66b8847c678866efbafc0cec66b97d0300000f320fc73e9a4a640fc7a8073a", 0x58}], 0x1, 0x53, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x2, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000008000000000000000000000000000000001010000000400000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100000000000000"], 0xfc}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0}, 0x810) 4.442581401s ago: executing program 5 (id=3014): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x81ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 4.316418915s ago: executing program 3 (id=3015): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r5, 0x0, 0x0, 0x4}) 4.24818044s ago: executing program 5 (id=3016): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "f8d0795308ab7dcd6b16d60155f0e4f75257ebcea827aa2b9a5308dae765cb33cb35badf4802defde177e36aaa76b3ce4309f1c31b0bea734d5fa2f289be35c9", 0x2a}, 0x48, 0xfffffffffffffffb) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000380)="0f35baf80c66b8c2473f8c66efbafc0cb80600ef0f072ed0649e64363e0f5b8c191366b92109000066b80000000066ba000000000f30baf80c66b8847c678866efbafc0cec66b97d0300000f320fc73e9a4a640fc7a8073a", 0x58}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_setup(0xa1, 0x0, 0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x2, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$inet6(0xa, 0x80002, 0x0) 3.729405928s ago: executing program 2 (id=3017): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4048040) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}]}}) 2.914586775s ago: executing program 0 (id=3018): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 2.363708381s ago: executing program 3 (id=3019): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001100)={0x18, &(0x7f0000000f80)={0x40, 0x31, 0x4, "c000fded"}, 0x0, 0x0, 0x0, 0x0}) 2.355231197s ago: executing program 6 (id=3020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000004, 0x42031, 0xffffffffffffffff, 0x0) 2.245463479s ago: executing program 2 (id=3021): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0xf01, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x100, 0x0, 0x4}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0) 2.069255441s ago: executing program 5 (id=3022): mkdir(&(0x7f0000000580)='./file0\x00', 0x41) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) 2.053349304s ago: executing program 6 (id=3023): add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000044000000080003", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.04017789s ago: executing program 2 (id=3024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x68, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xbe, @link='syz0\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 2.01765494s ago: executing program 0 (id=3025): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) get_mempolicy(0x0, &(0x7f0000000380), 0x4, &(0x7f0000613000/0x4000)=nil, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.875439329s ago: executing program 5 (id=3026): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x12, r0, 0x2, &(0x7f0000000140)={0x0}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0xf) accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000)="206477bfe8c4ff82004ccc8a278d0719648f734f45e7f663fc51ffd5720344ce349d56f2be60ccc6eb88c1bcf11e51b0bcfcb094f08d320e7369a056641158e9ea75075c41768b9a965ba4f1e1b7e28b81c136ed4a872b8c5353a989f1", 0x5d, 0x8000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000040)=[{r5, 0x13a}, {r5, 0x26}], 0x2, 0x0, 0x0, 0x0) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) 1.729821419s ago: executing program 6 (id=3027): add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "f8d0795308ab7dcd6b16d60155f0e4f75257ebcea827aa2b9a5308dae765cb33cb35badf4802defde177e36aaa76b3ce4309f1c31b0bea734d5fa2f289be35c9", 0x2a}, 0x48, 0xfffffffffffffffb) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000380)="0f35baf80c66b8c2473f8c66efbafc0cb80600ef0f072ed0649e64363e0f5b8c191366b92109000066b80000000066ba000000000f30baf80c66b8847c678866efbafc0cec66b97d0300000f320fc73e9a4a640fc7a8073a", 0x58}], 0x1, 0x53, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x2, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000008000000000000000000000000000000001010000000400000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100000000000000"], 0xfc}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0}, 0x810) 1.140625483s ago: executing program 3 (id=3028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}}, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, 0x0, 0x190) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r8, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 1.071968434s ago: executing program 2 (id=3029): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r5, 0x0, 0x0, 0x4}) 540.387181ms ago: executing program 6 (id=3030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000380)={0x0, 0x2b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x701}, 0x14}}, 0x0) 528.416493ms ago: executing program 5 (id=3031): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000003b7030000100000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x3}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000640)=ANY=[], 0x0) 184.214434ms ago: executing program 6 (id=3032): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) wait4(r1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x80) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f0000000300)) 0s ago: executing program 5 (id=3033): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "f8d0795308ab7dcd6b16d60155f0e4f75257ebcea827aa2b9a5308dae765cb33cb35badf4802defde177e36aaa76b3ce4309f1c31b0bea734d5fa2f289be35c9", 0x2a}, 0x48, 0xfffffffffffffffb) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000380)="0f35baf80c66b8c2473f8c66efbafc0cb80600ef0f072ed0649e64363e0f5b8c191366b92109000066b80000000066ba000000000f30baf80c66b8847c678866efbafc0cec66b97d0300000f320fc73e9a4a640fc7a8073a", 0x58}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_setup(0xa1, 0x0, 0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x2, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$inet6(0xa, 0x80002, 0x0) kernel console output (not intermixed with test programs): d USB device number 29 using dummy_hcd [ 675.670352][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 675.729666][ T5865] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 675.745556][ T5865] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 675.780267][ T5865] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 675.810761][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 675.855965][ T5865] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 675.884654][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 675.940256][ T5865] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 676.017999][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.055832][ T5865] usb 5-1: config 0 descriptor?? [ 676.321979][ T5865] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 677.318217][ T5865] usb 5-1: USB disconnect, device number 29 [ 677.331040][T10496] veth0_vlan: entered promiscuous mode [ 677.399056][T10496] veth1_vlan: entered promiscuous mode [ 677.405521][ T5865] usblp0: removed [ 677.550682][T10496] veth0_macvtap: entered promiscuous mode [ 677.613752][T10496] veth1_macvtap: entered promiscuous mode [ 677.719494][T10496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.918260][T10496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.948352][ T7036] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.062092][ T7036] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.139703][ T7036] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.347744][ T7036] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.041885][ T7033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.087264][ T7033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.283180][ T7036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.324279][ T7036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.617790][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 679.837285][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 679.860261][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 679.945034][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1154'. [ 680.453055][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 680.462289][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 680.471370][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 680.481192][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 680.490989][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 680.504108][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 680.513380][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.539168][ T9] usb 4-1: config 0 descriptor?? [ 681.605431][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 681.855554][ T9] usb 4-1: USB disconnect, device number 26 [ 681.871072][ T9] usblp0: removed [ 682.063189][T10923] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1157'. [ 682.075941][T10922] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1157'. [ 682.654159][T10934] netlink: 'syz.0.1159': attribute type 3 has an invalid length. [ 682.663711][T10934] netlink: 'syz.0.1159': attribute type 3 has an invalid length. [ 682.671831][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'. [ 685.889911][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.896352][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.030240][T10965] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1164'. [ 686.054950][T10964] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1164'. [ 688.954125][T10983] bridge6: entered allmulticast mode [ 689.464907][T10995] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1171'. [ 690.673868][T11002] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1172'. [ 690.689958][T10997] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1172'. [ 692.085513][T11023] overlayfs: failed to resolve './file1': -2 [ 698.780408][T11101] netlink: 'syz.3.1192': attribute type 3 has an invalid length. [ 698.790617][T11101] netlink: 'syz.3.1192': attribute type 3 has an invalid length. [ 698.799172][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1192'. [ 699.901732][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 700.503487][T11109] /dev/nullb0: Can't open blockdev [ 706.404339][T11170] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1207'. [ 706.417266][T11169] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1207'. [ 712.629856][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1217'. [ 713.426595][T11235] netlink: 'syz.2.1219': attribute type 3 has an invalid length. [ 713.444019][T11235] netlink: 'syz.2.1219': attribute type 3 has an invalid length. [ 713.454728][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 713.734579][T11235] usb usb1: check_ctrlrecip: process 11235 (syz.2.1219) requesting ep 01 but needs 81 [ 716.070634][ T30] audit: type=1107 audit(1754422940.764:203): pid=11255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯' [ 716.535692][T11275] bridge6: left allmulticast mode [ 717.309459][T11280] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 718.597463][ T5996] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 718.781253][ T5996] usb 5-1: Using ep0 maxpacket: 32 [ 718.838285][ T5996] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 718.884689][ T5996] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 718.938553][ T5996] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 718.953500][ T5996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 718.971874][ T5996] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 718.985499][ T5996] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 719.437064][ T5996] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 719.503626][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.536633][ T5996] usb 5-1: config 0 descriptor?? [ 719.853725][ T5996] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 720.169010][ T5996] usb 5-1: USB disconnect, device number 30 [ 720.193280][ T5996] usblp0: removed [ 720.212700][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 722.103257][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 722.379422][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.440713][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 722.465057][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.103020][ T9] usb 3-1: config 0 descriptor?? [ 723.575508][T11339] tipc: Enabling of bearer rejected, failed to enable media [ 725.025066][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 725.084022][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 725.129200][ T9] usb 3-1: USB disconnect, device number 24 [ 729.761230][T11384] bridge7: entered allmulticast mode [ 730.603122][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 731.336502][T11400] tipc: Enabling of bearer rejected, failed to enable media [ 741.913396][T11485] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 743.754336][T11487] netlink: 'syz.0.1271': attribute type 10 has an invalid length. [ 743.762694][T11487] veth0_vlan: left promiscuous mode [ 743.769263][T11487] veth0_vlan: entered promiscuous mode [ 743.776466][T11487] team0: Device veth0_vlan failed to register rx_handler [ 743.830107][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout [ 743.886465][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 743.942524][T11519] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1276'. [ 743.957233][T11512] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1276'. [ 744.071507][T11521] netlink: 'syz.3.1278': attribute type 3 has an invalid length. [ 744.080028][T11521] netlink: 'syz.3.1278': attribute type 3 has an invalid length. [ 744.088224][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1278'. [ 744.623357][T11523] usb usb1: check_ctrlrecip: process 11523 (syz.3.1278) requesting ep 01 but needs 81 [ 747.340539][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.346990][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.387259][T11578] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 749.509231][T11584] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1289'. [ 749.520750][T11583] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1289'. [ 752.376854][T11611] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1291'. [ 752.434398][T11603] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1291'. [ 752.478585][T11613] fuse: Unknown parameter 'default_p' [ 756.111192][T11654] tipc: Enabling of bearer rejected, failed to enable media [ 756.842394][ T5183] Bluetooth: hci2: Unable to find connection with handle 0x00c8 [ 758.216349][ T30] audit: type=1107 audit(1754422983.114:204): pid=11670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯' [ 758.957230][ T5996] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 759.157282][ T5996] usb 4-1: Using ep0 maxpacket: 32 [ 759.167635][ T5996] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 759.186731][ T5996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.233303][ T5996] usb 4-1: config 0 descriptor?? [ 759.266934][ T5996] gspca_main: sq930x-2.14.0 probing 041e:403c [ 759.308393][T11696] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.316373][T11696] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.503082][T11696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.518078][T11696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.626466][ T5996] gspca_sq930x: reg_r 001f failed -32 [ 759.635077][ T5996] sq930x 4-1:0.0: probe with driver sq930x failed with