last executing test programs: 3m47.41996791s ago: executing program 1 (id=562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$caif_stream(0x25, 0x1, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xa00, 0x0, 0x7fffffff}, 0x0, 0x0) 3m46.514230858s ago: executing program 1 (id=564): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) capset(0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) add_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000040), 0x0, r2) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x7, 0x0, 0x0, 0xfffffffe}, 0x1c) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x1, 0xfffffffffffffffc, 0x0, 0x6}) sendmsg(r1, &(0x7f0000000980)={&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x80, 0x5, "867f2c5db1bd4857b4a8c842371386a14bc0c1fe87f04bee6daa351581b8eb8cccdebc254a904168d2e77970f0570dc75039be790b74bc4de51b5f31ee3087", 0x2d}, 0x80, &(0x7f0000000800)=[{&(0x7f00000003c0)="62c6f016fcea47a2e55371a510714c885866a069ee92449777be1f3dea21b70cc097322c0379dae9224dcb9d4c56e0c6373532cfc22c1859c0cc249f1820245f0fef016cb8076720a86a164983bda220", 0x50}, {&(0x7f0000000480)="7f03810347dea1912ce86183609d07b3f06a34a5265a1c9523a499591a09c7e9da080c22016552e3d1ac77a1f6644c07766c91ec50073d45c5c459a8f3b864ba6210733d4830a417b5c8d84efc656d0a514d0b9bd707f3661d2a3a961f34c76333b65d937bf9987280112bcf85cb6a1eacfd551927a58a7aae9d8c0796d03eae701f5db56f06c10935da3a4fee2d334768f7dd2026cb70e44322", 0x9a}, {&(0x7f0000000540)="8e807165941176911e325577e4532b20898163bec295", 0x16}, {&(0x7f0000000580)="964bb6b90dc9abaffc27fd1cc46a7c1997bc1e39485b5cbac9a17b070621211e74bb195d5cadebc74ecb09bd9d1a9bde0b45aca79159b9d956c18c949249e417accd3a1bcbe34dea91584b7971c334090e98876c87fbfb7df8c13eb4330f47dabd18ae1718eb1db092cd22d6396f1e3eccb88ca40f92a2ddb81df474e8341d61e5717620a8fb1800449e8aaf704340149f66d30362ab0eeb56fcb3c84309555eb815a537cac8d2202e0780576f10812d92dc98c6e326f78cb401223edac38834a79e17de4cf502548200487482e0dd11bda9", 0xd2}, {&(0x7f00000006c0)="ebad140fbaf40d89ca0ba84f5f400abd7606a7fe1043451384c6d48292333dada1b877f6d8ff782c2472dcd727002c19a9f2402f5dba9e4914dab48354930e6db592ede70f", 0x45}, {&(0x7f0000000740)="842c7ba088070da6f290723b828d08d3e4dd466905fc822f43275cb8a5d9d10dd7d814ea8002f98dadb9ebc886485410d725b18b8232cf6a1c4514dba85435c013a9877ab4a8f9b91054611e62b0d0f9ca8706fafa02cfcf25abb5e2bfd19cb123916b0a6a04e284", 0x68}], 0x6, &(0x7f0000000880)=[{0x98, 0x102, 0x9, "899645070b0701b156921791ecaa2ae9e990a682522b86d5ff35cb8ae7f6efe5fe06ba2b66dad41f71b5fd966a9ec3b681321ffe30be758f0a2e61db28db18794b8e7f425a4f5cf86cd960d3e71b57836ef72b39a412cf72ca674bd1faafc004271959badb74b14f5d4ee1ea8bb93aa0bd6ed3cdd57fda2a8e5d0ca71e0b4e58392bfc9f74"}, {0x40, 0x102, 0x3, "32f220150386d09c572e0b54d88bed84d663415c9520c4b9a47a6a28fab04e2aad277a6946d1a8cd1e3aeb489ef5"}], 0xd8}, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 3m45.490260396s ago: executing program 1 (id=565): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x8400000000000000, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0xfffff9, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 3m45.352241365s ago: executing program 1 (id=566): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000700f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49ebfc7a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 3m45.325376834s ago: executing program 1 (id=567): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x6, 0x8, 0x81, 0x101, 0x16, "4d349c1d49fb36b70f98786244308846cecef5"}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) syz_emit_ethernet(0x82, &(0x7f0000000880)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x5083}) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) io_setup(0x6, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00D', 0xa, 0x7, 0x0, 0x2}]) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) 3m42.060481756s ago: executing program 1 (id=575): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) capset(0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) add_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000040), 0x0, r2) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x7, 0x0, 0x0, 0xfffffffe}, 0x1c) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x1, 0xfffffffffffffffc, 0x0, 0x6}) sendmsg(r1, &(0x7f0000000980)={&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x80, 0x5, "867f2c5db1bd4857b4a8c842371386a14bc0c1fe87f04bee6daa351581b8eb8cccdebc254a904168d2e77970f0570dc75039be790b74bc4de51b5f31ee3087", 0x2d}, 0x80, &(0x7f0000000800)=[{&(0x7f00000003c0)="62c6f016fcea47a2e55371a510714c885866a069ee92449777be1f3dea21b70cc097322c0379dae9224dcb9d4c56e0c6373532cfc22c1859c0cc249f1820245f0fef016cb8076720a86a164983bda220", 0x50}, {&(0x7f0000000480)="7f03810347dea1912ce86183609d07b3f06a34a5265a1c9523a499591a09c7e9da080c22016552e3d1ac77a1f6644c07766c91ec50073d45c5c459a8f3b864ba6210733d4830a417b5c8d84efc656d0a514d0b9bd707f3661d2a3a961f34c76333b65d937bf9987280112bcf85cb6a1eacfd551927a58a7aae9d8c0796d03eae701f5db56f06c10935da3a4fee2d334768f7dd2026cb70e44322", 0x9a}, {&(0x7f0000000540)="8e807165941176911e325577e4532b20898163bec295", 0x16}, {&(0x7f0000000580)="964bb6b90dc9abaffc27fd1cc46a7c1997bc1e39485b5cbac9a17b070621211e74bb195d5cadebc74ecb09bd9d1a9bde0b45aca79159b9d956c18c949249e417accd3a1bcbe34dea91584b7971c334090e98876c87fbfb7df8c13eb4330f47dabd18ae1718eb1db092cd22d6396f1e3eccb88ca40f92a2ddb81df474e8341d61e5717620a8fb1800449e8aaf704340149f66d30362ab0eeb56fcb3c84309555eb815a537cac8d2202e0780576f10812d92dc98c6e326f78cb401223edac38834a79e17de4cf502548200487482e0dd11bda9", 0xd2}, {&(0x7f00000006c0)="ebad140fbaf40d89ca0ba84f5f400abd7606a7fe1043451384c6d48292333dada1b877f6d8ff782c2472dcd727002c19a9f2402f5dba9e4914dab48354930e6db592ede70f", 0x45}, {&(0x7f0000000740)="842c7ba088070da6f290723b828d08d3e4dd466905fc822f43275cb8a5d9d10dd7d814ea8002f98dadb9ebc886485410d725b18b8232cf6a1c4514dba85435c013a9877ab4a8f9b91054611e62b0d0f9ca8706fafa02cfcf25abb5e2bfd19cb123916b0a6a04e284", 0x68}], 0x6, &(0x7f0000000880)=[{0x98, 0x102, 0x9, "899645070b0701b156921791ecaa2ae9e990a682522b86d5ff35cb8ae7f6efe5fe06ba2b66dad41f71b5fd966a9ec3b681321ffe30be758f0a2e61db28db18794b8e7f425a4f5cf86cd960d3e71b57836ef72b39a412cf72ca674bd1faafc004271959badb74b14f5d4ee1ea8bb93aa0bd6ed3cdd57fda2a8e5d0ca71e0b4e58392bfc9f74"}, {0x40, 0x102, 0x3, "32f220150386d09c572e0b54d88bed84d663415c9520c4b9a47a6a28fab04e2aad277a6946d1a8cd1e3aeb489ef5"}], 0xd8}, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 3m26.968723656s ago: executing program 32 (id=575): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) capset(0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) add_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000040), 0x0, r2) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x7, 0x0, 0x0, 0xfffffffe}, 0x1c) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x1, 0xfffffffffffffffc, 0x0, 0x6}) sendmsg(r1, &(0x7f0000000980)={&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x80, 0x5, "867f2c5db1bd4857b4a8c842371386a14bc0c1fe87f04bee6daa351581b8eb8cccdebc254a904168d2e77970f0570dc75039be790b74bc4de51b5f31ee3087", 0x2d}, 0x80, &(0x7f0000000800)=[{&(0x7f00000003c0)="62c6f016fcea47a2e55371a510714c885866a069ee92449777be1f3dea21b70cc097322c0379dae9224dcb9d4c56e0c6373532cfc22c1859c0cc249f1820245f0fef016cb8076720a86a164983bda220", 0x50}, {&(0x7f0000000480)="7f03810347dea1912ce86183609d07b3f06a34a5265a1c9523a499591a09c7e9da080c22016552e3d1ac77a1f6644c07766c91ec50073d45c5c459a8f3b864ba6210733d4830a417b5c8d84efc656d0a514d0b9bd707f3661d2a3a961f34c76333b65d937bf9987280112bcf85cb6a1eacfd551927a58a7aae9d8c0796d03eae701f5db56f06c10935da3a4fee2d334768f7dd2026cb70e44322", 0x9a}, {&(0x7f0000000540)="8e807165941176911e325577e4532b20898163bec295", 0x16}, {&(0x7f0000000580)="964bb6b90dc9abaffc27fd1cc46a7c1997bc1e39485b5cbac9a17b070621211e74bb195d5cadebc74ecb09bd9d1a9bde0b45aca79159b9d956c18c949249e417accd3a1bcbe34dea91584b7971c334090e98876c87fbfb7df8c13eb4330f47dabd18ae1718eb1db092cd22d6396f1e3eccb88ca40f92a2ddb81df474e8341d61e5717620a8fb1800449e8aaf704340149f66d30362ab0eeb56fcb3c84309555eb815a537cac8d2202e0780576f10812d92dc98c6e326f78cb401223edac38834a79e17de4cf502548200487482e0dd11bda9", 0xd2}, {&(0x7f00000006c0)="ebad140fbaf40d89ca0ba84f5f400abd7606a7fe1043451384c6d48292333dada1b877f6d8ff782c2472dcd727002c19a9f2402f5dba9e4914dab48354930e6db592ede70f", 0x45}, {&(0x7f0000000740)="842c7ba088070da6f290723b828d08d3e4dd466905fc822f43275cb8a5d9d10dd7d814ea8002f98dadb9ebc886485410d725b18b8232cf6a1c4514dba85435c013a9877ab4a8f9b91054611e62b0d0f9ca8706fafa02cfcf25abb5e2bfd19cb123916b0a6a04e284", 0x68}], 0x6, &(0x7f0000000880)=[{0x98, 0x102, 0x9, "899645070b0701b156921791ecaa2ae9e990a682522b86d5ff35cb8ae7f6efe5fe06ba2b66dad41f71b5fd966a9ec3b681321ffe30be758f0a2e61db28db18794b8e7f425a4f5cf86cd960d3e71b57836ef72b39a412cf72ca674bd1faafc004271959badb74b14f5d4ee1ea8bb93aa0bd6ed3cdd57fda2a8e5d0ca71e0b4e58392bfc9f74"}, {0x40, 0x102, 0x3, "32f220150386d09c572e0b54d88bed84d663415c9520c4b9a47a6a28fab04e2aad277a6946d1a8cd1e3aeb489ef5"}], 0xd8}, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 1m46.302979712s ago: executing program 3 (id=420): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x22, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x940c, 0x3002, 0x320, 0x2c0, 0x440, 0x3d8, 0x3d8, 0x440, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffff00, 0xffff00, 0x0, 0xff000000], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xffffff00], 0x4d6, 0x3505, 0x5e, 0x1, 0x7, 0x1e}, {@ipv6=@local, [0x0, 0x0, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0x0, 0xff000000], 0x4d4, 0x3504, 0x33, 0x1, 0x12}, {@ipv4=@remote, [0x2003, 0xff, 0x0, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, [0xff, 0xffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x2c, 0x1, 0xb, 0x7}, {@ipv4=@private=0xa010102, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv6=@remote, [0xef7a3ce5cc6f2af0, 0x0, 0xffffff00, 0xffffff00], 0x4d2, 0x3507, 0x5e, 0x1, 0xa, 0x1e}], 0x3, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xc33e1565a1dcd696, 0xff000000], 'veth1_to_bond\x00', 'erspan0\x00', {}, {0xff}, 0xc, 0x8, 0x2, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0x1, 0x2, 0x0, 0x1, 0x182, 0x2214}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x9, 0x7, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 1m28.738990992s ago: executing program 3 (id=420): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x22, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x940c, 0x3002, 0x320, 0x2c0, 0x440, 0x3d8, 0x3d8, 0x440, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffff00, 0xffff00, 0x0, 0xff000000], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xffffff00], 0x4d6, 0x3505, 0x5e, 0x1, 0x7, 0x1e}, {@ipv6=@local, [0x0, 0x0, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0x0, 0xff000000], 0x4d4, 0x3504, 0x33, 0x1, 0x12}, {@ipv4=@remote, [0x2003, 0xff, 0x0, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, [0xff, 0xffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x2c, 0x1, 0xb, 0x7}, {@ipv4=@private=0xa010102, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv6=@remote, [0xef7a3ce5cc6f2af0, 0x0, 0xffffff00, 0xffffff00], 0x4d2, 0x3507, 0x5e, 0x1, 0xa, 0x1e}], 0x3, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xc33e1565a1dcd696, 0xff000000], 'veth1_to_bond\x00', 'erspan0\x00', {}, {0xff}, 0xc, 0x8, 0x2, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0x1, 0x2, 0x0, 0x1, 0x182, 0x2214}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x9, 0x7, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 1m7.720719891s ago: executing program 3 (id=420): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x22, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x940c, 0x3002, 0x320, 0x2c0, 0x440, 0x3d8, 0x3d8, 0x440, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffff00, 0xffff00, 0x0, 0xff000000], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xffffff00], 0x4d6, 0x3505, 0x5e, 0x1, 0x7, 0x1e}, {@ipv6=@local, [0x0, 0x0, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0x0, 0xff000000], 0x4d4, 0x3504, 0x33, 0x1, 0x12}, {@ipv4=@remote, [0x2003, 0xff, 0x0, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, [0xff, 0xffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x2c, 0x1, 0xb, 0x7}, {@ipv4=@private=0xa010102, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv6=@remote, [0xef7a3ce5cc6f2af0, 0x0, 0xffffff00, 0xffffff00], 0x4d2, 0x3507, 0x5e, 0x1, 0xa, 0x1e}], 0x3, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xc33e1565a1dcd696, 0xff000000], 'veth1_to_bond\x00', 'erspan0\x00', {}, {0xff}, 0xc, 0x8, 0x2, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0x1, 0x2, 0x0, 0x1, 0x182, 0x2214}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x9, 0x7, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 53.26907461s ago: executing program 3 (id=420): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x22, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x940c, 0x3002, 0x320, 0x2c0, 0x440, 0x3d8, 0x3d8, 0x440, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffff00, 0xffff00, 0x0, 0xff000000], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xffffff00], 0x4d6, 0x3505, 0x5e, 0x1, 0x7, 0x1e}, {@ipv6=@local, [0x0, 0x0, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0x0, 0xff000000], 0x4d4, 0x3504, 0x33, 0x1, 0x12}, {@ipv4=@remote, [0x2003, 0xff, 0x0, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, [0xff, 0xffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x2c, 0x1, 0xb, 0x7}, {@ipv4=@private=0xa010102, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv6=@remote, [0xef7a3ce5cc6f2af0, 0x0, 0xffffff00, 0xffffff00], 0x4d2, 0x3507, 0x5e, 0x1, 0xa, 0x1e}], 0x3, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xc33e1565a1dcd696, 0xff000000], 'veth1_to_bond\x00', 'erspan0\x00', {}, {0xff}, 0xc, 0x8, 0x2, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0x1, 0x2, 0x0, 0x1, 0x182, 0x2214}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x9, 0x7, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 33.032023199s ago: executing program 3 (id=420): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x22, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x940c, 0x3002, 0x320, 0x2c0, 0x440, 0x3d8, 0x3d8, 0x440, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffff00, 0xffff00, 0x0, 0xff000000], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xffffff00], 0x4d6, 0x3505, 0x5e, 0x1, 0x7, 0x1e}, {@ipv6=@local, [0x0, 0x0, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0x0, 0xff000000], 0x4d4, 0x3504, 0x33, 0x1, 0x12}, {@ipv4=@remote, [0x2003, 0xff, 0x0, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, [0xff, 0xffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x2c, 0x1, 0xb, 0x7}, {@ipv4=@private=0xa010102, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv6=@remote, [0xef7a3ce5cc6f2af0, 0x0, 0xffffff00, 0xffffff00], 0x4d2, 0x3507, 0x5e, 0x1, 0xa, 0x1e}], 0x3, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xc33e1565a1dcd696, 0xff000000], 'veth1_to_bond\x00', 'erspan0\x00', {}, {0xff}, 0xc, 0x8, 0x2, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0x1, 0x2, 0x0, 0x1, 0x182, 0x2214}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x9, 0x7, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 14.495475042s ago: executing program 3 (id=420): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x22, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x940c, 0x3002, 0x320, 0x2c0, 0x440, 0x3d8, 0x3d8, 0x440, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffff00, 0xffff00, 0x0, 0xff000000], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xffffff00], 0x4d6, 0x3505, 0x5e, 0x1, 0x7, 0x1e}, {@ipv6=@local, [0x0, 0x0, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0x0, 0xff000000], 0x4d4, 0x3504, 0x33, 0x1, 0x12}, {@ipv4=@remote, [0x2003, 0xff, 0x0, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, [0xff, 0xffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x2c, 0x1, 0xb, 0x7}, {@ipv4=@private=0xa010102, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv6=@remote, [0xef7a3ce5cc6f2af0, 0x0, 0xffffff00, 0xffffff00], 0x4d2, 0x3507, 0x5e, 0x1, 0xa, 0x1e}], 0x3, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xc33e1565a1dcd696, 0xff000000], 'veth1_to_bond\x00', 'erspan0\x00', {}, {0xff}, 0xc, 0x8, 0x2, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0x1, 0x2, 0x0, 0x1, 0x182, 0x2214}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x9, 0x7, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 7.592072594s ago: executing program 2 (id=1216): syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x1000f42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0xfeff, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) eventfd2(0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0x6}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffff8, 0xfff, 0xd}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) syz_open_dev$ptys(0xc, 0x3, 0x1) 6.822661991s ago: executing program 4 (id=1218): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9}}, 0x0, 0x0, 0x14, 0x0, "e541b93d3aa6a2bf75e9671e8abcb31c134f63186c7244fc3b3801e79f15ce5bce05c13ed90158fbdeb70322ea3188f818e3db00000000000000000000000000edfab3ba3ff2f05700"}, 0xd8) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x11, 0x5, 0x0, 0x0, {[@md5sig={0x13, 0x12, "9352d97000000000998100"}]}}}}}}}, 0x0) 6.708307087s ago: executing program 4 (id=1219): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x14, 0x1e, 0x901, 0x3, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xffffff64}}, 0x0) 6.661998212s ago: executing program 2 (id=1221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.258450529s ago: executing program 2 (id=1223): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xd04f, 0xa59}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x18) membarrier(0x2, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@any, 0x5c}) 6.03845755s ago: executing program 5 (id=1224): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) 5.440381152s ago: executing program 2 (id=1226): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60c9000000023a00fe8000000000000000000000580000bbff02"], 0x0) 5.207784043s ago: executing program 2 (id=1227): socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x3f00, 0x9, 0x10, 0x200, &(0x7f0000000180)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949e496f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7963e43b7f9c03bebfb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x20000000000002da, &(0x7f0000000580)=ANY=[@ANYRES8], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 5.110504889s ago: executing program 0 (id=1228): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.344350123s ago: executing program 5 (id=1229): capset(&(0x7f0000000740)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffb}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000000c0)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 4.334678266s ago: executing program 4 (id=1230): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x1000, 0x800c95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0xb, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c70, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xfffffffe, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0xfffffffc, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0xfffffffa, 0x9, 0x8000012f, 0x8004, 0x2, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0x4, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x8, 0x1, 0xfe000000, 0x8, 0x0, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x1f, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x40b, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x526, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0x8000000b, 0x5, 0x6, 0x3, 0x400003, 0x20040008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x0, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xab, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ef, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x8, 0xffff, 0xa620, 0x519, 0x5, 0x1, 0x2000002, 0x14c, 0x5, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x4, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x7, 0x6c1b, 0xfffffffe, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0x23) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) socket$vsock_stream(0x28, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_pauseparam={0x13, 0xe2, 0xcc, 0xffffffff}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x1, r5, 0x0, 0x0, 0xf, 0x100, 0x1}) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x358, 0xffffffff8df26da0) sendmsg$nl_generic(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)={0x3e0, 0x17, 0x20, 0x70bd2b, 0x25dfdbfc, {0x1b}, [@generic="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", @generic="485bc779824f1eddfc28eb43d42deb78b82071643842924a9d95fb4bb2278af4343551194c8dfeedbabb7df2576649ce5f5839253ca3a55b4ddc6fbe2e66a052", @typed={0xc, 0xb, 0x0, 0x0, @u64=0x45e}, @nested={0x125, 0xa1, 0x0, 0x1, [@generic="ebd1ff013ec24b87c970f22a5caae0c5280cb612a8ef2024f5127fda137eb26952ac0d58fc5bcb0da2da5bcdb6e934eb1a1d705cfcfdc7c4dc999e6d01b12a80de3670a728b93c9d8e6f6511792c8244ba6231af327e8cba39e2dfc2ee1cb94db766a5858c2b51201532457ca6fc6cc9a6228f22ed9645905cecbca621503b24249c6e70391acc751ad4ff56b28c82960175513bba84cac584726069c8c6b79c47cfe6c59622926641", @typed={0x66, 0xc8, 0x0, 0x0, @binary="5c443e02025097440c29437f9d12d8795a2b800c80d02ae6c07a485296be35d819bf718b529924a76a659d3d9265138c4a0558bd00f216778ef1421eeb113b5e787d3891666539f1d1cbe2ff9a28ddeb55991da85903f8c8e6bb970f8d9fb3d69066"}, @typed={0x8, 0x129, 0x0, 0x0, @fd=r2}, @typed={0x5, 0x118, 0x0, 0x0, @str='\x00'}]}, @nested={0x156, 0xe7, 0x0, 0x1, [@typed={0x1c, 0x12e, 0x0, 0x0, @binary="e1f5b6acc28e4728affcf1d576388e1f2e8897036c76327d"}, @generic="ae7963caf676e4f0036185aa4cbf490a45a93c50ffa7bc214bd45e4bcb2ebdee81e80f4a44e31b14cb67f1a76679fb66d52eaa8d9b90d8713540bee7862137281572733d8c", @generic="0de0793e1ec9861efc1d27a075daa2161699b73faaefb462a285487ee4b18fe56ae11353bbe6d64cd1563453836eceda010137c394ffc4eedcc2d7c8e8c7489ebb176e6a7120739d318b7ab38abeae965b35ba52a80e1fbc449b200c8c162ee8e3ba3d554faaf070afcb45dfb9ff638e541c6bd50ea92040a87a192f40f21ca3e75443d2c8ba3498529838a64c7f08e57bea7f347a0e51130710aace2496b184f914401bfbdcfa33cb0657a4403e76328071845adcb7fe83eea1c71ea9bcf97ef60d90317086eb11530775be960319be4cd0186fdf37d9677aa1a63918c38456c0b9d610754c0df35e2810c886", @nested={0x4, 0xed}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0xc41}, 0x11) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="4f3bfde51b257f40b196249654f934f1f14fb37b10", 0x15}], 0x1) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'virt_wifi0\x00', @broadcast}) 4.33006109s ago: executing program 0 (id=1231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000060000000000000000104004e200023b0"], 0x0) 4.190529701s ago: executing program 2 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) 3.504020704s ago: executing program 0 (id=1233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) keyctl$KEYCTL_WATCH_KEY(0x2, 0x0, 0xffffffffffffffff, 0xd9) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f00000003c0)="2efbf7", 0x3}], 0x1, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) listen(r7, 0x0) connect$ax25(r7, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.503110975s ago: executing program 5 (id=1234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x109040, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000008, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2.513432035s ago: executing program 4 (id=1235): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) chroot(&(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000de0000/0x3000)=nil, 0x3000, 0xe) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000440)=""/198) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24041, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r2, &(0x7f0000000140)=""/68, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) get_mempolicy(&(0x7f0000000180), &(0x7f0000000240), 0x8, &(0x7f0000ea3000/0x1000)=nil, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) 2.389814273s ago: executing program 5 (id=1236): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x103480, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) 1.931992701s ago: executing program 0 (id=1237): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcb}}, './file0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0_to_bond\x00', 0x1000}) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='%:[\x00', 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000040)=0xfffffffd, 0x4) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.885205824s ago: executing program 4 (id=1238): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1f}], 0x1, 0x8, 0x7, 0x4) 1.63210932s ago: executing program 0 (id=1239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f00000000c0)='./file0/../file0\x00', r5, 0x0, 0x262) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x0, 0x8}) setpriority(0x2, 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) 741.872501ms ago: executing program 4 (id=1240): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x10180, 0x0) socket(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) add_key(&(0x7f00000000c0)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bind$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xf5, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x1ce) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x8) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0) 234.484148ms ago: executing program 5 (id=1241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000ffffffffffffff8000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) 118.211403ms ago: executing program 0 (id=1242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000680)={0x4, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @private=0xa010101}}}, 0x108) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x40, 0x6, 0x7, {0x7, 0x10, "0000001800"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1e71, 0x200e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x10, 0x29, [{{0x9, 0x4, 0x0, 0x47, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x5, 0xe4, 0x1, {0x22, 0x959}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x5, 0x1b}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0x8, 0x3}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xf, 0x5, 0x9, 0x40, 0x39}, 0xba, &(0x7f0000000100)={0x5, 0xf, 0xba, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xa5, 0x10, 0x3, "93c83c970b76a4ecdac42bfe2028d6d9ba0772f5b931cfdbba3d9f5992dc5d75493d6402835067aeb0bfb0b19448038ef259dd3db0f54591785b40b0bc32bf526f8aa6e54cf1d13480e2c4f6982cea576f7e8970cd17215573032668d9c206d365bb2c9f3db0ba4e74e2cc5223704a6026fd1547eeab4b2157111ed091b4d247d55f6f1e1f92b628f7bd2c1eeab77c579346261474b99cc9b9876edd1bc3dabf68d2"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xb, 0x308}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x5c, &(0x7f0000000200)=@string={0x5c, 0x3, "98944e823ff6e037daccb236ab0747d5fffe51dda443e7ee489ba90424e9da9f49310e4c6565f3a21465bea7a4ee3e5797efcd0de4852111f4546bacda5ef8e4c5092e147bc89918daf616b18a935aa77d7e9ba634214cf341da"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40e}}]}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x3, "da7ec1"}, 0x0}) 0s ago: executing program 5 (id=1243): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r0}]}}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="eb01000000004820e1050804112501020301090224000100000039090c17e3adb62aff29030b5b287f040000022ec25d001e0509000000000000090503010000000000"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0xd3, 0x78}}]}}]}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bdf000b568008706"], 0x1c}, 0x1, 0x200000000000000, 0x0, 0x2000805}, 0x10) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002500)=@newchain={0xd60, 0x64, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff9}, {0x0, 0x8}, {0xf005f06f9dee0c73, 0xa}}, [@f_rsvp={{0x9}, {0x810, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x200, 0x2, 0x0, 0x9, 0x0, 0x1ff, 0x7, 0x80000000, 0x0, 0xf36, 0x1a, 0x7fffffff, 0x4, 0x7, 0x3, 0x8, 0xffffffff, 0xffffffff, 0x3, 0x4, 0x2, 0xfffffff9, 0x0, 0x6, 0x7, 0x5, 0x1, 0x65, 0x5, 0x5, 0x7, 0x9, 0x9, 0x10, 0x7, 0x6, 0x7, 0x7, 0x1000, 0xa94, 0x4, 0x101, 0x2, 0xfff, 0x7fff, 0xff000000, 0x7, 0x6, 0x4, 0x9c6, 0x4, 0x6, 0x4, 0xd, 0x5, 0xc5b7, 0x0, 0x1, 0x401, 0x0, 0xfffffffc, 0x9, 0x0, 0x7, 0x0, 0x3, 0x8001, 0x5, 0x101, 0xa, 0x0, 0x9, 0x3, 0x80000000, 0x8001, 0x8, 0x4, 0x1, 0x3, 0x80, 0xe00b, 0x7, 0xd15, 0xff, 0x5, 0x5, 0x2e7b, 0x2, 0x7ff, 0x0, 0x8000, 0x7, 0x10001, 0x7fff, 0x3, 0x7, 0xf, 0xd, 0x264, 0x200, 0x3, 0xb23, 0x8, 0x5, 0x9, 0x4, 0x1, 0xe1f, 0x3, 0x1, 0x5, 0x5, 0x4, 0x5, 0x868, 0x3, 0xb, 0x5, 0x3, 0x7, 0x6, 0x8, 0x8, 0x400, 0x0, 0x43, 0x1, 0x2000, 0x101, 0x73f, 0xa03, 0x280, 0x3be, 0x1, 0x0, 0x6, 0x0, 0x4, 0x5, 0x6, 0xac, 0x8000, 0x5, 0x400, 0xfffff63a, 0x1, 0x4, 0x8, 0x7, 0x1, 0x0, 0x9, 0x1000, 0xfff, 0x8, 0xd9d, 0x1, 0x7, 0x4202, 0x5, 0x2, 0x6, 0x4c7f, 0x62, 0x4, 0xe, 0x2, 0x8, 0x5, 0x8, 0xc7b, 0x33, 0xffffffff, 0x5, 0x5, 0x5, 0x0, 0x2, 0x2, 0xfb, 0x1, 0xd0, 0x0, 0xc7e, 0xdf7, 0x5, 0xf, 0x316e, 0x80, 0x101, 0xaaf1, 0x2a, 0x6, 0x57, 0x5, 0xb, 0x7, 0x0, 0x0, 0x1, 0x8000, 0x8, 0x3, 0x35, 0xffff0000, 0x1, 0x167, 0x3, 0x6, 0x5, 0x8000, 0x7, 0xa, 0x5, 0x7d, 0x2, 0x3, 0xceb, 0x1, 0x40000000, 0xfffffff7, 0xfff, 0x3, 0xffffffff, 0x8, 0x8a0, 0x0, 0x9631, 0x800, 0x7, 0x8, 0x29, 0x3, 0x3, 0x2, 0x1, 0x100, 0xdb000000, 0xa, 0x7, 0x1, 0x4, 0x190, 0xf55, 0x10, 0x6, 0x80000000, 0x0, 0x4, 0x10, 0x1ff, 0x5, 0x7c, 0xffff0001, 0xc7200000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x1, 0x80, 0x6, 0x3, 0x2, 0xf, 0x7, 0xd, 0x1, 0x3, 0x7, 0x800, 0xffffeb99, 0x0, 0x0, 0x8e87, 0xed, 0x0, 0xdf, 0x2, 0x800, 0x0, 0x490, 0x94be, 0x1, 0x0, 0x0, 0x7, 0x6, 0x2, 0x80000000, 0xf14f, 0x4, 0x2, 0x4, 0x5, 0xec67, 0xffff, 0x7f, 0x8, 0x9, 0xffffffff, 0x487364d9, 0x4, 0x7, 0x2, 0x3, 0xfffffffb, 0x2, 0x100, 0x9, 0x0, 0x1, 0x80000, 0x3, 0x1, 0xffff, 0x6, 0x53f3, 0x1, 0x3, 0x6, 0x1, 0xfffffffb, 0xa, 0xfff, 0x9, 0x7, 0x5, 0x0, 0x7, 0x4ca, 0x5, 0xfffffffb, 0xfffffffd, 0x7, 0x80000000, 0xfb, 0xffffffff, 0x0, 0x9, 0x1eac, 0xa8, 0x100, 0x8, 0xfffffffb, 0x4, 0x7fffffff, 0x1000, 0x800000, 0x8, 0xe, 0x0, 0x0, 0xd50, 0x295, 0x0, 0x6, 0x3, 0xffffff19, 0x2, 0x5, 0x3, 0x8, 0x2, 0x8000, 0x4, 0x5, 0x8, 0x4dd, 0x800, 0x3, 0x1, 0x9, 0x7, 0x2d, 0x2, 0x2, 0x0, 0x1, 0x7, 0x7, 0x2, 0x0, 0x8, 0x3, 0x3, 0x5, 0x6, 0x5, 0x401, 0x7fffffff, 0xfff, 0x2, 0xfffffeff, 0x3, 0x5, 0x2e47, 0x905, 0x7fff, 0xa94, 0x4, 0x1, 0x2, 0xffff, 0xfffffffe, 0x5, 0xfffffff1, 0x1, 0x7, 0xcf, 0xf, 0x80000001, 0x5a11, 0x9, 0x1, 0xfffffffd, 0x17a94dee, 0x6, 0x4, 0x100, 0x80000000, 