error -32 [ 759.672115][ T5996] usb 4-1: USB disconnect, device number 27 [ 759.808569][ T6465] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.857494][ T6465] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.934941][T11706] bridge5: entered allmulticast mode [ 759.965539][ T6465] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.992767][ T6465] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.839489][T11746] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1319'. [ 764.887606][ T5183] Bluetooth: hci0: command 0x0406 tx timeout [ 769.052467][T11785] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 769.059315][T11785] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 769.069270][T11785] vhci_hcd vhci_hcd.0: Device attached [ 769.687928][T11794] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 769.752918][T11786] vhci_hcd: connection closed [ 769.761872][ T7029] vhci_hcd: stop threads [ 769.792443][ T7029] vhci_hcd: release socket [ 769.823523][ T8631] vhci_hcd: vhci_device speed not set [ 769.899774][ T8631] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 770.049730][ T7029] vhci_hcd: disconnect device [ 770.060857][ T8631] usb 37-1: enqueue for inactive port 0 [ 770.310373][ T8631] vhci_hcd: vhci_device speed not set [ 771.692950][ T30] audit: type=1326 audit(1754422996.584:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.2.1335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba6b98eb69 code=0x0 [ 773.133713][T11825] netlink: 'syz.3.1339': attribute type 3 has an invalid length. [ 773.142395][T11825] netlink: 'syz.3.1339': attribute type 3 has an invalid length. [ 773.150458][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 773.573221][T11828] usb usb1: check_ctrlrecip: process 11828 (syz.3.1339) requesting ep 01 but needs 81 [ 773.910010][ T8631] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 774.127585][ T8631] usb 3-1: Using ep0 maxpacket: 32 [ 774.237064][ T8631] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.252097][ T8631] usb 3-1: config 0 has no interfaces? [ 774.287415][ T8631] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 774.324327][ T8631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.468065][ T8631] usb 3-1: config 0 descriptor?? [ 774.479610][T11832] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1336'. [ 774.624246][T11842] netlink: 'syz.5.1341': attribute type 3 has an invalid length. [ 774.633031][T11842] netlink: 'syz.5.1341': attribute type 3 has an invalid length. [ 774.641084][T11842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1341'. [ 775.970568][ T5183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 775.980935][ T5183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 775.990190][ T5183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 775.999485][ T5183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 776.008569][ T5183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 776.359750][ T5934] usb 3-1: USB disconnect, device number 25 [ 777.429099][ T30] audit: type=1107 audit(1754423002.334:206): pid=11858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯' [ 777.722990][T11853] chnl_net:caif_netlink_parms(): no params data found [ 778.099620][ T5183] Bluetooth: hci5: command tx timeout [ 778.898243][T11853] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.905476][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.914519][T11853] bridge_slave_0: entered allmulticast mode [ 778.991348][T11853] bridge_slave_0: entered promiscuous mode [ 780.017439][T11853] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.024608][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.208010][ T5183] Bluetooth: hci5: command tx timeout [ 780.208315][T11853] bridge_slave_1: entered allmulticast mode [ 780.442674][T11853] bridge_slave_1: entered promiscuous mode [ 780.605005][T11892] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 780.614575][T11892] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 780.624378][T11892] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 780.686080][T11894] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1350'. [ 780.727997][T11853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.753095][T11853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.569728][T11906] netlink: 'syz.5.1353': attribute type 3 has an invalid length. [ 781.578066][T11906] netlink: 'syz.5.1353': attribute type 3 has an invalid length. [ 781.585914][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1353'. [ 781.649385][ T7029] bridge_slave_1: left allmulticast mode [ 781.897656][ T7029] bridge_slave_1: left promiscuous mode [ 781.903815][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.921868][ T7029] bridge_slave_0: left allmulticast mode [ 781.933405][ T7029] bridge_slave_0: left promiscuous mode [ 781.940107][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.277211][ T5183] Bluetooth: hci5: command tx timeout [ 784.337877][ T5183] Bluetooth: hci5: command tx timeout [ 784.451739][ T30] audit: type=1107 audit(1754423009.364:207): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯' [ 786.164192][ T7029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.375944][ T7029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.463654][ T7029] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 786.533565][ T7029] bond0 (unregistering): Released all slaves [ 786.592001][T11853] team0: Port device team_slave_0 added [ 786.622869][T11942] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1362'. [ 786.644221][T11853] team0: Port device team_slave_1 added [ 787.020682][ T7029] tipc: Left network mode [ 787.021694][T11853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.061077][T11853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.092550][T11853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.104333][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1368'. [ 787.115575][T11853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.122667][T11853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.148614][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.155131][T11853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.637838][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1368'. [ 788.061447][ T6102] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.645670][ T6102] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.659675][ T6102] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.668471][ T6102] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.572953][T11853] hsr_slave_0: entered promiscuous mode [ 789.588581][T11853] hsr_slave_1: entered promiscuous mode [ 789.595050][T11853] debugfs: 'hsr0' already exists in 'hsr' [ 789.637004][T11853] Cannot create hsr debugfs directory [ 790.440961][ T7029] hsr_slave_0: left promiscuous mode [ 790.792012][ T7029] hsr_slave_1: left promiscuous mode [ 790.806090][ T7029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.468809][T12037] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 799.843152][ T7029] team0 (unregistering): Port device team_slave_1 removed [ 799.986012][ T7029] team0 (unregistering): Port device team_slave_0 removed [ 803.427727][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1399'. [ 804.256120][ T30] audit: type=1326 audit(1754423029.164:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12096 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 804.290392][ T30] audit: type=1326 audit(1754423029.164:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12096 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 804.317305][ T30] audit: type=1326 audit(1754423029.174:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12096 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 804.340320][ T30] audit: type=1326 audit(1754423029.174:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12096 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 804.360907][T12088] vlan2: entered promiscuous mode [ 804.368530][ T30] audit: type=1326 audit(1754423029.174:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12096 comm="syz.0.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 804.427671][T12088] vlan2: entered allmulticast mode [ 804.432845][T12088] hsr_slave_1: entered allmulticast mode [ 808.743061][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.749596][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.237952][T12122] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 809.253571][T12122] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 809.277626][T12122] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 809.358870][T12122] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 809.596695][T12122] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 809.706496][T12122] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 809.796440][T11853] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 809.798319][T12122] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 809.827687][T11853] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 809.839209][T11853] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 809.846279][T12122] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 809.857356][T11853] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 809.866532][T12122] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 809.937766][ T5866] Bluetooth: hci1: command 0x1003 tx timeout [ 809.938704][ T5183] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 810.974881][T12147] Can't find ip_set type hash:ip,po [ 811.004322][T12156] vxcan1: entered allmulticast mode [ 811.073323][ T30] audit: type=1326 audit(1754423035.974:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4378eb69 code=0x7ffc0000 [ 811.154666][T11853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.180423][ T30] audit: type=1326 audit(1754423035.974:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4378eb69 code=0x7ffc0000 [ 811.221651][ T30] audit: type=1326 audit(1754423036.034:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c4378eb69 code=0x7ffc0000 [ 811.249043][T11853] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.268924][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.276191][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.277286][ T30] audit: type=1326 audit(1754423036.034:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4378eb69 code=0x7ffc0000 [ 811.312326][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout [ 811.312358][ T5866] Bluetooth: hci3: command 0x0c1a tx timeout [ 811.318725][ T5183] Bluetooth: hci2: command 0x0c1a tx timeout [ 811.338722][ T30] audit: type=1326 audit(1754423036.034:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4378eb69 code=0x7ffc0000 [ 811.372916][ T30] audit: type=1326 audit(1754423036.044:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2c4378eb69 code=0x7ffc0000 [ 811.389975][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.402678][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.423892][T12168] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1420'. [ 811.445088][ T30] audit: type=1326 audit(1754423036.044:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4378eb69 code=0x7ffc0000 [ 811.519922][ T30] audit: type=1326 audit(1754423036.044:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4378eb69 code=0x7ffc0000 [ 811.577899][ T30] audit: type=1326 audit(1754423036.044:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2c4378eb69 code=0x7ffc0000 [ 811.874114][T12165] Bluetooth: hci5: command 0x0c1a tx timeout [ 812.068260][T12162] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 813.973060][T12165] Bluetooth: hci4: command 0x0c1a tx timeout [ 813.979206][T12165] Bluetooth: hci5: command 0x0c1a tx timeout [ 814.389180][T11853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.939642][ T5869] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 816.017300][ T5869] Bluetooth: hci5: command 0x0c1a tx timeout [ 816.065343][T11853] veth0_vlan: entered promiscuous mode [ 816.340331][T11853] veth1_vlan: entered promiscuous mode [ 816.875079][T11853] veth0_macvtap: entered promiscuous mode [ 817.349341][T11853] veth1_macvtap: entered promiscuous mode [ 817.473345][T11853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.636662][T11853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.666628][ T7029] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.702679][ T7029] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.768536][ T7029] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.786672][T12263] syzkaller1: entered promiscuous mode [ 817.797398][T12263] syzkaller1: entered allmulticast mode [ 817.809270][ T7029] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.809512][ T7033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.870123][ T7033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.925839][ T7033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.946487][ T7033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.093145][T12284] syz.0.1447 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 823.624959][T12321] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 823.634542][T12321] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 823.644411][T12321] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 826.987407][ T5869] Bluetooth: hci5: unexpected event for opcode 0x2024 [ 827.517402][ T8631] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 829.141401][ T8631] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 829.157164][ T8631] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 829.237216][ T8631] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 829.289753][ T8631] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 829.327048][ T8631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 829.357897][ T8631] usb 4-1: SerialNumber: syz [ 829.564976][ T8631] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 829.593683][ T8631] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 829.603261][ T8631] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 830.314283][ T8344] usb 4-1: USB disconnect, device number 28 [ 830.487327][ T5996] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 831.653586][ T5996] usb 7-1: Using ep0 maxpacket: 32 [ 831.698908][ T5996] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 831.902867][T12408] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 831.924620][ T5996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 832.102840][ T5996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 832.160467][ T5996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 833.161900][ T5996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 833.208236][ T5996] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 833.414740][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.453099][ T5996] usb 7-1: Product: syz [ 833.481599][ T5996] usb 7-1: Manufacturer: syz [ 833.517208][ T5996] usb 7-1: SerialNumber: syz [ 833.575580][ T5996] usb 7-1: config 0 descriptor?? [ 833.607343][ T5996] usb 7-1: can't set config #0, error -71 [ 833.692343][ T5996] usb 7-1: USB disconnect, device number 2 [ 834.997725][ T5996] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 835.718637][ T5996] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 835.794258][ T5996] usb 7-1: config 0 has no interface number 0 [ 835.897386][ T5996] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 835.945278][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.005947][ T5996] usb 7-1: Product: syz [ 836.045743][ T5996] usb 7-1: Manufacturer: syz [ 836.092974][ T5996] usb 7-1: SerialNumber: syz [ 837.106299][ T5996] usb 7-1: config 0 descriptor?? [ 