0x5, 0x1ff, 0x9, 0x3, 0x6, 0x9, 0xfff, 0xc5e7, 0x6, 0x200, 0x8b6f, 0xfffffffe, 0x4c2, 0x9, 0x53b, 0x80000004, 0x3, 0xc8, 0x1, 0xbad, 0x7, 0x7ff, 0x9d, 0xeb, 0x2, 0x68, 0xc0100000, 0x0, 0x40, 0x80000001, 0x0, 0xfff, 0x5, 0x6, 0x5, 0x4, 0xfffffff7, 0x7, 0x80, 0x3, 0x91, 0x5, 0xa2b, 0x8, 0x3, 0x2, 0x7, 0x0, 0x5, 0x0, 0x8021, 0xa, 0x4, 0x4, 0xb, 0x6bf3, 0x8001, 0x9, 0x0, 0x4, 0x80000000, 0xe, 0x5, 0x3c, 0x7, 0xfffffffc, 0x5583, 0x8, 0x7, 0xfffffffc, 0x8, 0x1, 0x2, 0x9, 0xffffffff, 0x1ff, 0x6, 0x8, 0x1400000, 0x4, 0xfffffffb, 0x4, 0xffffff80, 0x8, 0xf, 0x80, 0xf, 0x5, 0x80000000, 0x7, 0x1, 0x4, 0x4]}]}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8}]}}, @f_rsvp={{0x9}, {0x4fc, 0x2, [@TCA_RSVP_ACT={0x4f8, 0x6, [@m_nat={0x148, 0x11, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xf, 0x2, 0x4, 0xffff}, @rand_addr=0x64010100, @rand_addr=0x64010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x4, 0x5, 0xffffff81, 0x1}, @multicast2, @dev={0xac, 0x14, 0x14, 0x81}, 0xff}}]}, {0xcd, 0x6, "086c4df742d449147fd1d20c6dd972294cd065a908e01a577ba4d94626a8344ad8bdba5d9c8a5d3bdc711172b3283551b21750772f5d41988dd24aeb1da61c3bdd06cbd00aafcccb5e964624e7cad1e11cbd092853625faccd55112ea8e914f623df7aa619c25c697c1eb3cc9c923536129ab6b1e3f065e8da0580e9cba42e64f2ace9e03d216b9947c439488b5056c4ddcc480d7ed6fa228ba59d4929cc31c7e6bf277da9c5e11bcf8cb8f08173fc93f997caca73ef6b05720afa9737ea62d641de8dfd3bb3c1e8cf"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x3ac, 0x1a, 0x0, 0x0, {{0xf}, {0x4}, {0x379, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xd60}, 0x1, 0x0, 0x0, 0x20000005}, 0x4800) recvmmsg$unix(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1}}], 0x1, 0x1, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r6 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x40009c0e, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) kernel console output (not intermixed with test programs): 47] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.294186][T10306] binder: BINDER_SET_CONTEXT_MGR already set [ 332.300167][T10306] binder: 10305:10306 ioctl 4018620d 200000000040 returned -16 [ 332.317394][T10147] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.429290][T10345] ALSA: mixer_oss: invalid OSS volume '' [ 332.889825][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.896926][ T6687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.930961][ T6502] usb 6-1: USB disconnect, device number 9 [ 332.956603][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.963730][ T6687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.073210][T10147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.090432][T10147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.191127][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 333.825203][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 333.838066][ T10] usb 5-1: config 225 has an invalid interface number: 75 but max is 0 [ 333.861031][T10147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.868297][ T10] usb 5-1: config 225 contains an unexpected descriptor of type 0x2, skipping [ 333.892159][ T10] usb 5-1: config 225 has an invalid descriptor of length 0, skipping remainder of the config [ 333.918564][ T10] usb 5-1: config 225 has no interface number 0 [ 333.942590][ T10] usb 5-1: config 225 interface 75 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 333.998366][T10147] veth0_vlan: entered promiscuous mode [ 334.006289][ T10] usb 5-1: config 225 interface 75 has no altsetting 0 [ 334.018177][T10147] veth1_vlan: entered promiscuous mode [ 334.026981][ T10] usb 5-1: New USB device found, idVendor=1b3d, idProduct=931f, bcdDevice= 0.a1 [ 334.040555][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.068625][ T10] usb 5-1: Product: 㨒䶔ã¤ì£˜ë©¸â­î˜šçº¼í™¯à¥“⺓⛨콳怭৯í«è­·á·žã¶ ášŸé¡¸ë·¦ã—ˆè¿ì£µá¬Ÿê‘•ê§‡åŸ™ë¨§è¢¢áº°è”ê¯à»ªá‰¨éˆ¸ì¦“椫涆킟贀䴩᳇줪苤꡾ҿ柎骾嶥ﴉ躮页ᨣ듚깇詩꩸痼⩽迶脷ç‘䀧竵뿧ⷄᆷ轰꾜꭪貖ᛋ듵 [ 334.101651][T10365] fuse: Unknown parameter 'grou00000000000000000000' [ 334.178776][T10147] veth0_macvtap: entered promiscuous mode [ 334.203136][ T10] usb 5-1: Manufacturer: Б [ 334.213451][T10147] veth1_macvtap: entered promiscuous mode [ 334.272218][T10147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.335468][T10147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.406260][T10147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.689126][T10147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.719608][T10147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.748212][T10348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.893310][T10348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.900740][T10147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.047507][ T10] ftdi_sio 5-1:225.75: FTDI USB Serial Device converter detected [ 335.096957][ T10] usb 5-1: Detected SIO [ 335.264708][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 335.812522][ T10] usb 5-1: USB disconnect, device number 32 [ 335.849829][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 335.923522][ T10] ftdi_sio 5-1:225.75: device disconnected [ 336.292527][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.352177][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.375414][ T30] audit: type=1326 audit(1750124103.618:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 336.381963][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 336.405970][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.429947][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.522603][ T30] audit: type=1326 audit(1750124103.618:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 336.635565][ T30] audit: type=1326 audit(1750124103.618:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 336.761412][ T30] audit: type=1326 audit(1750124103.618:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 336.883290][ T30] audit: type=1326 audit(1750124103.618:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 336.961540][ T30] audit: type=1326 audit(1750124103.618:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 337.041383][ T30] audit: type=1326 audit(1750124103.618:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 337.371681][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 337.521018][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 337.548610][ T10] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 337.568130][ T10] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 337.590424][ T10] usb 3-1: config 0 has no interface number 0 [ 337.606601][ T10] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 337.636942][ T10] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 337.668547][ T10] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 337.689073][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 337.711106][ T10] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 337.725242][ T10] usb 3-1: Product: syz [ 337.732263][ T10] usb 3-1: Manufacturer: syz [ 337.744303][ T10] usb 3-1: config 0 descriptor?? [ 337.752621][T10429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 337.930731][ T3763] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 338.122646][ T3763] usb 1-1: Using ep0 maxpacket: 32 [ 338.158096][ T3763] usb 1-1: config 0 interface 0 has no altsetting 0 [ 338.181131][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.213030][ T3763] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 338.230445][ T3763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.247818][ T3763] usb 1-1: Product: syz [ 338.278659][ T3763] usb 1-1: Manufacturer: syz [ 338.283633][ T3763] usb 1-1: SerialNumber: syz [ 338.296996][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.313889][ T3763] usb 1-1: config 0 descriptor?? [ 338.585001][ T10] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input35 [ 338.663435][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.759755][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.788237][ T5877] usb 3-1: USB disconnect, device number 31 [ 338.788277][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 338.806364][ T3763] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 338.816916][ T3763] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 338.914492][ T70] bridge_slave_1: left allmulticast mode [ 338.926261][ T70] bridge_slave_1: left promiscuous mode [ 338.933826][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.943645][ T70] bridge_slave_0: left allmulticast mode [ 338.949306][ T70] bridge_slave_0: left promiscuous mode [ 338.955974][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.287728][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.301654][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.314290][ T70] bond0 (unregistering): Released all slaves [ 339.549860][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 339.585535][T10466] netlink: 'syz.2.906': attribute type 5 has an invalid length. [ 339.598337][ T70] hsr_slave_0: left promiscuous mode [ 339.607045][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.906'. [ 339.616794][ T70] hsr_slave_1: left promiscuous mode [ 339.636779][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.660798][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.695573][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.721764][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.850703][ T6492] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 339.936593][ T70] veth1_macvtap: left promiscuous mode [ 339.951734][ T70] veth0_macvtap: left promiscuous mode [ 339.997710][ T70] veth1_vlan: left promiscuous mode [ 340.047786][ T70] veth0_vlan: left promiscuous mode [ 340.110497][ T6492] usb 5-1: Using ep0 maxpacket: 16 [ 340.120102][ T6492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.150540][ T6492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.185696][ T6492] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 340.197592][T10475] [U]  [ 340.213014][ T6492] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.234451][ T6492] usb 5-1: config 0 descriptor?? [ 340.301491][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.329565][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.344437][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.358235][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.367761][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.768748][ T6492] kye 0003:0458:5016.000D: control desc unexpectedly large [ 340.776679][ T6492] kye 0003:0458:5016.000D: control desc unexpectedly large [ 340.801715][ T6492] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.000D/input/input36 [ 340.819651][ T5877] usb 1-1: USB disconnect, device number 24 [ 340.946588][T10491] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.117051][ T3763] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 341.468048][T10498] ALSA: mixer_oss: invalid OSS volume '' [ 341.653065][ T3763] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 341.782935][ T3763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 341.906817][ T3763] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 342.022516][ T3763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.141436][ T3763] usb 6-1: Product: syz [ 342.195363][ T3763] usb 6-1: Manufacturer: syz [ 342.267070][ T3763] usb 6-1: SerialNumber: syz [ 342.372104][T10506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.911'. [ 342.394594][ T3763] usb 6-1: config 0 descriptor?? [ 342.421778][ T5829] Bluetooth: hci0: command tx timeout [ 342.460746][ T6492] kye 0003:0458:5016.000D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 342.578619][ T3763] em28xx 6-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 342.739056][ T3763] em28xx 6-1:0.0: Device initialization failed. [ 342.857859][ T3763] em28xx 6-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 343.053817][ T3763] usb 6-1: USB disconnect, device number 10 [ 343.723171][ T70] team0 (unregistering): Port device team_slave_1 removed [ 343.765041][ T70] team0 (unregistering): Port device team_slave_0 removed [ 344.520775][ T5829] Bluetooth: hci0: command tx timeout [ 344.576281][T10516] Falling back ldisc for ptm0. [ 344.665509][T10466] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 344.673830][T10466] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 344.682554][T10466] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 344.691316][T10466] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 344.699627][T10466] geneve3: entered promiscuous mode [ 344.705317][T10466] geneve3: entered allmulticast mode [ 344.804996][T10482] lo speed is unknown, defaulting to 1000 [ 344.982726][ T6492] usb 5-1: USB disconnect, device number 33 [ 346.594600][ T5829] Bluetooth: hci0: command tx timeout [ 346.709406][T10541] [U]  [ 346.782411][T10482] chnl_net:caif_netlink_parms(): no params data found [ 346.977398][T10560] Cannot find set identified by id 0 to match [ 347.036490][T10482] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.054063][ T6502] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 347.098309][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.125539][T10482] bridge_slave_0: entered allmulticast mode [ 347.133954][T10482] bridge_slave_0: entered promiscuous mode [ 347.151863][T10570] fuse: Unknown parameter 'group_i00000000000000000000' [ 347.250838][ T6502] usb 5-1: Using ep0 maxpacket: 32 [ 347.322981][T10482] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.330164][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.340811][T10482] bridge_slave_1: entered allmulticast mode [ 347.514452][ T6502] usb 5-1: config 1 interface 0 has no altsetting 0 [ 347.525453][T10482] bridge_slave_1: entered promiscuous mode [ 347.540509][ T6502] usb 5-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.40 [ 347.569665][ T6502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.598962][ T6502] usb 5-1: Product: 钘艎㟠쳚㚲ޫ핇䎤魈ҩ鿚ㅉ䰎敥ꋳ攔Ꞿ圾à·è—¤á„¡å“´ê±«å»šî“¸à§…á®ì¡»á¢™ï›šë„–鎊êšç¹½êš›â„´ïŒ [ 347.629059][ T6502] usb 5-1: Manufacturer: á ‰ [ 347.644517][ T6502] usb 5-1: SerialNumber: ÐŽ [ 347.653285][T10574] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 347.696692][T10482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.719624][T10482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.765185][T10482] team0: Port device team_slave_0 added [ 347.786096][T10482] team0: Port device team_slave_1 added [ 347.848155][T10482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.864598][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.909901][ T6502] usbhid 5-1:1.0: can't add hid device: -71 [ 347.917787][ T6502] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 347.926791][T10482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.944114][ T6502] usb 5-1: USB disconnect, device number 34 [ 347.960734][ T6492] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 347.986579][T10482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.080245][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.372052][T10592] xt_TPROXY: Can be used only with -p tcp or -p udp [ 348.380965][ T30] audit: type=1400 audit(1750124115.618:589): avc: denied { read } for pid=10586 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 348.766407][T10482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.780435][ T6492] usb 3-1: Using ep0 maxpacket: 8 [ 348.782188][ T5829] Bluetooth: hci0: command tx timeout [ 348.787386][ T6492] usb 3-1: unable to get BOS descriptor or descriptor too short [ 348.812154][ T6492] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 348.846763][ T6492] usb 3-1: config 8 has no interface number 0 [ 348.889066][ T6492] usb 3-1: config 8 interface 255 has no altsetting 0 [ 348.975910][ T6492] usb 3-1: string descriptor 0 read error: -22 [ 348.985678][T10482] hsr_slave_0: entered promiscuous mode [ 349.030598][ T6492] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 349.043107][T10482] hsr_slave_1: entered promiscuous mode [ 349.052193][ T6492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.709850][T10579] program syz.2.