838.034275][ T5996] usb 7-1: can't set config #0, error -71 [ 838.062481][ T5996] usb 7-1: USB disconnect, device number 3 [ 838.200112][T12480] block device autoloading is deprecated and will be removed. [ 838.209695][T12472] md: md2 stopped. [ 839.707233][T12165] Bluetooth: hci5: command 0x0c1a tx timeout [ 840.284233][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1497'. [ 841.225409][T12536] netlink: 'syz.3.1506': attribute type 10 has an invalid length. [ 841.265393][T12536] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 843.026814][T12563] 9pnet_fd: Insufficient options for proto=fd [ 844.270819][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1515'. [ 845.253095][T12583] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 845.308789][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 846.779226][T12602] tipc: Enabling of bearer rejected, failed to enable media [ 847.307246][ T5996] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 847.490468][ T5996] usb 3-1: Using ep0 maxpacket: 16 [ 847.511517][ T5996] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 847.549916][ T5996] usb 3-1: config 0 has no interface number 0 [ 847.558994][ T5996] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.977277][T12621] syz.5.1526: attempt to access beyond end of device [ 847.977277][T12621] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 847.990758][T12621] efs: cannot read volume header [ 848.442756][ T5996] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.034730][ T5996] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 849.044613][ T5996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.064700][ T5996] usb 3-1: config 0 descriptor?? [ 849.071340][T12625] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1528'. [ 850.242702][ T5996] usbhid 3-1:0.1: can't add hid device: -71 [ 850.248783][ T5996] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 850.259511][ T5996] usb 3-1: USB disconnect, device number 26 [ 855.874017][T12674] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1543'. [ 858.281045][T12721] bond0: (slave batadv0): Releasing backup interface [ 858.303524][T12721] bridge_slave_0: left allmulticast mode [ 858.376634][T12727] netlink: 'syz.0.1554': attribute type 10 has an invalid length. [ 858.378403][T12721] bridge_slave_0: left promiscuous mode [ 858.493305][T12721] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.743750][T12721] bridge_slave_1: left allmulticast mode [ 858.769651][T12721] bridge_slave_1: left promiscuous mode [ 858.804126][T12721] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.873756][T12721] bond0: (slave bond_slave_0): Releasing backup interface [ 858.918856][T12721] bond0: (slave bond_slave_1): Releasing backup interface [ 859.055838][T12721] team0: Port device team_slave_0 removed [ 859.108985][T12721] team0: Port device team_slave_1 removed [ 859.429197][T12721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.504522][T12727] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 865.695839][T12817] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 865.702395][T12817] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 865.949602][T12817] vhci_hcd vhci_hcd.0: Device attached [ 866.137359][ T9] vhci_hcd: vhci_device speed not set [ 866.206061][T12835] netlink: 'syz.0.1583': attribute type 10 has an invalid length. [ 866.207945][ T9] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 866.242695][T12835] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 866.317229][ T8631] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 866.660430][ T8631] usb 6-1: config 0 has no interfaces? [ 866.665993][ T8631] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 866.675591][ T8631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.686961][ T8631] usb 6-1: config 0 descriptor?? [ 867.540147][T12820] vhci_hcd: unknown pdu 2 [ 867.547944][ T7046] vhci_hcd: stop threads [ 867.552842][ T7046] vhci_hcd: release socket [ 867.573145][ T7046] vhci_hcd: disconnect device [ 867.573924][ T8631] usb 6-1: USB disconnect, device number 2 [ 867.649913][ T9] vhci_hcd: vhci_device speed not set [ 868.092582][T12861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1591'. [ 868.102268][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 868.850594][T12874] ip6gretap1: entered allmulticast mode [ 868.864643][T12874] bridge0: port 1(ip6gretap1) entered blocking state [ 868.872323][T12874] bridge0: port 1(ip6gretap1) entered disabled state [ 868.896819][T12874] ip6gretap1: entered promiscuous mode [ 868.923665][T12874] bridge0: port 1(ip6gretap1) entered blocking state [ 868.930822][T12874] bridge0: port 1(ip6gretap1) entered forwarding state [ 870.312351][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.336214][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.369344][T12887] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1599'. [ 874.508133][T12953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1612'. [ 874.522421][T12953] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 876.417316][ T5869] Bluetooth: hci3: command 0x0c1a tx timeout [ 877.152985][T12991] 9pnet_fd: Insufficient options for proto=fd [ 878.990269][ T30] audit: type=1326 audit(1754423103.894:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6b98eb69 code=0x7ffc0000 [ 879.052932][ T30] audit: type=1326 audit(1754423103.894:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6b98eb69 code=0x7ffc0000 [ 879.107194][ T30] audit: type=1326 audit(1754423103.904:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fba6b98eb69 code=0x7ffc0000 [ 879.141021][T13010] overlayfs: failed to resolve './file1': -2 [ 879.149989][ T30] audit: type=1326 audit(1754423103.904:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba6b98eba3 code=0x7ffc0000 [ 879.174404][ T30] audit: type=1326 audit(1754423103.904:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba6b98d61f code=0x7ffc0000 [ 879.263814][ T30] audit: type=1326 audit(1754423103.904:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fba6b98ebf7 code=0x7ffc0000 [ 879.303111][ T30] audit: type=1326 audit(1754423103.904:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba6b98d4d0 code=0x7ffc0000 [ 879.326366][ T30] audit: type=1326 audit(1754423103.904:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fba6b98d7ca code=0x7ffc0000 [ 879.364554][ T30] audit: type=1326 audit(1754423103.904:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6b98eb69 code=0x7ffc0000 [ 879.390983][ T30] audit: type=1326 audit(1754423103.914:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fba6b98eb69 code=0x7ffc0000 [ 879.797742][ T5869] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 880.413697][T13043] 9pnet_fd: Insufficient options for proto=fd [ 880.665685][T13049] syz.2.1646: attempt to access beyond end of device [ 880.665685][T13049] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 880.679042][T13049] efs: cannot read volume header [ 883.764561][T13094] 9pnet_fd: Insufficient options for proto=fd [ 884.067618][T13100] syz.6.1660: attempt to access beyond end of device [ 884.067618][T13100] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 884.080937][T13100] efs: cannot read volume header [ 887.814344][T13055] lo: entered allmulticast mode [ 887.820837][T13055] lo: left allmulticast mode [ 887.826786][T13056] lo: entered allmulticast mode [ 887.877227][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 887.998832][T13130] gfs2: gfs2 mount does not exist [ 888.052767][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.087632][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.117201][ T9] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 888.146933][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.188185][ T9] usb 3-1: config 0 descriptor?? [ 888.589802][T13155] 9pnet_fd: Insufficient options for proto=fd [ 889.441359][ T9] stadia 0003:18D1:9400.0010: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 889.614140][ T9] stadia 0003:18D1:9400.0010: no inputs found [ 889.784870][ T9] stadia 0003:18D1:9400.0010: force feedback init failed [ 889.814215][ T9] usb 3-1: USB disconnect, device number 27 [ 890.535624][T13163] fido_id[13163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 890.582953][T12165] Bluetooth: hci1: command 0x1003 tx timeout [ 890.594450][ T5869] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 891.057986][ T8344] libceph: connect (1)[c::]:6789 error -101 [ 891.117310][ T8344] libceph: mon0 (1)[c::]:6789 connect error [ 891.166987][ T8344] libceph: connect (1)[c::]:6789 error -101 [ 891.192767][ T8344] libceph: mon0 (1)[c::]:6789 connect error [ 891.480854][ T8344] libceph: connect (1)[c::]:6789 error -101 [ 891.498799][ T8344] libceph: mon0 (1)[c::]:6789 connect error [ 891.806843][T13197] ceph: No mds server is up or the cluster is laggy [ 892.640169][T13223] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 892.987328][ T5996] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 893.016719][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 893.016738][ T30] audit: type=1326 audit(1754423117.904:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1f78eb69 code=0x7ffc0000 [ 893.166353][ T30] audit: type=1326 audit(1754423117.904:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1f78eb69 code=0x7ffc0000 [ 893.230779][ T5996] usb 6-1: Using ep0 maxpacket: 16 [ 893.465029][ T5996] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 893.590208][ T30] audit: type=1326 audit(1754423117.924:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f5c1f78eb69 code=0x7ffc0000 [ 893.651015][ T5996] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.666854][ T30] audit: type=1326 audit(1754423117.924:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1f78eb69 code=0x7ffc0000 [ 893.692957][ T5996] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 893.722876][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.757179][ T5996] usb 6-1: Product: syz [ 893.761483][ T5996] usb 6-1: Manufacturer: syz [ 893.766084][ T5996] usb 6-1: SerialNumber: syz [ 894.020559][ T5996] usb 6-1: 0:2 : does not exist [ 894.050948][ T5996] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 894.957375][ T5996] usb 6-1: USB disconnect, device number 3 [ 895.046047][T13120] udevd[13120]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 895.538652][T13322] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1729'. [ 895.683860][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 899.642124][ T30] audit: type=1326 audit(1754423124.544:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7fc00000 [ 899.696864][ T30] audit: type=1326 audit(1754423124.544:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f889dd8eb69 code=0x7fc00000 [ 899.724742][ T30] audit: type=1326 audit(1754423124.544:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7fc00000 [ 899.748881][ T30] audit: type=1326 audit(1754423124.544:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7fc00000 [ 901.642510][T13417] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1758'. [ 901.712877][T13419] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1759'. [ 902.138454][ T5996] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 902.299261][ T5996] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.320788][ T5996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 902.331496][ T5996] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 902.354496][ T5996] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 902.364035][ T5996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.384666][ T5996] usb 3-1: config 0 descriptor?? [ 902.647903][ T5996] usb 3-1: USB disconnect, device number 28 [ 902.743686][T13445] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1772'. [ 903.036146][T13417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.049222][T13417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.086193][T13447] batman_adv: batadv0: Adding interface: dummy0 [ 903.097311][T13447] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.157172][T13447] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 904.269919][T13479] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 905.068600][ T5996] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 905.657287][ T5996] usb 6-1: Using ep0 maxpacket: 16 [ 905.673377][ T5996] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.704349][ T5996] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.263685][ T5996] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 906.334659][ T5996] usb 6-1: config 0 interface 0 has no altsetting 0 [ 906.354930][ T5996] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 906.385294][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.422235][ T5996] usb 6-1: config 0 descriptor?? [ 906.696950][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 906.740151][T13535] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1800'. [ 906.815845][T13537] overlayfs: failed to clone upperpath [ 906.850774][T13537] overlayfs: failed to clone upperpath [ 907.059520][ T5996] usb 6-1: USB disconnect, device number 4 [ 907.075771][T13545] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1805'. [ 908.542214][T13589] bpq0: entered allmulticast mode [ 909.437277][ T5996] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 909.600237][ T5996] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 909.627211][ T5996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.646938][ T5996] usb 4-1: config 0 descriptor?? [ 909.927467][ T5865] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 910.128302][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 910.236003][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.364336][ T5865] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 910.490240][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.500659][ T5996] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 910.625570][ T5865] usb 3-1: config 0 descriptor?? [ 910.801844][ T5865] hub 3-1:0.0: USB hub found [ 910.806925][ T5996] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 910.883341][ T5996] asix 4-1:0.0: probe with driver asix failed with error -71 [ 910.921369][ T5996] usb 4-1: USB disconnect, device number 29 [ 910.944966][ T5865] hub 3-1:0.0: 1 port detected [ 911.295161][ T5865] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 911.323341][ T5865] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 911.939742][ T5865] usbhid 3-1:0.0: can't add hid device: -71 [ 912.029978][ T5865] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 912.115880][ T5865] usb 3-1: USB disconnect, device number 29 [ 913.335811][T13665] syz.6.1850: attempt to access beyond end of device [ 913.335811][T13665] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 913.348885][T13665] efs: cannot read volume header [ 920.887391][ T6501] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 921.150906][ T6501] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 921.269917][ T6501] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.311528][ T6501] usb 6-1: config 0 interface 0 has no altsetting 0 [ 921.346925][ T6501] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 921.400182][ T6501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.441598][ T6501] usb 6-1: config 0 descriptor?? [ 922.215465][ T6501] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 922.772348][ T6501] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 922.909328][ T6501] hid-steam 0003:28DE:1102.0012: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 922.979554][ T6501] hid-steam 0003:28DE:1102.0012: Steam Controller 'XXXXXXXXXX' connected [ 923.535381][ T6501] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.0012/input/input20 [ 923.755425][ T6501] hid-steam 0003:28DE:1102.0013: unknown main item tag 0x0 [ 925.223460][ T6501] hid-steam 0003:28DE:1102.0013: unknown main item tag 0x0 [ 925.279069][ T6501] hid-steam 0003:28DE:1102.0013: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 925.613197][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1900'. [ 925.738861][ T6501] usb 6-1: USB disconnect, device number 5 [ 926.603232][ T6501] hid-steam 0003:28DE:1102.0012: Steam Controller 'XXXXXXXXXX' disconnected [ 926.653260][T13827] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1901'. [ 926.843952][ T5869] Bluetooth: hci0: unexpected cc 0x1405 length: 64 > 4 [ 926.851314][ T5869] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 927.122591][ T5869] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 927.391868][T13847] Bluetooth: hci0: unsupported parameter 256 [ 927.401493][T13847] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 927.582736][T13854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 927.801456][T13852] bond0: entered promiscuous mode [ 927.826990][T13852] bond0: entered allmulticast mode [ 927.917215][ T5865] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 928.090467][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.111447][ T5865] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 928.127636][ T6501] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 928.145757][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.186659][ T5865] usb 3-1: config 0 descriptor?? [ 928.423669][ T6501] usb 6-1: Using ep0 maxpacket: 8 [ 928.426101][ T5865] usbhid 3-1:0.0: can't add hid device: -71 [ 928.436043][ T6501] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 928.460966][ T6501] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 928.465884][ T5865] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 928.473244][ T6501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.495725][ T6501] usb 6-1: config 0 descriptor?? [ 928.521272][ T5865] usb 3-1: USB disconnect, device number 30 [ 928.720719][ T6501] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 928.942230][ T8631] usb 6-1: USB disconnect, device number 6 [ 928.952181][ T5865] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 929.121923][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 929.271150][ T5865] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 929.280570][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.295851][ T5865] usb 3-1: config 0 descriptor?? [ 929.319146][ T5865] hub 3-1:0.0: USB hub found [ 929.537917][ T5865] hub 3-1:0.0: 1 port detected [ 930.429851][ T5865] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 930.443758][ T5865] usb 3-1: USB disconnect, device number 31 [ 930.584307][ T6501] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 930.834009][ T6501] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 930.861565][ T6501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.891514][ T6501] usb 4-1: Product: syz [ 930.905185][ T6501] usb 4-1: Manufacturer: syz [ 930.921877][ T6501] usb 4-1: SerialNumber: syz [ 930.943040][ T6501] usb 4-1: config 0 descriptor?? [ 931.140002][ T5869] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 931.150135][ T5869] Bluetooth: hci2: Injecting HCI hardware error event [ 931.160375][ T5869] Bluetooth: hci2: hardware error 0x00 [ 931.173130][ T6501] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 931.695219][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.701979][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.078896][T12165] Bluetooth: hci3: unexpected cc 0x1405 length: 64 > 4 [ 932.087446][T12165] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 933.187489][ T6501] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 933.217250][ T5869] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 933.231788][ T6501] usb 4-1: USB disconnect, device number 30 [ 933.754331][T14024] overlayfs: failed to clone upperpath [ 933.946312][ T8631] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 933.992663][T14031] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1973'. [ 934.127199][ T8631] usb 3-1: Using ep0 maxpacket: 16 [ 934.144036][ T8631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.166982][ T8631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.180075][ T8631] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 934.193648][ T8631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.205831][ T8631] usb 3-1: config 0 descriptor?? [ 935.034938][ T8631] ntrig 0003:1B96:0008.0014: unbalanced delimiter at end of report description [ 935.114957][ T8631] ntrig 0003:1B96:0008.0014: parse failed [ 935.148120][ T8631] ntrig 0003:1B96:0008.0014: probe with driver ntrig failed with error -22 [ 935.211059][ T8631] usb 3-1: USB disconnect, device number 32 [ 936.103449][ T5869] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 936.113996][ T5869] Bluetooth: hci3: Injecting HCI hardware error event [ 936.126122][T12165] Bluetooth: hci3: hardware error 0x00 [ 936.325309][T14062] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1985'. [ 936.471575][T14070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1991'. [ 936.707404][ T8631] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 936.906650][ T8631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.236144][ T8631] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 937.260131][T14066] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 937.270712][ T8631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.291444][ T8631] usb 4-1: config 0 descriptor?? [ 937.354911][T14094] overlayfs: failed to clone upperpath [ 937.385545][T14097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2003'. [ 937.539043][ T8631] usbhid 4-1:0.0: can't add hid device: -71 [ 937.572606][ T8631] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 937.628663][ T8631] usb 4-1: USB disconnect, device number 31 [ 937.860526][T14114] netlink: 730 bytes leftover after parsing attributes in process `syz.2.2010'. [ 938.181652][T12165] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 938.664189][ T8631] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 939.282475][ T8631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 939.294107][ T8631] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 939.334511][ T8631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.342855][T14129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.365884][ T8631] usb 4-1: config 0 descriptor?? [ 939.388471][ T8631] hub 4-1:0.0: USB hub found [ 939.422099][T14129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.655326][ T8631] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 939.680894][ T8631] usbhid 4-1:0.0: can't add hid device: -71 [ 939.686985][ T8631] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 939.723675][ T8631] usb 4-1: USB disconnect, device number 32 [ 943.090397][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2031'. [ 944.205805][T14129] syz.2.2016 (14129): drop_caches: 2 [ 948.411246][T14265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 948.875110][T14282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2069'. [ 950.657038][T12165] Bluetooth: hci5: unexpected cc 0x1405 length: 64 > 4 [ 950.665597][T12165] Bluetooth: hci5: unexpected event for opcode 0x1405 [ 951.006164][T12165] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 951.023139][ T5865] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 951.939178][ T5865] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 951.956612][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.976833][ T5865] usb 4-1: Product: syz [ 952.109584][ T5865] usb 4-1: Manufacturer: syz [ 952.114611][ T5865] usb 4-1: SerialNumber: syz [ 952.126854][ T5865] usb 4-1: config 0 descriptor?? [ 952.507272][ T5865] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 952.887708][T14346] netlink: 'syz.6.2093': attribute type 11 has an invalid length. [ 952.895618][T14346] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2093'. [ 954.227647][T12165] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 954.629451][ T5865] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 954.654504][ T5865] usb 4-1: USB disconnect, device number 33 [ 954.738063][T12165] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 954.746728][T12165] Bluetooth: hci5: Injecting HCI hardware error event [ 954.756334][ T5869] Bluetooth: hci5: hardware error 0x00 [ 955.075685][T14385] netlink: 'syz.3.2103': attribute type 1 has an invalid length. [ 955.178089][T14385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 955.226495][T14389] bond1: (slave ip6erspan0): making interface the new active one [ 955.240493][T14389] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 955.247216][ T6501] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 955.827164][ T6501] usb 3-1: Using ep0 maxpacket: 32 [ 956.224825][ T6501] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 956.237177][ T6501] usb 3-1: config 0 has no interface number 0 [ 956.255517][ T6501] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.39 [ 956.275121][ T6501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.295383][ T6501] usb 3-1: Product: syz [ 956.299797][ T6501] usb 3-1: Manufacturer: syz [ 956.304413][ T6501] usb 3-1: SerialNumber: syz [ 956.324914][ T6501] usb 3-1: config 0 descriptor?? [ 956.350393][ T6501] smsc95xx v2.0.0 [ 956.491211][T14409] overlayfs: failed to resolve './file1': -2 [ 956.754628][ T6501] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 956.772204][ T6501] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 956.817187][ T5869] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 956.899632][ T5865] IPVS: starting estimator thread 0... [ 956.906724][T14417] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 956.997313][T14419] IPVS: using max 29 ests per chain, 69600 per kthread [ 957.056658][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'. [ 957.080381][T14424] batman_adv: batadv0: Removing interface: dummy0 [ 957.254234][ T6501] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 957.273504][ T6501] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 957.289939][ T6501] usb 3-1: USB disconnect, device number 33 [ 959.342799][T14449] blktrace: Concurrent blktraces are not allowed on sg0 [ 960.038341][T14461] fuse: Bad value for 'fd' [ 960.040696][T14458] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 961.897444][T14510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2136'. [ 963.932118][T14542] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 964.707945][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2157'. [ 965.088885][ T5934] IPVS: starting estimator thread 0... [ 965.088934][T14581] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 965.178864][T14583] IPVS: using max 32 ests per chain, 76800 per kthread [ 965.276995][T14591] bpq0: left allmulticast mode [ 966.219766][T14601] No control pipe specified [ 966.864584][T14607] delete_channel: no stack [ 967.074092][T14621] bpq0: entered allmulticast mode [ 967.239276][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2178'. [ 967.734012][T14641] No control pipe specified [ 968.197409][ T8344] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 968.448519][ T8344] usb 4-1: Using ep0 maxpacket: 16 [ 968.578004][ T8344] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 968.761721][ T8344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 968.901397][T14664] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 968.927695][ T8344] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 968.939673][ T8344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.971713][ T8344] usb 4-1: Product: syz [ 968.980827][ T8344] usb 4-1: Manufacturer: syz [ 968.996148][ T8344] usb 4-1: SerialNumber: syz [ 969.003622][T14674] No control pipe specified [ 969.018832][ T8344] usb 4-1: config 0 descriptor?? [ 969.033840][ T8344] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 969.045582][ T8344] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 969.786955][T14662] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 970.015898][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'. [ 970.155255][T14694] 9pnet_fd: Insufficient options for proto=fd [ 970.206690][ T8344] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 970.220005][ T8344] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 970.880143][ T8344] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 971.186316][ T8344] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 971.435035][ T8344] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 971.630178][ T8344] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 971.677339][ T8344] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 971.690611][ T8344] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 971.703952][ T8344] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 971.870898][ T8344] usb 4-1: USB disconnect, device number 34 [ 971.873273][T14715] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2211'. [ 972.203538][T14727] 9pnet_fd: Insufficient options for proto=fd [ 973.701203][T14769] 9pnet_fd: Insufficient options for proto=fd [ 974.902586][T14788] geneve2: entered promiscuous mode [ 974.924357][T14788] geneve2: entered allmulticast mode [ 974.943413][ T7031] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 974.963259][ T7031] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 975.808429][ T7031] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 975.816941][ T7031] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 975.893512][T14801] overlayfs: failed to resolve './file1': -2 [ 976.737196][ T8344] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 976.969352][ T8344] usb 6-1: Using ep0 maxpacket: 8 [ 976.988221][ T8344] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.000498][T14839] syz.6.2250: attempt to access beyond end of device [ 977.000498][T14839] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 977.013476][T14839] efs: cannot read volume header [ 977.164501][ T8344] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 977.181911][ T8344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.206078][ T8344] usb 6-1: config 0 descriptor?? [ 977.216535][ T8344] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 978.248320][ T8344] gspca_vc032x: reg_r err -71 [ 978.280760][ T8344] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 978.327246][ T8344] usb 6-1: USB disconnect, device number 7 [ 978.516733][T14882] 9pnet_fd: Insufficient options for proto=fd [ 978.984559][T14900] netlink: 'syz.5.2273': attribute type 10 has an invalid length. [ 979.036276][T14900] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2273'. [ 979.168841][T14900] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 979.255779][T14900] team0: Failed to send options change via netlink (err -105) [ 979.307881][T14900] team0: Port device geneve0 added [ 979.374772][ T7029] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.435977][ T7029] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.591406][T14911] 9pnet_fd: Insufficient options for proto=fd [ 979.937333][ T6501] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 980.088628][ T6501] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.099182][ T6501] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 980.110237][ T6501] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 980.125030][ T6501] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 980.136602][ T6501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.145839][ T8344] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 980.157757][ T6501] usb 3-1: config 0 descriptor?? [ 980.307228][ T8344] usb 4-1: Using ep0 maxpacket: 8 [ 980.314015][ T8344] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.324601][ T8344] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 980.333726][ T8344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.343935][ T8344] usb 4-1: config 0 descriptor?? [ 980.353960][ T8344] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 980.372774][ T8631] usb 3-1: USB disconnect, device number 34 [ 981.191615][T14897] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.254514][T14897] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.349640][ T7036] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.359194][ T8344] gspca_vc032x: reg_r err -71 [ 981.363981][ T8344] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 981.390366][ T7036] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.399092][ T8344] usb 4-1: USB disconnect, device number 35 [ 981.457881][ T7036] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.468535][ T7036] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.491836][ T5869] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 982.976378][T14968] fuse: Bad value for 'group_id' [ 983.023038][T14968] fuse: Bad value for 'group_id' [ 983.138945][ T5934] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 983.351932][ T5934] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 983.361145][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.369370][ T5934] usb 6-1: Product: syz [ 983.373605][ T5934] usb 6-1: Manufacturer: syz [ 983.378608][ T5934] usb 6-1: SerialNumber: syz [ 983.408592][ T5934] usb 6-1: config 0 descriptor?? [ 983.631229][ T5934] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 984.922311][T15001] syz.3.2311: attempt to access beyond end of device [ 984.922311][T15001] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 984.935191][T15001] efs: cannot read volume header [ 985.474111][T15009] fuse: Bad value for 'group_id' [ 985.486728][T15009] fuse: Bad value for 'group_id' [ 985.651556][ T5934] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 985.686969][ T5934] usb 6-1: USB disconnect, device number 8 [ 986.086029][ T5934] IPVS: starting estimator thread 0... [ 986.197340][T15028] IPVS: using max 38 ests per chain, 91200 per kthread [ 990.167235][ T5865] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 990.307661][ T5865] usb 6-1: device descriptor read/64, error -71 [ 990.557579][ T5865] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 990.709636][ T5865] usb 6-1: device descriptor read/64, error -71 [ 991.374325][ T5865] usb usb6-port1: attempt power cycle [ 991.727414][ T5865] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 991.757974][ T5865] usb 6-1: device descriptor read/8, error -71 [ 992.007377][ T5865] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 992.049203][ T5865] usb 6-1: device descriptor read/8, error -71 [ 992.167779][ T5865] usb usb6-port1: unable to enumerate USB device [ 992.672817][T15174] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 993.062996][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.069419][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.809513][ T5865] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 996.135274][ T5865] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 996.145223][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.153506][ T5865] usb 6-1: Product: syz [ 996.161146][ T5865] usb 6-1: Manufacturer: syz [ 996.165817][ T5865] usb 6-1: SerialNumber: syz [ 996.173398][ T5865] usb 6-1: config 0 descriptor?? [ 996.390014][ T5865] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 998.536211][ T5865] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 998.578453][ T5865] usb 6-1: USB disconnect, device number 13 [ 999.926338][T15301] overlayfs: missing 'lowerdir' [ 999.996900][ T30] audit: type=1326 audit(1754423224.904:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 1000.114670][ T30] audit: type=1326 audit(1754423224.944:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 1000.165793][ T30] audit: type=1326 audit(1754423224.944:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 1000.189476][ T30] audit: type=1326 audit(1754423224.944:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 1000.216022][ T30] audit: type=1326 audit(1754423224.944:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 1000.254125][ T30] audit: type=1326 audit(1754423224.944:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 1000.326800][T15317] 9pnet_fd: Insufficient options for proto=fd [ 1000.327824][ T30] audit: type=1326 audit(1754423224.954:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 1000.402445][ T30] audit: type=1326 audit(1754423224.954:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 1000.505496][ T30] audit: type=1326 audit(1754423224.994:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 1000.595235][ T30] audit: type=1326 audit(1754423224.994:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889dd8eb69 code=0x7ffc0000 [ 1000.706506][T15327] blktrace: Concurrent blktraces are not allowed on sg0 [ 1001.478779][ T5934] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1001.747839][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 1001.760386][ T5934] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1001.797245][ T5934] usb 6-1: config 9 has an invalid interface number: 212 but max is 0 [ 1001.805452][ T5934] usb 6-1: config 9 has no interface number 0 [ 1001.823435][ T5934] usb 6-1: config 9 interface 212 has no altsetting 0 [ 1001.849956][ T5934] usb 6-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=f3.5f [ 1002.007524][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.018147][ T5934] usb 6-1: Product: syz [ 1002.022792][ T5934] usb 6-1: Manufacturer: syz [ 1002.027913][ T5934] usb 6-1: SerialNumber: syz [ 1002.999927][ T5934] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:9.212/input/input21 [ 1003.018128][ T5218] bcm5974 6-1:9.212: could not read from device [ 1003.036340][ T5218] bcm5974 6-1:9.212: could not read from device [ 1003.055592][ T5934] usb 6-1: USB disconnect, device number 14 [ 1003.226047][ T5218] bcm5974 6-1:9.212: could not read from device [ 1003.946963][T15124] udevd[15124]: Error opening device "/dev/input/event4": No such file or directory [ 1004.024828][T15124] udevd[15124]: Unable to EVIOCGABS device "/dev/input/event4" [ 1004.061290][T15124] udevd[15124]: Unable to EVIOCGABS device "/dev/input/event4" [ 1004.109095][T15124] udevd[15124]: Unable to EVIOCGABS device "/dev/input/event4" [ 1004.134558][T15124] udevd[15124]: Unable to EVIOCGABS device "/dev/input/event4" [ 1007.715979][T15399] blktrace: Concurrent blktraces are not allowed on sg0 [ 1010.069209][T15426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2465'. [ 1010.447358][T14984] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1010.607339][T14984] usb 3-1: Using ep0 maxpacket: 8 [ 1010.614411][T14984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.624998][T14984] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1010.634881][T14984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.646657][T14984] usb 3-1: config 0 descriptor?? [ 1010.659592][T14984] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1011.263692][T14984] gspca_vc032x: reg_r err -32 [ 1011.268585][T14984] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 1011.617699][ T5996] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1012.730744][ T5996] usb 4-1: Using ep0 maxpacket: 16 [ 1013.161184][ T5996] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.184240][ T5996] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1013.241167][T14984] usb 3-1: USB disconnect, device number 35 [ 1013.266928][ T5996] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1013.288186][ T5996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.315038][ T5996] usb 4-1: config 0 descriptor?? [ 1013.571538][ T5869] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1013.867258][T14984] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1014.019914][T14984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.030900][T14984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.040816][T14984] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1014.050478][T14984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.060626][T14984] usb 6-1: config 0 descriptor?? [ 1014.551177][T14984] usbhid 6-1:0.0: can't add hid device: -71 [ 1014.561178][T14984] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1014.573316][T14984] usb 6-1: USB disconnect, device number 15 [ 1014.642204][T12859] usb 4-1: USB disconnect, device number 36 [ 1014.741101][T15483] syz.2.2485: attempt to access beyond end of device [ 1014.741101][T15483] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1014.754417][T15483] efs: cannot read volume header [ 1015.719546][T15497] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2490'. [ 1015.831789][T15501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2492'. [ 1017.765467][T15534] netlink: 'syz.6.2502': attribute type 10 has an invalid length. [ 1017.797237][T15534] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2502'. [ 1017.857698][T15534] team0: Port device geneve0 added [ 1021.848332][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2521'. [ 1024.117349][T15618] syz.3.2526: attempt to access beyond end of device [ 1024.117349][T15618] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1024.132192][T15618] syz.3.2526: attempt to access beyond end of device [ 1024.132192][T15618] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1024.145658][T15618] Mount JFS Failure: -5 [ 1024.431428][T15620] overlayfs: missing 'lowerdir' [ 1029.250454][T12165] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1029.268047][T12165] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1029.279121][T12165] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1029.295720][T12165] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1029.312306][T12165] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1029.632246][ T7033] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1029.726545][T15688] binder: 15679:15688 ioctl c0306201 0 returned -14 [ 1030.084958][ T7033] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1030.453022][ T7033] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.469323][ T7033] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1030.649575][ T7033] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.677011][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'. [ 1031.030672][ T7033] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1031.388638][T12165] Bluetooth: hci1: command tx timeout [ 1032.031258][ T7033] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.054562][ T7033] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1032.773061][T15676] chnl_net:caif_netlink_parms(): no params data found [ 1033.026323][ T7033] ip6gretap1: left promiscuous mode [ 1033.036706][ T7033] bridge0: port 1(ip6gretap1) entered disabled state [ 1033.065196][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1033.065216][ T30] audit: type=1326 audit(1754423257.974:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4378eb69 code=0x7fc00000 [ 1033.507194][T12165] Bluetooth: hci1: command tx timeout [ 1034.217670][T15753] syz.2.2559: attempt to access beyond end of device [ 1034.217670][T15753] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1034.231028][T15753] efs: cannot read volume header [ 1035.568293][T12165] Bluetooth: hci1: command tx timeout [ 1036.955404][ T7033] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1037.647190][T12165] Bluetooth: hci1: command tx timeout [ 1038.155786][ T7033] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1038.184296][ T7033] bond0 (unregistering): Released all slaves [ 1038.331110][ T7033] tipc: Disabling bearer [ 1038.347566][ T7033] tipc: Left network mode [ 1038.421575][T15676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.430990][T15676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.446297][T15676] bridge_slave_0: entered allmulticast mode [ 1038.469915][T15676] bridge_slave_0: entered promiscuous mode [ 1039.054197][T15676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.201575][T15676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.210330][T15676] bridge_slave_1: entered allmulticast mode [ 1039.236024][T15676] bridge_slave_1: entered promiscuous mode [ 1039.409984][T15676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.423756][T15676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.429335][T14984] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1039.504905][ T7033] hsr_slave_0: left promiscuous mode [ 1039.515215][ T7033] hsr_slave_1: left promiscuous mode [ 1039.650769][T14984] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1039.663639][T14984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.672643][T14984] usb 3-1: Product: syz [ 1039.691286][T14984] usb 3-1: Manufacturer: syz [ 1039.716048][T14984] usb 3-1: SerialNumber: syz [ 1039.735844][T14984] usb 3-1: config 0 descriptor?? [ 1039.838741][T15817] fuse: Bad value for 'user_id' [ 1039.843648][T15817] fuse: Bad value for 'user_id' [ 1039.979148][T14984] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1040.559552][T15834] syz.6.2581: attempt to access beyond end of device [ 1040.559552][T15834] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1040.572713][T15834] efs: cannot read volume header [ 1041.660112][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1041.667692][T14984] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1041.699285][T14984] usb 3-1: USB disconnect, device number 37 [ 1042.476803][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2592'. [ 1042.563747][ T7033] lo (unregistering): left allmulticast mode [ 1042.582399][T15676] team0: Port device team_slave_0 added [ 1042.689589][T15676] team0: Port device team_slave_1 added [ 1042.773006][ T5996] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1042.800876][T15676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.826088][T15676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.147526][T15676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.167269][ T5996] usb 6-1: Using ep0 maxpacket: 16 [ 1043.179288][ T5996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.203094][T15676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.210610][ T5996] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1043.224838][T15676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.251689][ T5996] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1043.261692][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.271956][T15676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.284353][ T5996] usb 6-1: config 0 descriptor?? [ 1043.309109][ T5996] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1043.471017][T15676] hsr_slave_0: entered promiscuous mode [ 1043.497010][T15676] hsr_slave_1: entered promiscuous mode [ 1043.508596][T15676] debugfs: 'hsr0' already exists in 'hsr' [ 1043.524697][T15676] Cannot create hsr debugfs directory [ 1043.740431][T15866] syz.2.2596: attempt to access beyond end of device [ 1043.740431][T15866] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1043.753656][T15866] efs: cannot read volume header [ 1045.835697][ T8344] usb 6-1: USB disconnect, device number 16 [ 1046.722437][T15921] fuse: Unknown parameter 'grou00000000000000000000' [ 