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.145884][ T6492] catc 3-1:8.255: Can't set altsetting 1. [ 350.172572][ T6492] catc 3-1:8.255: probe with driver catc failed with error -5 [ 350.228875][ T6492] usb 3-1: USB disconnect, device number 32 [ 350.885699][T10482] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 350.917572][T10482] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 350.952989][T10482] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.216771][T10626] trusted_key: encrypted_key: master key parameter 'defau,t' is invalid [ 351.345222][T10482] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.643439][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.938'. [ 351.687735][T10482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.032648][T10482] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.079885][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.087053][ T6088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.240326][T10650] [U]  [ 352.298041][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.305224][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.722110][T10660] [U]  [ 352.970530][ T3763] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 353.174666][T10482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.199694][ T3763] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.233237][ T3763] usb 1-1: config 0 has no interface number 0 [ 353.254756][ T3763] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 353.271692][ T3763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.295282][T10482] veth0_vlan: entered promiscuous mode [ 353.324870][T10482] veth1_vlan: entered promiscuous mode [ 353.343392][ T3763] usb 1-1: Product: syz [ 353.354016][ T3763] usb 1-1: Manufacturer: syz [ 353.366609][ T3763] usb 1-1: SerialNumber: syz [ 353.382686][ T3763] usb 1-1: config 0 descriptor?? [ 353.390718][ T5885] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 353.403933][T10482] veth0_macvtap: entered promiscuous mode [ 353.437590][T10482] veth1_macvtap: entered promiscuous mode [ 353.498688][T10482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.604176][ T5885] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 353.679308][T10482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.707521][ T5885] usb 3-1: config 4 has no interface number 0 [ 353.722969][ T3763] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 353.745865][ T5885] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 353.775718][ T3763] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 353.794146][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.831282][ T5885] usb 3-1: Product: syz [ 353.837516][ T3763] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 353.846249][ T5885] usb 3-1: Manufacturer: syz [ 353.846902][T10482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.851757][ T5885] usb 3-1: SerialNumber: syz [ 353.865863][ T3763] usb 1-1: media controller created [ 353.945480][ T5885] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 353.966033][ T3763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.993950][T10482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.032363][T10482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.054883][T10482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.100279][T10704] netlink: 340 bytes leftover after parsing attributes in process `syz.4.951'. [ 354.126516][T10704] netlink: 48 bytes leftover after parsing attributes in process `syz.4.951'. [ 354.278894][ T3763] usb 1-1: USB disconnect, device number 25 [ 354.328280][T10706] sp0: Synchronizing with TNC [ 354.363226][ T5885] vp7045: USB control message 'in' went wrong. [ 354.373244][ T5885] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 354.406678][ T5885] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 354.441394][ T6687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.464841][ T6687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.470968][ T5885] usb 3-1: USB disconnect, device number 33 [ 354.542925][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.561182][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.601303][ T6502] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 354.762111][ T6502] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.770143][ T6502] usb 5-1: config 0 has no interface number 0 [ 354.780084][ T6502] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 354.799625][ T6502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.808794][ T6502] usb 5-1: Product: syz [ 354.815252][ T6502] usb 5-1: Manufacturer: syz [ 354.819861][ T6502] usb 5-1: SerialNumber: syz [ 354.827509][ T6502] usb 5-1: config 0 descriptor?? [ 354.860787][ T6492] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 355.141558][ T6502] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 355.184162][ T6492] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.307856][T10738] tipc: Started in network mode [ 355.315244][T10738] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 355.331705][ T6502] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 355.332633][ T6502] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 355.332672][ T6502] usb 5-1: media controller created [ 355.333404][ T6492] usb 6-1: config 0 has no interface number 0 [ 355.364432][ T6502] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.364992][T10738] tipc: Enabled bearer , priority 10 [ 355.368032][ T6492] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 355.368058][ T6492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.368077][ T6492] usb 6-1: Product: syz [ 355.368091][ T6492] usb 6-1: Manufacturer: syz [ 355.368105][ T6492] usb 6-1: SerialNumber: syz [ 355.374170][ T6492] usb 6-1: config 0 descriptor?? [ 355.839083][T10740] [U]  [ 355.891378][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.976624][ T6502] usb 5-1: USB disconnect, device number 35 [ 356.051748][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.055161][ T6492] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 356.094632][ T6492] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 356.125944][ T6492] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 356.134116][ T6492] usb 6-1: media controller created [ 356.152792][ T6492] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.250904][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.332544][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.461637][ T6502] tipc: Node number set to 4269801488 [ 356.501579][ T55] bridge_slave_1: left allmulticast mode [ 356.507261][ T55] bridge_slave_1: left promiscuous mode [ 356.516621][ T6492] usb 6-1: USB disconnect, device number 11 [ 356.534504][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.553185][ T55] bridge_slave_0: left allmulticast mode [ 356.575953][ T55] bridge_slave_0: left promiscuous mode [ 356.583049][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.923804][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.933913][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.943643][ T55] bond0 (unregistering): Released all slaves [ 357.623874][ T5877] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 357.664126][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 358.025369][ T55] hsr_slave_0: left promiscuous mode [ 358.148785][ T5877] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.204479][ T55] hsr_slave_1: left promiscuous mode [ 358.209824][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0 [ 358.224435][ T5877] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 358.241317][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.249322][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.269308][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.284334][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.330419][ T6492] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 358.331777][ T5877] usb 5-1: config 0 descriptor?? [ 358.355496][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.437477][ T55] veth1_macvtap: left promiscuous mode [ 358.444334][ T55] veth0_macvtap: left promiscuous mode [ 358.462128][ T55] veth1_vlan: left promiscuous mode [ 358.467501][ T55] veth0_vlan: left promiscuous mode [ 358.558229][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.569713][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.578729][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.589741][ T6492] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 358.599608][ T6492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.620079][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.631084][ T6492] usb 1-1: config 0 descriptor?? [ 358.636803][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.646421][ T6492] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 359.111440][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.118769][T10844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.227131][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.280731][T10846] netlink: 'syz.0.964': attribute type 10 has an invalid length. [ 359.300327][ T5877] usbhid 5-1:0.0: can't add hid device: -71 [ 359.313632][ T5877] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 359.345783][ T5877] usb 5-1: USB disconnect, device number 36 [ 359.435596][T10831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.591778][ T55] team0 (unregistering): Port device team_slave_1 removed [ 359.644349][ T55] team0 (unregistering): Port device team_slave_0 removed [ 359.914263][T10858] netlink: 56 bytes leftover after parsing attributes in process `syz.4.967'. [ 359.924850][T10858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.967'. [ 359.942791][T10858] Bluetooth: MGMT ver 1.23 [ 359.964956][T10858] binder: 10857:10858 ioctl c0306201 200000000240 returned -14 [ 360.057567][ T30] audit: type=1400 audit(1750124127.308:590): avc: denied { relabelfrom } for pid=10819 comm="syz.5.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 360.091324][ T30] audit: type=1400 audit(1750124127.338:591): avc: denied { relabelto } for pid=10819 comm="syz.5.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 360.134793][T10846] team0: Port device geneve1 added [ 360.224678][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 360.264195][ T6492] gp8psk: usb in 128 operation failed. [ 360.272047][T10822] lo speed is unknown, defaulting to 1000 [ 360.279704][ T6492] gp8psk: usb in 137 operation failed. [ 360.303119][ T6492] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 360.329995][ T6492] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 360.391704][ T6492] usb 1-1: USB disconnect, device number 26 [ 360.780921][ T50] Bluetooth: hci0: command tx timeout [ 360.793321][T10870] [U]  [ 361.234657][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 361.724278][ T5877] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 361.980995][ T5877] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.989175][ T5877] usb 1-1: config 0 has no interface number 0 [ 362.007068][ T5877] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 362.018390][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.035135][ T5877] usb 1-1: Product: syz [ 362.039407][ T5877] usb 1-1: Manufacturer: syz [ 362.082160][ T5877] usb 1-1: SerialNumber: syz [ 362.152952][ T5877] usb 1-1: config 0 descriptor?? [ 362.388006][ T5877] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 362.399418][ T5877] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 362.410228][ T5877] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 362.422766][ T5877] usb 1-1: media controller created [ 362.443917][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.844156][ T50] Bluetooth: hci0: command tx timeout [ 362.848235][T10879] binder: 10878:10879 ioctl c018620c 200000000100 returned -1 [ 363.022024][T10894] Falling back ldisc for ptm1. [ 363.030713][ T5877] usb 1-1: USB disconnect, device number 27 [ 363.192652][T10896] [U]  [ 363.323780][T10903] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.980'. [ 363.626636][T10822] chnl_net:caif_netlink_parms(): no params data found [ 363.668758][T10911] fuse: Bad value for 'fd' [ 363.825406][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.983'. [ 363.927219][T10822] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.096218][T10822] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.117872][T10822] bridge_slave_0: entered allmulticast mode [ 364.286230][T10822] bridge_slave_0: entered promiscuous mode [ 364.338464][T10822] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.348052][T10922] [U]  [ 364.449318][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.986'. [ 364.663289][T10822] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.691492][T10822] bridge_slave_1: entered allmulticast mode [ 364.702727][T10822] bridge_slave_1: entered promiscuous mode [ 364.828673][T10822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.900930][ T50] Bluetooth: hci0: command tx timeout [ 364.909732][T10822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.960001][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 365.212267][T10943] netlink: 'syz.0.989': attribute type 5 has an invalid length. [ 365.235085][T10943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.989'. [ 365.254719][T10940] [U]  [ 365.265693][T10943] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 365.292619][T10943] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 365.302283][T10943] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 365.310887][T10943] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 365.340536][T10943] geneve3: entered promiscuous mode [ 365.345857][T10943] geneve3: entered allmulticast mode [ 365.364374][T10822] team0: Port device team_slave_0 added [ 365.413596][T10822] team0: Port device team_slave_1 added [ 365.574305][T10954] fuse: Bad value for 'fd' [ 365.634578][T10822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.652269][T10822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.684072][T10822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.835073][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.5.992'. [ 365.838909][T10955] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.872693][T10822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.872711][T10822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.872747][T10822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.894044][T10958] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 365.895287][T10965] loop2: detected capacity change from 0 to 7 [ 365.909293][ T5834] Dev loop2: unable to read RDB block 7 [ 365.909328][ T5834] loop2: unable to read partition table [ 365.909563][ T5834] loop2: partition table beyond EOD, truncated [ 365.932459][T10965] Dev loop2: unable to read RDB block 7 [ 365.932497][T10965] loop2: unable to read partition table [ 365.932652][T10965] loop2: partition table beyond EOD, truncated [ 365.932676][T10965] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 365.999140][T10822] hsr_slave_0: entered promiscuous mode [ 366.137735][T10822] hsr_slave_1: entered promiscuous mode [ 366.145970][T10968] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 366.173127][T10955] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.236258][ T5189] Dev loop2: unable to read RDB block 7 [ 366.236280][ T5189] loop2: unable to read partition table [ 366.236368][ T5189] loop2: partition table beyond EOD, truncated [ 366.307025][ T30] audit: type=1400 audit(1750124133.558:592): avc: denied { listen } for pid=10976 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 366.307315][ T30] audit: type=1400 audit(1750124133.558:593): avc: denied { accept } for pid=10976 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 366.309559][ T30] audit: type=1400 audit(1750124133.558:594): avc: denied { setopt } for pid=10976 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 366.312245][T10955] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.408911][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 366.422814][T10955] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.562760][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.562787][ T10] usb 1-1: config 0 has no interface number 0 [ 366.564522][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 366.564548][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.564567][ T10] usb 1-1: Product: syz [ 366.564581][ T10] usb 1-1: Manufacturer: syz [ 366.564595][ T10] usb 1-1: SerialNumber: syz [ 366.566795][ T10] usb 1-1: config 0 descriptor?? [ 366.598965][T10955] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.850982][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 366.887317][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 366.899001][T10955] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.912671][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 366.986458][T10991] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 367.050721][ T50] Bluetooth: hci0: command tx timeout [ 367.383459][ T10] usb 1-1: media controller created [ 367.403965][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.420784][T10955] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.531997][T10955] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.697421][ T10] usb 1-1: USB disconnect, device number 28 [ 367.983440][T11006] fuse: Bad value for 'fd' [ 368.079516][T11008] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 368.090908][T11008] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 368.284715][T11008] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 368.294569][T11008] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 368.333290][T10822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 368.407822][T10822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 368.435299][T11008] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 368.445727][T11009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1007'. [ 368.485688][T11008] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 368.515406][T10822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 368.528644][T11009] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 368.541080][T10822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.586470][T11008] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 368.597940][T11008] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 368.725748][T10822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.775161][T11025] sp0: Synchronizing with TNC [ 368.815867][T10822] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.917042][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.924165][ T6088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.009798][T11008] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 369.060055][T11008] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.112945][T11008] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 369.131086][T11008] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.166798][T11008] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 369.180594][ T6502] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 369.188863][T11008] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.208297][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.215459][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.238174][T11008] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 369.248954][T11008] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.368941][ T6502] usb 3-1: unable to get BOS descriptor or descriptor too short [ 369.388345][ T6502] usb 3-1: config 127 has an invalid interface number: 144 but max is 0 [ 369.407239][ T6502] usb 3-1: config 127 has no interface number 0 [ 369.421772][ T6502] usb 3-1: config 127 interface 144 has no altsetting 0 [ 369.444063][ T6502] usb 3-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=83.f4 [ 369.463808][ T6502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.489891][ T6502] usb 3-1: Product: syz [ 369.494872][ T6502] usb 3-1: Manufacturer: syz [ 369.513994][ T6502] usb 3-1: SerialNumber: syz [ 369.560484][ T42] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 369.654210][T10822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.721529][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 369.729949][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 369.755027][T10822] veth0_vlan: entered promiscuous mode [ 369.761108][ T30] audit: type=1326 audit(1750124137.008:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.2.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783ef8e929 code=0x7fc00000 [ 369.773236][T10822] veth1_vlan: entered promiscuous mode [ 369.784462][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.805107][ T42] usb 6-1: config 8 has an invalid interface number: 255 but max is 0 [ 369.821332][ T42] usb 6-1: config 8 has no interface number 0 [ 369.848570][T10822] veth0_macvtap: entered promiscuous mode [ 369.866882][T10822] veth1_macvtap: entered promiscuous mode [ 369.892041][T10822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.910250][T10822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.926963][T10822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.939568][T10822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.950037][T10822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.962450][T10822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.971160][ T42] usb 6-1: config 8 interface 255 has no altsetting 0 [ 369.981886][ T42] usb 6-1: string descriptor 0 read error: -22 [ 369.989088][ T42] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 369.998706][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.180903][ T30] audit: type=1326 audit(1750124137.368:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 370.478896][T11048] program syz.5.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.519432][ T30] audit: type=1326 audit(1750124137.368:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 370.552795][ T30] audit: type=1326 audit(1750124137.368:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 370.598790][ T30] audit: type=1326 audit(1750124137.368:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 370.626276][ T30] audit: type=1326 audit(1750124137.368:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 370.695007][ T30] audit: type=1326 audit(1750124137.378:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 370.718468][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.327250][ T42] catc 6-1:8.255: Can't set altsetting 1. [ 371.351693][ T42] catc 6-1:8.255: probe with driver catc failed with error -5 [ 371.406931][ T42] usb 6-1: USB disconnect, device number 12 [ 371.430272][ T6687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.452503][ T6687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.488441][ T6687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.499162][ T6687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.710750][T11090] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1022'. [ 371.731944][ T30] audit: type=1400 audit(1750124138.958:602): avc: denied { nlmsg_read } for pid=11083 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 372.198858][ T30] audit: type=1326 audit(1750124139.438:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.2.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f783ef8e929 code=0x7fc00000 [ 372.272692][ T6502] HFC-S_USB 3-1:127.144: probe with driver HFC-S_USB failed with error -5 [ 372.320592][ T6502] usb 3-1: USB disconnect, device number 34 [ 372.717396][T11103] sp0: Synchronizing with TNC [ 372.726374][T11093] tipc: Started in network mode [ 372.731313][T11093] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 372.741757][T11093] tipc: Enabled bearer , priority 10 [ 372.748011][ T1205] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 372.933947][ T1205] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.961025][ T1205] usb 6-1: config 0 has no interface number 0 [ 373.491661][ T1205] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 373.509823][ T1205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.521482][ T1205] usb 6-1: Product: syz [ 373.525754][ T1205] usb 6-1: Manufacturer: syz [ 373.530581][ T1205] usb 6-1: SerialNumber: syz [ 373.542058][ T1205] usb 6-1: config 0 descriptor?? [ 373.760758][ T1205] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 373.794803][ T1205] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 373.806893][ T1205] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 373.816963][ T1205] usb 6-1: media controller created [ 373.850733][ T3763] tipc: Node number set to 4269801488 [ 374.004259][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.438421][ T30] audit: type=1326 audit(1750124141.578:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 374.480288][T11097] binder: 11095:11097 ioctl c018620c 200000000100 returned -1 [ 374.488783][ T30] audit: type=1326 audit(1750124141.578:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 374.516169][ T30] audit: type=1326 audit(1750124141.578:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 374.554597][ T1205] usb 6-1: USB disconnect, device number 13 [ 374.574269][ T30] audit: type=1326 audit(1750124141.578:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 374.615924][ T30] audit: type=1326 audit(1750124141.578:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 374.755054][ T30] audit: type=1326 audit(1750124141.578:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 374.782527][ T30] audit: type=1326 audit(1750124141.578:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 374.809234][ T30] audit: type=1326 audit(1750124141.578:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515158e929 code=0x7ffc0000 [ 376.180781][ T42] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 376.432036][ T42] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 376.474969][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 376.485484][T11184] binder: 11174:11184 ioctl c0306201 200000000640 returned -22 [ 376.513914][ T42] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 376.555731][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.596573][ T42] usb 5-1: Product: syz [ 376.618238][ T42] usb 5-1: Manufacturer: syz [ 376.625096][ T42] usb 5-1: SerialNumber: syz [ 376.650047][ T42] usb 5-1: config 0 descriptor?? [ 376.679022][ T42] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 376.698793][ T42] em28xx 5-1:0.0: Device initialization failed. [ 376.705240][ T3763] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 376.713431][ T42] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 376.757340][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.870561][ T3763] usb 6-1: Using ep0 maxpacket: 32 [ 376.887190][ T3763] usb 6-1: config 1 interface 0 has no altsetting 0 [ 376.907074][ T3763] usb 6-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.40 [ 377.002665][ T3763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.014357][ T1205] usb 5-1: USB disconnect, device number 37 [ 377.028812][ T3763] usb 6-1: Product: 钘艎㟠쳚㚲ޫ핇䎤魈ҩ鿚ㅉ䰎敥ꋳ攔Ꞿ圾à·è—¤á„¡å“´ê±«å»šî“¸à§…á®ì¡»á¢™ï›šë„–鎊êšç¹½êš›â„´ïŒ [ 377.044701][ T3763] usb 6-1: Manufacturer: á ‰ [ 377.049848][ T3763] usb 6-1: SerialNumber: ÐŽ [ 377.197111][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.323641][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.343701][ T3763] usbhid 6-1:1.0: can't add hid device: -71 [ 377.358242][ T3763] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 377.390825][ T3763] usb 6-1: USB disconnect, device number 14 [ 377.472728][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.671262][ T12] bridge_slave_1: left allmulticast mode [ 377.677668][ T12] bridge_slave_1: left promiscuous mode [ 377.684298][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.694543][ T12] bridge_slave_0: left allmulticast mode [ 377.700172][ T12] bridge_slave_0: left promiscuous mode [ 377.707520][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.940219][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.952721][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.963004][ T12] bond0 (unregistering): Released all slaves [ 378.106298][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.112688][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.206829][ T12] hsr_slave_0: left promiscuous mode [ 378.215003][ T12] hsr_slave_1: left promiscuous mode [ 378.221016][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.228406][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.236734][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.244329][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.286053][ T12] veth1_macvtap: left promiscuous mode [ 378.302173][ T12] veth0_macvtap: left promiscuous mode [ 378.307798][ T12] veth1_vlan: left promiscuous mode [ 378.329745][T11205] netlink: 'syz.2.1042': attribute type 8 has an invalid length. [ 378.338897][ T12] veth0_vlan: left promiscuous mode [ 378.448573][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 378.729205][ T30] audit: type=1326 audit(1750124145.968:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d2d8e929 code=0x7ffc0000 [ 379.331312][ T30] audit: type=1326 audit(1750124145.968:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa3d2d8e929 code=0x7ffc0000 [ 379.383365][T11203] [U]  [ 379.396304][ T30] audit: type=1326 audit(1750124145.968:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d2d8e929 code=0x7ffc0000 [ 379.439957][ T30] audit: type=1326 audit(1750124145.968:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3d2d8e929 code=0x7ffc0000 [ 379.468324][ T30] audit: type=1326 audit(1750124145.978:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d2d8e929 code=0x7ffc0000 [ 379.495862][ T30] audit: type=1326 audit(1750124145.978:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d2d8e929 code=0x7ffc0000 [ 379.567976][T11221] fuse: Bad value for 'fd' [ 379.620531][ T1205] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 379.640522][ T3763] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 379.715058][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.733839][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.745419][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.753552][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.761182][ T1205] usb 6-1: device descriptor read/64, error -71 [ 379.766725][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.805173][ T3763] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.814140][ T3763] usb 5-1: config 0 has no interface number 0 [ 379.830618][ T3763] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 379.846465][ T3763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.854677][ T3763] usb 5-1: Product: syz [ 379.858860][ T3763] usb 5-1: Manufacturer: syz [ 379.863754][ T3763] usb 5-1: SerialNumber: syz [ 379.871318][ T3763] usb 5-1: config 0 descriptor?? [ 379.900915][ T5877] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 379.959145][ T12] team0 (unregistering): Port device team_slave_1 removed [ 379.990152][ T12] team0 (unregistering): Port device team_slave_0 removed [ 380.010820][ T1205] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 380.050518][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 380.058778][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.070004][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.080176][ T5877] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 380.091419][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.099589][ T3763] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 380.112939][ T5877] usb 1-1: config 0 descriptor?? [ 380.124982][ T3763] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 380.136118][ T3763] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 380.144519][ T3763] usb 5-1: media controller created [ 380.154245][ T1205] usb 6-1: device descriptor read/64, error -71 [ 380.168876][ T3763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.272705][ T1205] usb usb6-port1: attempt power cycle [ 380.448817][T11226] lo speed is unknown, defaulting to 1000 [ 380.506443][T11219] binder: 11218:11219 ioctl c018620c 200000000100 returned -1 [ 380.568376][ T5877] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 380.594445][ T3763] usb 5-1: USB disconnect, device number 38 [ 380.613257][ T1205] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 380.666751][ T1205] usb 6-1: device descriptor read/8, error -71 [ 380.810661][ T5877] usb 1-1: USB disconnect, device number 29 [ 380.873959][T11226] chnl_net:caif_netlink_parms(): no params data found [ 380.932202][ T1205] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 380.972036][ T1205] usb 6-1: device descriptor read/8, error -71 [ 381.067002][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.076319][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.084861][T11226] bridge_slave_0: entered allmulticast mode [ 381.099217][T11226] bridge_slave_0: entered promiscuous mode [ 381.117951][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.126773][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.137011][T11226] bridge_slave_1: entered allmulticast mode [ 381.140576][ T1205] usb usb6-port1: unable to enumerate USB device [ 381.144432][T11226] bridge_slave_1: entered promiscuous mode [ 381.254685][T11226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.278560][T11226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.448738][T11226] team0: Port device team_slave_0 added [ 381.464357][T11226] team0: Port device team_slave_1 added [ 381.564040][T11226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.571412][T11226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.598029][T11226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.617265][T11226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.624795][T11226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.651952][T11226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.710640][ T5877] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 381.884161][ T5877] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 381.956453][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.029214][ T5877] usb 5-1: config 0 descriptor?? [ 382.061550][ T5877] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 382.094921][T11226] hsr_slave_0: entered promiscuous mode [ 382.118568][T11226] hsr_slave_1: entered promiscuous mode [ 382.127200][T11277] fuse: Invalid rootmode [ 382.256437][ T30] audit: type=1400 audit(1750124149.508:618): avc: denied { map } for pid=11280 comm="syz.2.1058" path="socket:[35197]" dev="sockfs" ino=35197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.340124][ T30] audit: type=1400 audit(1750124149.508:619): avc: denied { accept } for pid=11280 comm="syz.2.1058" path="socket:[35197]" dev="sockfs" ino=35197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.486667][T11267] [U]  [ 382.509986][ T5877] gspca_cpia1: usb_control_msg 03, error -32 [ 382.518027][ T5877] gspca_cpia1: usb_control_msg 03, error -71 [ 382.528629][ T5877] gspca_cpia1: usb_control_msg 01, error -71 [ 382.534891][ T5877] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 382.546786][ T5877] usb 5-1: USB disconnect, device number 39 [ 382.696410][ T42] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 382.700457][ T5899] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 382.864030][ T42] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.909084][ T42] usb 3-1: config 0 has no interface number 0 [ 382.934583][ T5899] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 382.936185][T11226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 382.957580][ T42] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 382.974356][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.985860][ T42] usb 3-1: Product: syz [ 382.985876][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.990062][ T42] usb 3-1: Manufacturer: syz [ 383.025381][T11306] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 383.026435][T11226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.131181][ T5899] usb 6-1: config 0 descriptor?? [ 383.177139][ T42] usb 3-1: SerialNumber: syz [ 383.269409][T11226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 383.276801][ T42] usb 3-1: config 0 descriptor?? [ 383.339138][T11226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.389173][ T30] audit: type=1400 audit(1750124150.638:620): avc: denied { mount } for pid=11287 comm="syz.5.1059" name="/" dev="configfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 383.587999][ T30] audit: type=1400 audit(1750124150.838:621): avc: denied { setattr } for pid=11287 comm="syz.5.1059" name="/" dev="configfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 383.620820][ T42] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 383.623238][ T5899] kaweth 6-1:0.0: Firmware present in device. [ 384.219857][ T5899] kaweth 6-1:0.0: Statistics collection: 0 [ 384.225788][ T5899] kaweth 6-1:0.0: Multicast filter limit: 0 [ 384.234023][ T5899] kaweth 6-1:0.0: MTU: 0 [ 384.238279][ T5899] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 384.316053][ T42] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 384.402201][ T42] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 384.410482][ T42] usb 3-1: media controller created [ 384.460566][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.504511][T11226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.562244][T11226] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.595057][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.602154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.630906][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.637989][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.681900][ T5899] kaweth 6-1:0.0: kaweth interface created at eth5 [ 384.753714][ T5899] usb 3-1: USB disconnect, device number 35 [ 384.867333][T11288] ALSA: mixer_oss: invalid OSS volume '' [ 384.903486][ T5877] usb 6-1: USB disconnect, device number 19 [ 385.060602][ T50] Bluetooth: hci1: command tx timeout [ 385.358329][T11226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.398068][ T30] audit: type=1400 audit(1750124152.648:622): avc: denied { setopt } for pid=11341 comm="syz.4.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 385.446855][T11226] veth0_vlan: entered promiscuous mode [ 385.469277][T11226] veth1_vlan: entered promiscuous mode [ 385.508949][T11226] veth0_macvtap: entered promiscuous mode [ 385.521139][T11226] veth1_macvtap: entered promiscuous mode [ 385.545121][T11226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.602355][ T30] audit: type=1400 audit(1750124152.838:623): avc: denied { unmount } for pid=8745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 385.616671][T11226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.649578][T11226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.658511][T11226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.684996][T11226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.848777][T11226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.165696][T11356] fuse: Invalid rootmode [ 386.382104][T11361] overlayfs: missing 'lowerdir' [ 386.484659][ T30] audit: type=1400 audit(1750124153.728:624): avc: denied { setopt } for pid=11353 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 386.762198][ T30] audit: type=1400 audit(1750124153.808:625): avc: denied { write } for pid=11353 comm="syz.0.1069" laddr=172.30.0.1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 386.852459][T11362] vti0: entered promiscuous mode [ 386.940786][ T30] audit: type=1400 audit(1750124154.178:626): avc: denied { setattr } for pid=11365 comm="syz.2.1071" name="RXRPC" dev="sockfs" ino=35428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.067494][ T30] audit: type=1400 audit(1750124154.178:627): avc: denied { connect } for pid=11365 comm="syz.2.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.255493][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.325143][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.387087][ T3763] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 387.622302][ T3763] usb 5-1: Using ep0 maxpacket: 32 [ 387.691697][ T3763] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 387.752617][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.764683][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.773531][ T3763] usb 5-1: config 0 has no interface number 0 [ 387.807919][ T3763] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 387.997125][ T3763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.021368][ T3763] usb 5-1: Product: syz [ 388.025597][ T3763] usb 5-1: Manufacturer: syz [ 388.172952][ T5899] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 388.180543][ T3763] usb 5-1: SerialNumber: syz [ 388.182542][ T3763] usb 5-1: config 0 descriptor?? [ 388.232201][ T3763] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 388.374044][T11404] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1078'. [ 388.386375][ T5899] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.400600][ T5899] usb 3-1: config 0 has no interface number 0 [ 388.409847][ T5899] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 388.435484][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.471321][ T5899] usb 3-1: Product: syz [ 388.475852][ T5899] usb 3-1: Manufacturer: syz [ 388.500303][ T5899] usb 3-1: SerialNumber: syz [ 388.517965][ T5899] usb 3-1: config 0 descriptor?? [ 388.777083][ T5899] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 388.881647][ T5899] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 389.091049][T11426] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1073'. [ 389.501883][ T5899] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 389.597209][ T5899] usb 3-1: media controller created [ 389.768585][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.825073][ T30] audit: type=1400 audit(1750124157.078:628): avc: denied { listen } for pid=11429 comm="syz.5.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.072528][T11390] binder: 11389:11390 ioctl c018620c 200000000100 returned -1 [ 390.539612][ T5899] usb 3-1: USB disconnect, device number 36 [ 390.670068][ T3763] usb 5-1: qt2_attach - failed to power on unit: -71 [ 390.686365][ T3763] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 391.544486][T11458] netlink: 'syz.4.1087': attribute type 10 has an invalid length. [ 391.943871][ T3763] usb 5-1: USB disconnect, device number 40 [ 391.985613][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.996163][T11458] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 392.234465][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.301725][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.355303][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.443066][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.585469][ T55] bridge_slave_1: left allmulticast mode [ 392.592363][ T55] bridge_slave_1: left promiscuous mode [ 392.598022][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.606748][ T55] bridge_slave_0: left allmulticast mode [ 392.612827][ T55] bridge_slave_0: left promiscuous mode [ 392.618467][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.855806][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.866073][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.875975][ T55] bond0 (unregistering): Released all slaves [ 393.124447][ T55] hsr_slave_0: left promiscuous mode [ 393.130346][ T55] hsr_slave_1: left promiscuous mode [ 393.142766][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.150192][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.159247][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.169125][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.190223][ T55] veth1_macvtap: left promiscuous mode [ 393.196170][ T55] veth0_macvtap: left promiscuous mode [ 393.204056][ T55] veth1_vlan: left promiscuous mode [ 393.209384][ T55] veth0_vlan: left promiscuous mode [ 393.515837][T11490] netlink: 'syz.0.1088': attribute type 10 has an invalid length. [ 393.935484][ T55] team0 (unregistering): Port device team_slave_1 removed [ 394.001853][ T55] team0 (unregistering): Port device team_slave_0 removed [ 394.078639][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.100036][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.118811][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.128555][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.138646][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 395.022227][T11490] team0: Port device wlan1 added [ 395.464912][T11505] lo speed is unknown, defaulting to 1000 [ 396.098103][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 396.195318][ T5829] Bluetooth: hci0: command tx timeout [ 396.479180][T11505] chnl_net:caif_netlink_parms(): no params data found [ 396.574224][T11534] [U]  [ 397.297675][ T3763] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 397.371494][T11505] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.378655][T11505] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.410818][T11505] bridge_slave_0: entered allmulticast mode [ 397.425562][T11505] bridge_slave_0: entered promiscuous mode [ 397.463582][ T3763] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.474281][ T3763] usb 3-1: config 0 has no interface number 0 [ 397.482947][ T3763] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 397.514225][T11505] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.540743][T11505] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.543783][ T3763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.565395][T11505] bridge_slave_1: entered allmulticast mode [ 397.575233][T11505] bridge_slave_1: entered promiscuous mode [ 397.630724][ T3763] usb 3-1: Product: syz [ 397.667199][ T3763] usb 3-1: Manufacturer: syz [ 397.711913][ T3763] usb 3-1: SerialNumber: syz [ 397.918025][ T3763] usb 3-1: config 0 descriptor?? [ 397.969091][T11505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.982184][T11505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.068886][T11505] team0: Port device team_slave_0 added [ 398.151092][ T30] audit: type=1400 audit(1750124165.408:629): avc: denied { bind } for pid=11582 comm="syz.5.