1046.944820][T15676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1046.985987][T15676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1047.302326][T15676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1047.515913][T15676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1048.221630][T15935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2611'. [ 1048.605473][T15676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.910235][T15676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.366490][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.373847][ T6465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.436968][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.444264][ T6465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.769437][T15967] fuse: Unknown parameter 'grou00000000000000000000' [ 1050.025145][T15973] fuse: Bad value for 'fd' [ 1050.150590][T15676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.043488][T15983] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2622'. [ 1051.158698][T15676] veth0_vlan: entered promiscuous mode [ 1051.180890][T15676] veth1_vlan: entered promiscuous mode [ 1052.162822][T15676] veth0_macvtap: entered promiscuous mode [ 1052.234901][T15676] veth1_macvtap: entered promiscuous mode [ 1052.345099][T15676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.402654][T15676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.602987][ T7046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.661538][ T7046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.683610][ T7046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.745296][ T7046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.060989][ T6465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.094638][ T6465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.279518][ T7043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.289143][ T7043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.112831][T16028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2634'. [ 1054.138026][T16030] fuse: Bad value for 'fd' [ 1054.506735][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.514806][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.872220][T16041] fuse: Unknown parameter 'group_i00000000000000000000' [ 1055.155048][T12165] Bluetooth: Frame is too long (len 18, expected len 4) [ 1055.409156][ T5865] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1055.577453][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 1055.592826][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1055.613354][ T5865] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1055.625332][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.733323][ T5865] usb 6-1: config 0 descriptor?? [ 1055.753067][ T5865] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1056.578066][T16081] fuse: Bad value for 'fd' [ 1058.811092][ T5865] usb 6-1: USB disconnect, device number 17 [ 1058.989398][T16133] fuse: Bad value for 'fd' [ 1060.217232][ T5865] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1060.409508][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.431992][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.470113][ T5865] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1060.487614][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.530304][ T5865] usb 6-1: config 0 descriptor?? [ 1061.055234][ T5865] hid-led 0003:04D8:F372.0015: unknown main item tag 0x0 [ 1061.079289][ T5865] hid-led 0003:04D8:F372.0015: unknown main item tag 0x0 [ 1061.117999][ T5865] hid-led 0003:04D8:F372.0015: unknown main item tag 0x0 [ 1061.558591][ T5865] hid-led 0003:04D8:F372.0015: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.5-1/input0 [ 1061.957395][ T5865] hid-led 0003:04D8:F372.0015: Greynut Luxafor initialized [ 1061.981317][ T5865] usb 6-1: USB disconnect, device number 18 [ 1062.019936][T16156] fido_id[16156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1062.025413][ T7046] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1062.101574][ T7046] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1062.126986][ T7046] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1062.153672][ T6465] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1062.171726][ T6465] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1062.187889][ T6465] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1062.202332][ T6465] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1062.214423][ T6465] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1062.228676][ T6465] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1062.239005][ T6465] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1062.262763][ T6465] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1062.284566][ T1035] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1062.303899][ T1035] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1062.314914][ T1035] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1062.327012][ T6102] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1062.336660][ T7046] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1062.351084][ T1035] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1062.361965][ T7046] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1062.509463][T16170] fuse: Bad value for 'fd' [ 1062.687279][ T5865] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1062.849743][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 1062.879064][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1062.915104][ T5865] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1062.956775][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.024613][ T5865] usb 6-1: config 0 descriptor?? [ 1063.051661][ T5865] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1063.066595][T12165] Bluetooth: Frame is too long (len 18, expected len 4) [ 1065.191225][ T5865] usb 6-1: USB disconnect, device number 19 [ 1065.598833][T16210] No control pipe specified [ 1065.637736][T16212] fuse: Invalid rootmode [ 1067.237800][T16234] syz.2.2698: attempt to access beyond end of device [ 1067.237800][T16234] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1067.250734][T16234] efs: cannot read volume header [ 1068.649311][T16250] fuse: Bad value for 'user_id' [ 1068.654212][T16250] fuse: Bad value for 'user_id' [ 1069.226584][T16266] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2706'. [ 1069.908256][ T5996] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1070.335579][T16285] fuse: Bad value for 'user_id' [ 1070.340832][T16285] fuse: Bad value for 'user_id' [ 1070.389350][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.410765][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.430890][ T5996] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1070.450317][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.470811][T16288] No control pipe specified [ 1070.479855][ T5996] usb 6-1: config 0 descriptor?? [ 1070.687194][T14984] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1070.868367][T14984] usb 3-1: device descriptor read/64, error -71 [ 1070.915491][ T5996] hid-led 0003:04D8:F372.0016: unknown main item tag 0x0 [ 1070.928776][ T5996] hid-led 0003:04D8:F372.0016: unknown main item tag 0x0 [ 1070.943704][ T5996] hid-led 0003:04D8:F372.0016: unknown main item tag 0x0 [ 1070.965423][ T5996] hid-led 0003:04D8:F372.0016: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.5-1/input0 [ 1071.066943][ T5996] hid-led 0003:04D8:F372.0016: Greynut Luxafor initialized [ 1071.145626][ T5996] usb 6-1: USB disconnect, device number 20 [ 1071.222269][ T7043] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1071.240558][ T6465] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1071.260728][ T6465] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1071.265902][T16304] fido_id[16304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1071.286900][ T6102] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1071.305513][ T7043] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1071.307281][T14984] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1071.326231][ T7043] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1071.346602][ T7043] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1071.372185][ T7043] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1071.399691][ T7043] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1071.419516][ T7043] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1071.455775][ T7043] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1071.476079][ T6102] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1071.484278][T14984] usb 3-1: device descriptor read/64, error -71 [ 1071.508906][ T7029] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1071.541292][ T7029] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1071.582433][ T6102] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1071.608314][T14984] usb usb3-port1: attempt power cycle [ 1071.633490][ T6102] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1071.670720][ T6102] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1071.875488][ T7043] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1072.478121][T14984] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1072.537945][T14984] usb 3-1: device descriptor read/8, error -71 [ 1072.787551][T14984] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1073.158685][T14984] usb 3-1: device descriptor read/8, error -71 [ 1073.220055][T16323] fuse: Bad value for 'user_id' [ 1073.226633][T16323] fuse: Bad value for 'user_id' [ 1073.280702][T14984] usb usb3-port1: unable to enumerate USB device [ 1073.289707][T16325] fuse: Invalid rootmode [ 1073.396374][T16327] No control pipe specified [ 1074.534448][T16356] fuse: Bad value for 'fd' [ 1074.805206][T16359] fuse: Bad value for 'rootmode' [ 1076.261154][T16372] syz.5.2741: attempt to access beyond end of device [ 1076.261154][T16372] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1076.279780][T16372] efs: cannot read volume header [ 1076.677387][ T5996] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1076.970631][ T5996] usb 3-1: device descriptor read/64, error -71 [ 1077.902498][ T5996] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1078.168667][ T5996] usb 3-1: device descriptor read/64, error -71 [ 1078.330080][ T5996] usb usb3-port1: attempt power cycle [ 1079.119623][T16392] fuse: Bad value for 'rootmode' [ 1079.200825][ T5996] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1079.252838][ T5996] usb 3-1: device descriptor read/8, error -71 [ 1079.517211][ T5996] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1079.777659][ T5996] usb 3-1: device not accepting address 45, error -71 [ 1079.798153][ T5996] usb usb3-port1: unable to enumerate USB device [ 1080.407581][T16417] fuse: Bad value for 'fd' [ 1082.103997][T16437] fuse: Bad value for 'rootmode' [ 1084.626971][T16456] fuse: Bad value for 'fd' [ 1085.357242][ T5996] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1086.180687][T16476] fuse: Unknown parameter 'use00000000000000000000' [ 1086.229091][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.240452][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.250332][ T5996] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1086.260912][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.306723][ T5996] usb 6-1: config 0 descriptor?? [ 1087.636770][ T5996] hid-led 0003:04D8:F372.0017: unknown main item tag 0x0 [ 1087.647374][ T5996] hid-led 0003:04D8:F372.0017: unknown main item tag 0x0 [ 1087.654459][ T5996] hid-led 0003:04D8:F372.0017: unknown main item tag 0x0 [ 1087.664780][ T5996] hid-led 0003:04D8:F372.0017: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.5-1/input0 [ 1087.800131][ T5996] hid-led 0003:04D8:F372.0017: Greynut Luxafor initialized [ 1087.832419][ T5996] usb 6-1: USB disconnect, device number 21 [ 1087.865174][ T7031] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1087.897995][T16493] fido_id[16493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1087.946631][ T7031] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1087.961053][ T6102] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1087.986471][ T6102] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1088.030113][ T6102] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1088.188337][ T6102] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1088.198648][ T6102] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1088.209302][ T6102] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1088.221829][ T6102] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1088.234203][ T6102] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1088.246100][ T7036] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1088.256691][ T6102] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1088.386283][ T7029] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1088.436015][T16510] fuse: Bad value for 'fd' [ 1088.453518][ T7029] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1088.476124][ T6102] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1088.492777][ T6102] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1088.513329][ T6102] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1088.527963][ T7029] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1089.190899][T16524] fuse: Bad value for 'fd' [ 1089.745557][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2793'. [ 1090.125392][T16539] fuse: Bad value for 'fd' [ 1092.344576][T16568] fuse: Unknown parameter 'use00000000000000000000' [ 1094.243930][T16587] netlink: 'syz.3.2811': attribute type 10 has an invalid length. [ 1094.573339][T16587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2811'. [ 1094.601544][T16587] team0: Port device geneve0 added [ 1094.620019][ T6102] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.628450][ T6102] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.641966][ T6102] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.666177][T16584] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.732457][T16584] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.800954][T16584] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.052087][ T1035] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.082874][ T1035] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.092629][ T1035] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.116197][ T1035] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.276550][T16601] fuse: Unknown parameter 'user_i00000000000000000000' [ 1095.857525][ T5934] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1095.997243][ T5934] usb 6-1: device descriptor read/64, error -71 [ 1096.237906][ T5934] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1096.378723][ T5934] usb 6-1: device descriptor read/64, error -71 [ 1096.560681][ T5934] usb usb6-port1: attempt power cycle [ 1097.077441][ T5934] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1097.151052][ T5934] usb 6-1: device descriptor read/8, error -71 [ 1097.678453][ T5934] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1097.695920][T16630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2824'. [ 1097.889392][ T5934] usb 6-1: device descriptor read/8, error -71 [ 1098.070732][ T5934] usb usb6-port1: unable to enumerate USB device [ 1098.503795][T16641] netlink: 'syz.6.2825': attribute type 10 has an invalid length. [ 1098.529215][T16643] fuse: Unknown parameter 'user_i00000000000000000000' [ 1098.536907][T16639] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.559572][T16641] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2825'. [ 1098.706139][T16639] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.812194][T16639] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.913908][T16639] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.039752][ T1035] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.086032][ T6102] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.110644][ T6102] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.117420][ T5996] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1099.157060][ T7046] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.289885][ T5996] usb 6-1: Using ep0 maxpacket: 16 [ 1099.311495][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.345436][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.907468][ T5996] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1099.920895][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.941085][ T5996] usb 6-1: config 0 descriptor?? [ 1101.120256][ T5996] usbhid 6-1:0.0: can't add hid device: -71 [ 1101.227469][ T5996] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1101.257844][T16675] fuse: Unknown parameter 'user_i00000000000000000000' [ 1101.258247][ T5996] usb 6-1: USB disconnect, device number 26 [ 1101.847731][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2844'. [ 1104.224706][T16722] fuse: Unknown parameter 'user_id00000000000000000000' [ 1104.686604][T16729] fuse: Unknown parameter '00000000000000000000' [ 1106.054301][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2862'. [ 1106.678029][T16767] fuse: Unknown parameter 'user_id00000000000000000000' [ 1107.117300][ T5996] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1107.307903][ T5996] usb 3-1: Using ep0 maxpacket: 32 [ 1107.597042][ T5996] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.613278][T16778] fuse: Unknown parameter '00000000000000000000' [ 1107.624606][ T5996] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.708967][ T5996] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1107.764012][ T5996] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1107.866875][ T5996] usb 3-1: Product: syz [ 1107.886745][ T5996] usb 3-1: Manufacturer: syz [ 1109.019008][ T5996] hub 3-1:4.0: USB hub found [ 1109.074361][T16795] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2875'. [ 1109.213909][ T5996] hub 3-1:4.0: 2 ports detected [ 1109.245824][T16806] fuse: Unknown parameter 'user_id00000000000000000000' [ 1109.829750][T16812] fuse: Unknown parameter '00000000000000000000' [ 1110.078061][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2883'. [ 1111.142449][ T9] usb 3-1: USB disconnect, device number 46 [ 1111.446343][T16836] overlayfs: failed to clone upperpath [ 1111.843705][T16846] fuse: Unknown parameter 'user00000000000000000000' [ 1113.301950][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1113.325962][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1113.336361][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1113.350020][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1113.372019][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1113.934043][T16853] chnl_net:caif_netlink_parms(): no params data found [ 1115.197279][ T5996] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1115.219773][T16853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.227925][T16853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.235185][T16853] bridge_slave_0: entered allmulticast mode [ 1115.243448][T16853] bridge_slave_0: entered promiscuous mode [ 1115.259005][T16853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.288642][T16853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.296043][T16853] bridge_slave_1: entered allmulticast mode [ 1115.305940][T16853] bridge_slave_1: entered promiscuous mode [ 1115.347350][ T5996] usb 3-1: Using ep0 maxpacket: 32 [ 1115.354915][ T5996] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.373806][ T5996] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.399802][T16853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.423810][T16853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.429651][ T5996] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1115.452534][ T5996] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1115.466038][T12165] Bluetooth: hci4: command tx timeout [ 1115.470458][T16853] team0: Port device team_slave_0 added [ 1115.474445][ T5996] usb 3-1: Product: syz [ 1115.487306][ T5996] usb 3-1: Manufacturer: syz [ 1115.817622][ T5996] hub 3-1:4.0: USB hub found [ 1115.946293][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.956176][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.964155][T16853] team0: Port device team_slave_1 added [ 1115.976844][ T5996] hub 3-1:4.0: 2 ports detected [ 1116.013691][T16853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.021235][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.048324][T16853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.177763][T16853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.184749][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.213841][T16853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.300652][T16853] hsr_slave_0: entered promiscuous mode [ 1116.307726][T16853] hsr_slave_1: entered promiscuous mode [ 1116.314199][T16853] debugfs: 'hsr0' already exists in 'hsr' [ 1116.320046][T16853] Cannot create hsr debugfs directory [ 1116.671547][T16853] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.749121][T16853] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.804049][T16853] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.881832][T16853] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.180436][T16903] fuse: Bad value for 'fd' [ 1117.241343][T16853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1117.270201][T16853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1117.292086][ T5865] usb 3-1: USB disconnect, device number 47 [ 1117.309426][T16853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1117.331552][T16853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1117.542249][T16853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.557189][T12165] Bluetooth: hci4: command tx timeout [ 1117.594272][T16853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.617848][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.625139][ T7031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.642273][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.649493][ T7036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.607399][T16927] netlink: 'syz.5.2917': attribute type 10 has an invalid length. [ 1118.615791][T16927] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2917'. [ 1119.156735][T16925] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.238660][T16927] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 1119.279470][ T7046] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.358050][ T7046] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.429881][T16925] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.584114][T16853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.617691][T12165] Bluetooth: hci4: command tx timeout [ 1119.747574][T16853] veth0_vlan: entered promiscuous mode [ 1119.771862][T16853] veth1_vlan: entered promiscuous mode [ 1119.855596][T16853] veth0_macvtap: entered promiscuous mode [ 1119.874091][T16853] veth1_macvtap: entered promiscuous mode [ 1119.913972][T16853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.957360][T16853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1119.990063][ T7046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.015508][ T7046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.044178][ T7046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.064266][ T7046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.194910][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.224073][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.279031][ T7046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.289390][ T7046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.466556][T16943] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2894'. [ 1120.690309][T16945] syz.6.2922: attempt to access beyond end of device [ 1120.690309][T16945] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1120.703494][T16945] efs: cannot read volume header [ 1121.727835][T12165] Bluetooth: hci4: command tx timeout [ 1123.179121][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1123.195181][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1123.237727][ T6501] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1123.247875][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1123.259063][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1123.268052][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1123.437451][ T6501] usb 6-1: Using ep0 maxpacket: 32 [ 1123.446116][ T6501] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.459080][ T6501] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.471044][ T6501] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1123.482450][ T6501] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1123.490936][ T6501] usb 6-1: Product: syz [ 1123.495289][ T6501] usb 6-1: Manufacturer: syz [ 1123.514986][ T6501] hub 6-1:4.0: USB hub found [ 1123.639266][T16964] chnl_net:caif_netlink_parms(): no params data found [ 1123.717702][ T6501] hub 6-1:4.0: 2 ports detected [ 1123.746635][T16964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.754185][T16964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.762412][T16964] bridge_slave_0: entered allmulticast mode [ 1123.770002][T16964] bridge_slave_0: entered promiscuous mode [ 1123.779758][T16964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.786966][T16964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.794619][T16964] bridge_slave_1: entered allmulticast mode [ 1123.803455][T16964] bridge_slave_1: entered promiscuous mode [ 1123.849901][T16964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.863883][T16964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.905159][T16964] team0: Port device team_slave_0 added [ 1123.914442][T16964] team0: Port device team_slave_1 added [ 1123.962903][T16964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.969957][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.998910][T16964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.013101][T16964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.020983][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.056494][T16964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.361915][T16964] hsr_slave_0: entered promiscuous mode [ 1124.373766][T16964] hsr_slave_1: entered promiscuous mode [ 1124.380679][T16964] debugfs: 'hsr0' already exists in 'hsr' [ 1124.386456][T16964] Cannot create hsr debugfs directory [ 1125.431480][ T8631] usb 6-1: USB disconnect, device number 27 [ 1125.445935][T12165] Bluetooth: hci2: command tx timeout [ 1125.907503][ T8344] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1125.995655][T17006] No control pipe specified [ 1126.061661][ T8344] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1126.077005][ T8344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.205164][ T8344] usb 4-1: Product: syz [ 1126.210011][ T8344] usb 4-1: Manufacturer: syz [ 1126.214633][ T8344] usb 4-1: SerialNumber: syz [ 1126.232638][ T8344] usb 4-1: config 0 descriptor?? [ 1126.820885][ T8344] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1127.457242][T12165] Bluetooth: hci2: command tx timeout [ 1127.772212][T16964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1127.944303][T16964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1128.026852][T16964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1128.063219][T16964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1128.277807][T17038] fuse: Unknown parameter '0x0000000000000003' [ 1128.465742][ T8344] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1128.487310][ T8344] usb 4-1: USB disconnect, device number 37 [ 1128.727803][T16964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.294295][T16964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.559358][T12165] Bluetooth: hci2: command tx timeout [ 1129.681804][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.689047][ T7031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.739286][T17048] No control pipe specified [ 1129.740447][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.751102][ T7036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.657406][T12165] Bluetooth: hci2: command tx timeout [ 1131.925095][T17071] netlink: 'syz.3.2955': attribute type 10 has an invalid length. [ 1131.952467][T17070] fuse: Unknown parameter '0x0000000000000003' [ 1131.963602][T17071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2955'. [ 1132.143889][T17065] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.314322][T17071] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 1132.332585][T17071] team0: Failed to send options change via netlink (err -105) [ 1132.347240][T17071] team0: Port device geneve0 added [ 1132.432655][T17065] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.549657][T17065] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.054480][T17065] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.101718][T16964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.201172][T17091] fuse: Unknown parameter 'user_i00000000000000000000' [ 1133.278826][T17094] No control pipe specified [ 1133.370105][ T7031] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.385500][ T7031] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.615308][T16964] veth0_vlan: entered promiscuous mode [ 1133.644635][ T7031] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.743652][ T7036] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.964046][T16964] veth1_vlan: entered promiscuous mode [ 1134.838927][T16964] veth0_macvtap: entered promiscuous mode [ 1134.906788][T17112] fuse: Unknown parameter '0x0000000000000003' [ 1135.055088][T16964] veth1_macvtap: entered promiscuous mode [ 1135.078059][T16964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.403018][T16964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.637834][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2968'. [ 1135.656630][ T7046] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.770995][ T7046] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.800319][ T7029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.016364][ T7029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.453745][ T7031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.471903][ T7031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.485653][T17133] fuse: Unknown parameter 'user_id00000000000000000000' [ 1136.885434][ T7043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.902832][ T7043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.904426][T17153] fuse: Unknown parameter '0x0000000000000003' [ 1138.704221][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1138.717153][ T5996] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1139.097445][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1139.214135][ T5996] usb 6-1: Using ep0 maxpacket: 16 [ 1139.283771][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.305455][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.323899][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.335798][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.357264][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1139.376982][ T5996] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1139.390631][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1139.417380][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.418690][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2984'. [ 