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 398.204325][ T3763] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 398.218534][T11505] team0: Port device team_slave_1 added [ 398.422469][ T5829] Bluetooth: hci0: command tx timeout [ 398.429865][ T3763] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 398.444029][ T3763] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 398.454819][ T3763] usb 3-1: media controller created [ 398.471936][ T30] audit: type=1400 audit(1750124165.428:630): avc: denied { write } for pid=11582 comm="syz.5.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 398.523459][T11505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.534929][ T3763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.543577][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.569484][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.607569][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 398.618787][T11505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.721049][T11505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.742104][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.798267][T11601] binder: 11557:11601 ioctl c018620c 200000000100 returned -1 [ 398.806222][T11505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.843306][ T5899] usb 3-1: USB disconnect, device number 37 [ 398.877901][T11505] hsr_slave_0: entered promiscuous mode [ 398.878640][T11505] hsr_slave_1: entered promiscuous mode [ 399.367662][T11609] [U]  [ 399.728838][ T30] audit: type=1400 audit(1750124166.978:631): avc: denied { create } for pid=11620 comm="syz.5.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 400.028828][T11625] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 400.035740][T11625] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 400.071249][T11625] vhci_hcd vhci_hcd.0: Device attached [ 400.438265][ T42] usb 44-1: SetAddress Request (2) to port 0 [ 400.446347][ T3763] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 400.500895][ T5829] Bluetooth: hci0: command tx timeout [ 400.842650][ T42] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 401.022921][ T3763] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 401.090778][ T3763] usb 6-1: config 0 has no interface number 0 [ 401.456688][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 401.667568][ T3763] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 401.771577][ T3763] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.974870][ T3763] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 401.990722][ T3763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.121046][T11646] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1118'. [ 402.130102][T11646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1118'. [ 402.512307][ T3763] usb 6-1: Product: syz [ 402.516711][ T3763] usb 6-1: Manufacturer: syz [ 402.521721][ T3763] usb 6-1: SerialNumber: syz [ 402.528061][ T3763] usb 6-1: config 0 descriptor?? [ 402.537457][T11625] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 402.558602][ T3763] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 402.574207][ T3763] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 402.591164][ T5829] Bluetooth: hci0: command tx timeout [ 402.788604][T11651] netlink: 'syz.4.1119': attribute type 1 has an invalid length. [ 402.876705][ T3763] usb 6-1: USB disconnect, device number 20 [ 402.894377][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1119'. [ 402.914418][T11628] vhci_hcd: connection reset by peer [ 402.926554][ T3763] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 402.944343][ T12] vhci_hcd: stop threads [ 402.949801][ T12] vhci_hcd: release socket [ 402.949837][ T3763] cyberjack 6-1:0.69: device disconnected [ 402.989517][ T12] vhci_hcd: disconnect device [ 403.269256][T11652] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.292387][T11652] bond2: (slave bond3): making interface the new active one [ 403.301721][T11652] bond2: (slave bond3): Enslaving as an active interface with an up link [ 403.311671][T11653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.410473][ T3763] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 404.170573][ T3763] usb 6-1: Using ep0 maxpacket: 16 [ 404.179195][ T3763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.196561][ T3763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.244241][ T3763] usb 6-1: New USB device found, idVendor=6161, idProduct=6d15, bcdDevice= 0.00 [ 404.260116][ T3763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.375233][ T3763] usb 6-1: config 0 descriptor?? [ 404.451147][T11505] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 404.472544][T11505] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 404.564935][T11505] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 404.588608][T11659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.601553][T11659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.644490][T11505] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 404.833178][T11685] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.926183][T11505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.968166][T11505] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.988601][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.995760][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.024331][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.031434][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.056736][T11505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 405.070461][T11505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.128703][ T5899] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 405.143449][T11659] overlayfs: maximum fs stacking depth exceeded [ 405.306638][ T5899] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.176432][ T42] usb 44-1: device descriptor read/8, error -110 [ 406.355319][ T5899] usb 3-1: config 0 has no interface number 0 [ 406.435145][ T5899] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 406.444717][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.484428][ T5899] usb 3-1: Product: syz [ 406.488629][ T5899] usb 3-1: Manufacturer: syz [ 406.567335][ T5899] usb 3-1: SerialNumber: syz [ 406.592123][ T5899] usb 3-1: config 0 descriptor?? [ 406.637971][T11708] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 406.651999][T11708] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 406.702239][ T3763] usbhid 6-1:0.0: can't add hid device: -71 [ 406.711596][ T30] audit: type=1400 audit(1750124173.968:632): avc: denied { unmount } for pid=8745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 406.730738][ T6492] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 406.760490][ T3763] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 406.777690][ T42] usb usb44-port1: attempt power cycle [ 406.846167][T11505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.893604][ T3763] usb 6-1: USB disconnect, device number 21 [ 406.915965][ T5899] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 407.109084][T11713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1129'. [ 407.113060][T11708] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 407.155805][ T5899] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 407.166675][ T5899] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 407.174918][ T6492] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.301716][ T6492] usb 1-1: config 0 has no interface number 0 [ 407.423694][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1130'. [ 407.424292][ T42] usb usb44-port1: unable to enumerate USB device [ 407.463051][ T5899] usb 3-1: media controller created [ 407.468304][T11708] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 407.492400][ T6492] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 407.504553][T11718] binder: 11686:11718 ioctl c018620c 200000000100 returned -1 [ 407.518875][ T6492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.536381][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.549377][ T6492] usb 1-1: Product: syz [ 407.559027][T11713] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 407.569925][ T6492] usb 1-1: Manufacturer: syz [ 407.588923][T11708] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 407.603626][T11708] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 407.615584][ T6492] usb 1-1: SerialNumber: syz [ 407.640012][ T6492] usb 1-1: config 0 descriptor?? [ 407.698600][T11708] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 407.713493][T11708] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 407.751906][T11505] veth0_vlan: entered promiscuous mode [ 407.797643][T11505] veth1_vlan: entered promiscuous mode [ 407.869653][ T42] usb 3-1: USB disconnect, device number 38 [ 407.872757][ T6492] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 407.889481][T11708] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 407.897646][ T6492] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 407.897881][ T6492] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 407.897918][ T6492] usb 1-1: media controller created [ 407.913005][ T6492] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.940832][T11708] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 407.974317][T11708] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 407.982610][T11708] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 408.012320][T11708] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 408.028415][T11708] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 408.065638][T11505] veth0_macvtap: entered promiscuous mode [ 408.077930][ T6492] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 408.147666][T11708] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 408.175213][ T6492] usb 1-1: USB disconnect, device number 30 [ 408.200714][T11708] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 408.244076][T11505] veth1_macvtap: entered promiscuous mode [ 408.295984][T11505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.340139][T11505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.360302][T11735] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1132'. [ 408.376883][T11505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.389640][T11505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.410094][T11505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.430404][T11505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.231007][T11751] netlink: 'syz.0.1135': attribute type 6 has an invalid length. [ 409.248843][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.409065][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.782090][ T3763] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 409.822149][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.947984][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.996143][T11757] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.024136][T11757] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 410.129230][ T3763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.183536][ T3763] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.202530][ T3763] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 410.230618][ T3763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.263376][T11757] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.273779][T11757] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 410.335306][ T3763] usb 1-1: config 0 descriptor?? [ 410.347965][T11759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1136'. [ 410.360113][T11759] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 410.474309][T11757] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.487527][T11757] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 410.934582][T11772] ALSA: mixer_oss: invalid OSS volume '' [ 410.972789][T11757] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.109979][T11757] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 411.607663][ T30] audit: type=1400 audit(1750124178.858:633): avc: denied { mount } for pid=11749 comm="syz.0.1135" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 411.665988][T11753] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.684137][ T3763] ortek 0003:1223:3F07.000F: unknown main item tag 0x6 [ 411.695391][ T42] IPVS: starting estimator thread 0... [ 411.984420][ T3763] ortek 0003:1223:3F07.000F: bogus close delimiter [ 411.997001][ T3763] ortek 0003:1223:3F07.000F: item 0 0 2 10 parsing failed [ 412.008918][ T3763] ortek 0003:1223:3F07.000F: probe with driver ortek failed with error -22 [ 412.131316][ T3763] usb 1-1: USB disconnect, device number 31 [ 412.141521][T11779] IPVS: using max 50 ests per chain, 120000 per kthread [ 412.178723][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.234118][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.290889][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.362892][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.501162][ T70] bridge_slave_1: left allmulticast mode [ 412.506853][ T70] bridge_slave_1: left promiscuous mode [ 412.513436][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.522823][ T70] bridge_slave_0: left allmulticast mode [ 412.528475][ T70] bridge_slave_0: left promiscuous mode [ 412.535727][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.691854][ T30] audit: type=1400 audit(1750124179.948:634): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 412.939622][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.953360][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.963520][ T70] bond0 (unregistering): Released all slaves [ 413.205804][ T70] hsr_slave_0: left promiscuous mode [ 413.218275][ T70] hsr_slave_1: left promiscuous mode [ 413.227295][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.234917][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.245224][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.252845][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.275337][ T70] veth1_macvtap: left promiscuous mode [ 413.281075][ T70] veth0_macvtap: left promiscuous mode [ 413.286799][ T70] veth1_vlan: left promiscuous mode [ 413.294385][ T70] veth0_vlan: left promiscuous mode [ 413.921087][ T30] audit: type=1400 audit(1750124181.158:635): avc: denied { setopt } for pid=11823 comm="syz.5.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 413.990509][ T30] audit: type=1400 audit(1750124181.168:636): avc: denied { getopt } for pid=11823 comm="syz.5.