1139.425591][ T9] usb 4-1: Product: syz [ 1139.456748][ T5996] usb 6-1: config 0 descriptor?? [ 1139.468479][ T9] usb 4-1: Manufacturer: syz [ 1139.497904][ T9] hub 4-1:4.0: USB hub found [ 1139.963706][ T9] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 1140.045206][T17187] fuse: Unknown parameter 'user_id00000000000000000000' [ 1141.090701][ T5996] usbhid 6-1:0.0: can't add hid device: -71 [ 1141.096775][ T5996] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1141.159047][ T5996] usb 6-1: USB disconnect, device number 28 [ 1141.228996][ T8631] usb 4-1: USB disconnect, device number 38 [ 1141.438890][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 1142.953203][T17231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3000'. [ 1144.431876][T17247] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3007'. [ 1148.431827][T17300] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3023'. [ 1148.506671][T17303] netlink: 'syz.0.3025': attribute type 10 has an invalid length. [ 1148.530859][T17302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.557414][T17303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3025'. [ 1148.625485][T17303] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 1148.940393][T17303] team0: Failed to send options change via netlink (err -105) [ 1149.165284][T17303] team0: Port device geneve0 added [ 1149.784346][T17302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.101056][T17302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.493391][T17302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.775332][T17302] ------------[ cut here ]------------ [ 1150.781469][T17302] WARNING: mm/page_alloc.c:5124 at __alloc_frozen_pages_noprof+0x2c8/0x370, CPU#0: syz.0.3025/17302 [ 1150.792415][T17302] Modules linked in: [ 1150.796789][T17302] CPU: 0 UID: 0 PID: 17302 Comm: syz.0.3025 Not tainted 6.16.0-next-20250805-syzkaller #0 PREEMPT(full) [ 1150.808413][T17302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1150.818628][T17302] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 1150.825259][T17302] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 d0 a2 76 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 1150.845017][T17302] RSP: 0018:ffffc90004cbe940 EFLAGS: 00010246 [ 1150.851175][T17302] RAX: ffffc90004cbe900 RBX: 0000000000000017 RCX: 0000000000000000 [ 1150.859226][T17302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004cbe9a8 [ 1150.867556][T17302] RBP: ffffc90004cbea28 R08: ffffc90004cbe9a7 R09: 0000000000000000 [ 1150.875986][T17302] R10: ffffc90004cbe980 R11: fffff52000997d35 R12: 0000000000000000 [ 1150.884152][T17302] R13: 1ffff92000997d2c R14: 0000000000040920 R15: dffffc0000000000 [ 1150.892291][T17302] FS: 00007f60443f76c0(0000) GS:ffff888125c24000(0000) knlGS:0000000000000000 [ 1150.901436][T17302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1150.908119][T17302] CR2: 00007f82bcdfff98 CR3: 0000000060848000 CR4: 00000000003526f0 [ 1150.916119][T17302] Call Trace: [ 1150.919602][T17302] [ 1150.922580][T17302] ? __sock_sendmsg+0x219/0x270 [ 1150.927675][T17302] ? ___sys_sendmsg+0x21f/0x2a0 [ 1150.932561][T17302] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1150.939032][T17302] ? policy_nodemask+0x28b/0x720 [ 1150.944014][T17302] alloc_pages_mpol+0x232/0x4a0 [ 1150.949022][T17302] ___kmalloc_large_node+0x5f/0x1b0 [ 1150.954306][T17302] __kmalloc_large_node_noprof+0x18/0x90 [ 1150.960175][T17302] __kmalloc_noprof+0x36f/0x4f0 [ 1150.965090][T17302] ? nsim_fib_event_nb+0x295/0x1080 [ 1150.970442][T17302] nsim_fib_event_nb+0x295/0x1080 [ 1150.975639][T17302] ? validate_chain+0x897/0x2140 [ 1150.980717][T17302] call_fib_notifier+0x45/0x80 [ 1150.985648][T17302] fib6_node_dump+0x21d/0x2b0 [ 1150.990558][T17302] ? __pfx_fib6_node_dump+0x10/0x10 [ 1150.995873][T17302] ? __lock_acquire+0xab9/0xd20 [ 1151.000953][T17302] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1151.006393][T17302] fib6_walk_continue+0x678/0x910 [ 1151.011608][T17302] fib6_walk+0x149/0x290 [ 1151.015924][T17302] fib6_tables_dump+0x1c9/0x2b0 [ 1151.021027][T17302] ? __pfx_fib6_tables_dump+0x10/0x10 [ 1151.026469][T17302] ? net_generic+0x1e/0x240 [ 1151.031081][T17302] ? net_generic+0x1e/0x240 [ 1151.035638][T17302] register_fib_notifier+0x184/0x360 [ 1151.041026][T17302] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 1151.047463][T17302] ? register_fib_notifier+0x6a/0x360 [ 1151.052870][T17302] nsim_fib_create+0x847/0x9d0 [ 1151.057735][T17302] ? __pfx_nsim_fib_create+0x10/0x10 [ 1151.063061][T17302] nsim_dev_reload_up+0x36b/0x780 [ 1151.068153][T17302] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 1151.073762][T17302] devlink_reload+0x4ec/0x8d0 [ 1151.078499][T17302] ? __pfx_devlink_reload+0x10/0x10 [ 1151.083717][T17302] ? devlink_resources_validate+0xa7/0xd0 [ 1151.089477][T17302] ? devlink_resources_validate+0xa7/0xd0 [ 1151.095206][T17302] devlink_nl_reload_doit+0xb35/0xd50 [ 1151.100644][T17302] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1151.106607][T17302] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1151.112962][T17302] genl_family_rcv_msg_doit+0x212/0x300 [ 1151.118646][T17302] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1151.124930][T17302] ? bpf_lsm_capable+0x9/0x20 [ 1151.129645][T17302] ? security_capable+0x7e/0x2e0 [ 1151.134683][T17302] genl_rcv_msg+0x60e/0x790 [ 1151.139244][T17302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1151.144291][T17302] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 1151.150796][T17302] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1151.156680][T17302] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 1151.163261][T17302] ? __asan_memcpy+0x40/0x70 [ 1151.167898][T17302] ? __pfx_ref_tracker_free+0x10/0x10 [ 1151.173279][T17302] netlink_rcv_skb+0x208/0x470 [ 1151.178091][T17302] ? __lock_acquire+0xab9/0xd20 [ 1151.183030][T17302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1151.188093][T17302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1151.193472][T17302] ? down_read+0x1ad/0x2e0 [ 1151.197942][T17302] genl_rcv+0x28/0x40 [ 1151.201921][T17302] netlink_unicast+0x82f/0x9e0 [ 1151.207175][T17302] ? __pfx_netlink_unicast+0x10/0x10 [ 1151.212515][T17302] ? netlink_sendmsg+0x642/0xb30 [ 1151.217573][T17302] ? skb_put+0x11b/0x210 [ 1151.221817][T17302] netlink_sendmsg+0x805/0xb30 [ 1151.226579][T17302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1151.231921][T17302] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1151.236880][T17302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1151.242214][T17302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1151.247734][T17302] __sock_sendmsg+0x219/0x270 [ 1151.252438][T17302] ____sys_sendmsg+0x505/0x830 [ 1151.257227][T17302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1151.262523][T17302] ? import_iovec+0x74/0xa0 [ 1151.267013][T17302] ___sys_sendmsg+0x21f/0x2a0 [ 1151.271740][T17302] ? __pfx____sys_sendmsg+0x10/0x10 [ 1151.276992][T17302] ? __fget_files+0x2a/0x420 [ 1151.281678][T17302] ? __fget_files+0x3a0/0x420 [ 1151.286405][T17302] __x64_sys_sendmsg+0x19b/0x260 [ 1151.291397][T17302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1151.296858][T17302] ? rcu_is_watching+0x15/0xb0 [ 1151.301903][T17302] ? do_syscall_64+0xbe/0x3b0 [ 1151.306603][T17302] do_syscall_64+0xfa/0x3b0 [ 1151.311212][T17302] ? lockdep_hardirqs_on+0x9c/0x150 [ 1151.316422][T17302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.322685][T17302] ? clear_bhb_loop+0x60/0xb0 [ 1151.327401][T17302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.333323][T17302] RIP: 0033:0x7f604458eb69 [ 1151.337946][T17302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1151.357701][T17302] RSP: 002b:00007f60443f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.366298][T17302] RAX: ffffffffffffffda RBX: 00007f60447b5fa0 RCX: 00007f604458eb69 [ 1151.374319][T17302] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 1151.382307][T17302] RBP: 00007f6044611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1151.390305][T17302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.398281][T17302] R13: 0000000000000000 R14: 00007f60447b5fa0 R15: 00007ffd50c87da8 [ 1151.406258][T17302] [ 1151.409299][T17302] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1151.416561][T17302] CPU: 0 UID: 0 PID: 17302 Comm: syz.0.3025 Not tainted 6.16.0-next-20250805-syzkaller #0 PREEMPT(full) [ 1151.427737][T17302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1151.437805][T17302] Call Trace: [ 1151.441076][T17302] [ 1151.443996][T17302] dump_stack_lvl+0x99/0x250 [ 1151.448597][T17302] ? __asan_memcpy+0x40/0x70 [ 1151.453170][T17302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1151.458368][T17302] ? __pfx__printk+0x10/0x10 [ 1151.462976][T17302] vpanic+0x281/0x750 [ 1151.466966][T17302] ? __pfx_vpanic+0x10/0x10 [ 1151.471640][T17302] ? is_bpf_text_address+0x292/0x2b0 [ 1151.476997][T17302] ? is_bpf_text_address+0x26/0x2b0 [ 1151.482274][T17302] panic+0xb9/0xc0 [ 1151.486290][T17302] ? __pfx_panic+0x10/0x10 [ 1151.490733][T17302] __warn+0x334/0x4c0 [ 1151.494724][T17302] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 1151.500721][T17302] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 1151.506841][T17302] report_bug+0x2be/0x4f0 [ 1151.511176][T17302] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 1151.517145][T17302] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 1151.523122][T17302] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 1151.529090][T17302] handle_bug+0x84/0x160 [ 1151.533320][T17302] exc_invalid_op+0x1a/0x50 [ 1151.537838][T17302] asm_exc_invalid_op+0x1a/0x20 [ 1151.542864][T17302] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 1151.549435][T17302] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 d0 a2 76 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 1151.569114][T17302] RSP: 0018:ffffc90004cbe940 EFLAGS: 00010246 [ 1151.575169][T17302] RAX: ffffc90004cbe900 RBX: 0000000000000017 RCX: 0000000000000000 [ 1151.583120][T17302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004cbe9a8 [ 1151.591086][T17302] RBP: ffffc90004cbea28 R08: ffffc90004cbe9a7 R09: 0000000000000000 [ 1151.599041][T17302] R10: ffffc90004cbe980 R11: fffff52000997d35 R12: 0000000000000000 [ 1151.607024][T17302] R13: 1ffff92000997d2c R14: 0000000000040920 R15: dffffc0000000000 [ 1151.615011][T17302] ? __sock_sendmsg+0x219/0x270 [ 1151.619867][T17302] ? ___sys_sendmsg+0x21f/0x2a0 [ 1151.624726][T17302] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1151.631045][T17302] ? policy_nodemask+0x28b/0x720 [ 1151.636086][T17302] alloc_pages_mpol+0x232/0x4a0 [ 1151.640944][T17302] ___kmalloc_large_node+0x5f/0x1b0 [ 1151.646238][T17302] __kmalloc_large_node_noprof+0x18/0x90 [ 1151.651897][T17302] __kmalloc_noprof+0x36f/0x4f0 [ 1151.656754][T17302] ? nsim_fib_event_nb+0x295/0x1080 [ 1151.661958][T17302] nsim_fib_event_nb+0x295/0x1080 [ 1151.666982][T17302] ? validate_chain+0x897/0x2140 [ 1151.671910][T17302] call_fib_notifier+0x45/0x80 [ 1151.676663][T17302] fib6_node_dump+0x21d/0x2b0 [ 1151.681326][T17302] ? __pfx_fib6_node_dump+0x10/0x10 [ 1151.686684][T17302] ? __lock_acquire+0xab9/0xd20 [ 1151.691527][T17302] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1151.696886][T17302] fib6_walk_continue+0x678/0x910 [ 1151.701940][T17302] fib6_walk+0x149/0x290 [ 1151.706168][T17302] fib6_tables_dump+0x1c9/0x2b0 [ 1151.711006][T17302] ? __pfx_fib6_tables_dump+0x10/0x10 [ 1151.716458][T17302] ? net_generic+0x1e/0x240 [ 1151.720953][T17302] ? net_generic+0x1e/0x240 [ 1151.725457][T17302] register_fib_notifier+0x184/0x360 [ 1151.730741][T17302] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 1151.736986][T17302] ? register_fib_notifier+0x6a/0x360 [ 1151.742516][T17302] nsim_fib_create+0x847/0x9d0 [ 1151.747274][T17302] ? __pfx_nsim_fib_create+0x10/0x10 [ 1151.752549][T17302] nsim_dev_reload_up+0x36b/0x780 [ 1151.757564][T17302] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 1151.763120][T17302] devlink_reload+0x4ec/0x8d0 [ 1151.767804][T17302] ? __pfx_devlink_reload+0x10/0x10 [ 1151.772994][T17302] ? devlink_resources_validate+0xa7/0xd0 [ 1151.778877][T17302] ? devlink_resources_validate+0xa7/0xd0 [ 1151.784673][T17302] devlink_nl_reload_doit+0xb35/0xd50 [ 1151.790038][T17302] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1151.795910][T17302] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1151.802226][T17302] genl_family_rcv_msg_doit+0x212/0x300 [ 1151.807763][T17302] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1151.813837][T17302] ? bpf_lsm_capable+0x9/0x20 [ 1151.818497][T17302] ? security_capable+0x7e/0x2e0 [ 1151.823422][T17302] genl_rcv_msg+0x60e/0x790 [ 1151.828034][T17302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1151.833061][T17302] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 1151.839493][T17302] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1151.845389][T17302] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 1151.851950][T17302] ? __asan_memcpy+0x40/0x70 [ 1151.856550][T17302] ? __pfx_ref_tracker_free+0x10/0x10 [ 1151.862009][T17302] netlink_rcv_skb+0x208/0x470 [ 1151.866764][T17302] ? __lock_acquire+0xab9/0xd20 [ 1151.871604][T17302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1151.876631][T17302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1151.881998][T17302] ? down_read+0x1ad/0x2e0 [ 1151.886490][T17302] genl_rcv+0x28/0x40 [ 1151.890485][T17302] netlink_unicast+0x82f/0x9e0 [ 1151.895246][T17302] ? __pfx_netlink_unicast+0x10/0x10 [ 1151.900583][T17302] ? netlink_sendmsg+0x642/0xb30 [ 1151.905518][T17302] ? skb_put+0x11b/0x210 [ 1151.909786][T17302] netlink_sendmsg+0x805/0xb30 [ 1151.914595][T17302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1151.919909][T17302] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1151.924856][T17302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1151.930141][T17302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1151.935444][T17302] __sock_sendmsg+0x219/0x270 [ 1151.940190][T17302] ____sys_sendmsg+0x505/0x830 [ 1151.944966][T17302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1151.950254][T17302] ? import_iovec+0x74/0xa0 [ 1151.954755][T17302] ___sys_sendmsg+0x21f/0x2a0 [ 1151.959422][T17302] ? __pfx____sys_sendmsg+0x10/0x10 [ 1151.964627][T17302] ? __fget_files+0x2a/0x420 [ 1151.969212][T17302] ? __fget_files+0x3a0/0x420 [ 1151.973911][T17302] __x64_sys_sendmsg+0x19b/0x260 [ 1151.978948][T17302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1151.984413][T17302] ? rcu_is_watching+0x15/0xb0 [ 1151.989174][T17302] ? do_syscall_64+0xbe/0x3b0 [ 1151.993864][T17302] do_syscall_64+0xfa/0x3b0 [ 1151.998373][T17302] ? lockdep_hardirqs_on+0x9c/0x150 [ 1152.003564][T17302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.009703][T17302] ? clear_bhb_loop+0x60/0xb0 [ 1152.014540][T17302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.020463][T17302] RIP: 0033:0x7f604458eb69 [ 1152.024889][T17302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1152.044482][T17302] RSP: 002b:00007f60443f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1152.052884][T17302] RAX: ffffffffffffffda RBX: 00007f60447b5fa0 RCX: 00007f604458eb69 [ 1152.060847][T17302] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 1152.068804][T17302] RBP: 00007f6044611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1152.076847][T17302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.084885][T17302] R13: 0000000000000000 R14: 00007f60447b5fa0 R15: 00007ffd50c87da8 [ 1152.092874][T17302] [ 1152.096222][T17302] Kernel Offset: disabled [ 1152.100551][T17302] Rebooting in 86400 seconds..