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 414.035298][T11830] ptrace attach of "./syz-executor exec"[5812] was attempted by "./syz-executor exec"[11830] [ 414.771222][ T70] team0 (unregistering): Port device team_slave_1 removed [ 414.813466][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 414.827788][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 414.837777][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 414.845615][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 414.853102][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.880088][ T70] team0 (unregistering): Port device team_slave_0 removed [ 415.516521][T11848] ALSA: mixer_oss: invalid OSS volume '' [ 415.605678][T11839] lo speed is unknown, defaulting to 1000 [ 415.720571][T11851] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1150'. [ 415.729777][T11851] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1150'. [ 416.577785][T11839] chnl_net:caif_netlink_parms(): no params data found [ 416.760820][ T5899] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 416.780621][ T1205] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 416.878790][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.900565][ T50] Bluetooth: hci0: command tx timeout [ 416.913190][T11839] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.939157][T11839] bridge_slave_0: entered allmulticast mode [ 416.952902][ T1205] usb 6-1: Using ep0 maxpacket: 8 [ 416.958020][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 416.958845][T11839] bridge_slave_0: entered promiscuous mode [ 416.971043][ T1205] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 416.974293][T11839] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.986735][ T1205] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 416.989658][T11839] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.997512][ T1205] usb 6-1: config 0 has no interface number 0 [ 417.008391][ T5899] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 417.019117][T11839] bridge_slave_1: entered allmulticast mode [ 417.025048][ T5899] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 417.025071][ T5899] usb 1-1: config 0 has no interface number 0 [ 417.025106][ T5899] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.025130][ T5899] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.025154][ T5899] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.029303][ T1205] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.098199][T11839] bridge_slave_1: entered promiscuous mode [ 417.145827][ T5899] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 417.174887][ T5899] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 417.188666][ T5899] usb 1-1: Product: syz [ 417.192977][ T5899] usb 1-1: Manufacturer: syz [ 417.197696][ T1205] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.208713][ T1205] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.225713][ T1205] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 417.245147][ T1205] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 417.260413][ T1205] usb 6-1: Product: syz [ 417.264634][ T1205] usb 6-1: Manufacturer: syz [ 417.278416][ T5899] usb 1-1: config 0 descriptor?? [ 417.520809][T11868] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 417.611677][ T1205] usb 6-1: config 0 descriptor?? [ 417.619061][T11870] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 417.714270][T11886] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1156'. [ 417.727731][T11839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.742853][T11886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1156'. [ 417.756753][T11839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.844233][T11839] team0: Port device team_slave_0 added [ 417.857934][T11839] team0: Port device team_slave_1 added [ 417.924696][T11839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.934130][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.973383][T11839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.987437][T11839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.994821][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.023518][T11839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.123319][T11839] hsr_slave_0: entered promiscuous mode [ 418.129730][T11839] hsr_slave_1: entered promiscuous mode [ 418.175092][ T5899] usb 1-1: USB disconnect, device number 32 [ 418.291652][ T1205] usb 6-1: USB disconnect, device number 22 [ 418.372255][T11757] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 418.385368][T11907] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[11907] [ 418.395659][T11757] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 418.443297][T11757] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 418.466077][T11757] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 418.524373][T11757] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 418.554044][T11757] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 418.618767][T11757] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 418.644124][T11757] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 418.753432][T11911] FAULT_INJECTION: forcing a failure. [ 418.753432][T11911] name failslab, interval 1, probability 0, space 0, times 0 [ 418.801421][T11911] CPU: 1 UID: 0 PID: 11911 Comm: syz.0.1161 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 418.801452][T11911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.801459][T11911] Call Trace: [ 418.801463][T11911] [ 418.801468][T11911] dump_stack_lvl+0x16c/0x1f0 [ 418.801488][T11911] should_fail_ex+0x512/0x640 [ 418.801503][T11911] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 418.801520][T11911] should_failslab+0xc2/0x120 [ 418.801536][T11911] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 418.801550][T11911] ? __alloc_skb+0x2b2/0x380 [ 418.801568][T11911] __alloc_skb+0x2b2/0x380 [ 418.801582][T11911] ? __pfx___alloc_skb+0x10/0x10 [ 418.801599][T11911] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 418.801613][T11911] netlink_alloc_large_skb+0x69/0x130 [ 418.801625][T11911] netlink_sendmsg+0x6a1/0xdd0 [ 418.801639][T11911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.801656][T11911] ____sys_sendmsg+0xa95/0xc70 [ 418.801668][T11911] ? copy_msghdr_from_user+0x10a/0x160 [ 418.801684][T11911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.801702][T11911] ___sys_sendmsg+0x134/0x1d0 [ 418.801718][T11911] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.801733][T11911] ? __lock_acquire+0x622/0x1c90 [ 418.801766][T11911] __sys_sendmsg+0x16d/0x220 [ 418.801782][T11911] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.801807][T11911] do_syscall_64+0xcd/0x4c0 [ 418.801825][T11911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.801836][T11911] RIP: 0033:0x7f515158e929 [ 418.801846][T11911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.801856][T11911] RSP: 002b:00007f51523a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.801867][T11911] RAX: ffffffffffffffda RBX: 00007f51517b5fa0 RCX: 00007f515158e929 [ 418.801874][T11911] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 418.801880][T11911] RBP: 00007f51523a1090 R08: 0000000000000000 R09: 0000000000000000 [ 418.801886][T11911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.801893][T11911] R13: 0000000000000000 R14: 00007f51517b5fa0 R15: 00007ffd562b0c78 [ 418.801906][T11911] [ 419.052474][ T50] Bluetooth: hci0: command tx timeout [ 419.208490][T11921] ALSA: mixer_oss: invalid OSS volume '' [ 419.468273][T11925] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 419.940753][ T1205] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 420.122685][ T1205] usb 3-1: config 0 has an invalid interface number: 254 but max is 0 [ 420.158194][ T1205] usb 3-1: config 0 has no interface number 0 [ 420.172616][ T1205] usb 3-1: config 0 interface 254 has no altsetting 0 [ 420.208638][ T1205] usb 3-1: New USB device found, idVendor=0451, idProduct=505a, bcdDevice=16.69 [ 420.365174][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.380450][ T1205] usb 3-1: Product: syz [ 420.384640][ T1205] usb 3-1: Manufacturer: syz [ 420.389240][ T1205] usb 3-1: SerialNumber: syz [ 420.419063][ T1205] usb 3-1: config 0 descriptor?? [ 420.604211][ T1205] ti_usb_3410_5052 3-1:0.254: TI USB 5052 2 port adapter converter detected [ 420.633911][ T1205] usb 3-1: Direct firmware load for ti_usb-v0451-p505a.fw failed with error -2 [ 420.929997][T11947] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1168'. [ 420.935451][ T1205] usb 3-1: Falling back to sysfs fallback for: ti_usb-v0451-p505a.fw [ 420.939289][T11947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1168'. [ 420.965544][ T30] audit: type=1400 audit(1750124188.178:637): avc: denied { firmware_load } for pid=1205 comm="kworker/0:2" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 421.064470][ T50] Bluetooth: hci0: command tx timeout [ 421.369549][T11839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.447214][T11839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.526434][T11957] ieee802154 phy0 wpan0: encryption failed: -22 [ 421.614110][T11839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.766321][T11839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.519728][T11839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.537567][T11839] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.548275][T11974] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1173'. [ 422.615821][T11974] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1173'. [ 422.673655][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.680841][ T6088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.227899][ T50] Bluetooth: hci0: command tx timeout [ 423.262402][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.269537][ T6088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.480239][T11986] netlink: 340 bytes leftover after parsing attributes in process `syz.5.1178'. [ 423.756869][T11990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.540871][T12006] ALSA: mixer_oss: invalid OSS volume '' [ 424.788887][T12019] No control pipe specified [ 424.862496][T12021] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1185'. [ 424.865364][T11839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.880729][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 424.931481][ T5892] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 425.206075][T11839] veth0_vlan: entered promiscuous mode [ 425.250786][ T5892] usb 5-1: device descriptor read/64, error -71 [ 425.374897][T11839] veth1_vlan: entered promiscuous mode [ 425.971444][ T5892] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 425.989741][T11839] veth0_macvtap: entered promiscuous mode [ 426.011891][T11839] veth1_macvtap: entered promiscuous mode [ 426.048455][T11839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.168511][ T5892] usb 5-1: device descriptor read/64, error -71 [ 426.185562][T11839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.197146][T11839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.210626][T11839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.219316][T11839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.228297][T11839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.309388][ T5892] usb usb5-port1: attempt power cycle [ 426.412701][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.431548][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.477669][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.507662][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.118332][ T5892] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 427.142484][ T5892] usb 5-1: device descriptor read/8, error -71 [ 427.304535][ T30] audit: type=1400 audit(1750124194.558:638): avc: denied { read } for pid=12048 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 427.421739][ T5892] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 427.462298][ T5892] usb 5-1: device descriptor read/8, error -71 [ 427.482488][T12054] netlink: 'syz.2.1191': attribute type 10 has an invalid length. [ 427.506288][T12054] team0: Port device wlan1 added [ 427.580887][ T5892] usb usb5-port1: unable to enumerate USB device [ 428.187700][T12066] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1193'. [ 429.304555][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 429.424955][ T30] audit: type=1400 audit(1750124194.607:639): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.619434][ T30] audit: type=1400 audit(1750124194.637:640): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.699202][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1197'. [ 429.753462][T12088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53240 sclass=netlink_route_socket pid=12088 comm=syz.5.1197 [ 429.784691][ T30] audit: type=1400 audit(1750124194.637:641): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.907616][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1197'. Stopping sshd: [ 430.294751][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 stopped /usr/sbin/sshd (pid 5574) OK Stopping crond: [ 430.702155][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 stopped /usr/sbin/crond (pid 5558) OK [ 430.805003][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.893669][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5483) [ 431.105051][ T70] bridge_slave_1: left allmulticast mode [ 431.111636][ T70] bridge_slave_1: left promiscuous mode [ 431.117477][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.142620][ T70] bridge_slave_0: left allmulticast mode [ 431.148276][ T70] bridge_slave_0: left promiscuous mode [ 431.160333][ T70] bridge0: port 1(bridge_slave_0) entered disabled state Stopping network: [ 431.521541][ T30] audit: type=1400 audit(1750124196.767:642): avc: denied { read write } for pid=12134 comm="ip" path="/dev/console" dev="rootfs" ino=1047 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 431.620117][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.635563][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.645989][ T70] bond0 (unregistering): Released all slaves OK Stopping iptables: [ 431.971659][ T70] hsr_slave_0: left promiscuous mode [ 431.977793][ T70] hsr_slave_1: left promiscuous mode [ 431.984664][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.998166][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.006690][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.016913][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.048990][ T30] audit: type=1400 audit(1750124197.297:643): avc: denied { read write } for pid=12148 comm="iptables" path="/dev/console" dev="rootfs" ino=1047 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 432.098156][ T70] veth1_macvtap: left promiscuous mode [ 432.122929][ T70] veth0_macvtap: left promiscuous mode [ 432.278491][ T30] audit: type=1400 audit(1750124197.367:644): avc: denied { prog_load } for pid=12151 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 432.298480][ T70] veth1_vlan: left promiscuous mode [ 432.303834][ T70] veth0_vlan: left promiscuous mode [ 432.312807][ T30] audit: type=1400 audit(1750124197.377:645): avc: denied { prog_run } for pid=12154 comm="syz.5.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 432.393827][ T30] audit: type=1400 audit(1750124197.637:646): avc: denied { search } for pid=12148 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK [ 432.437308][T12169] ALSA: mixer_oss: invalid OSS volume '' [ 432.537645][T12174] set match dimension is over the limit! [ 432.643911][ T30] audit: type=1400 audit(1750124197.637:647): avc: denied { search } for pid=12148 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.695962][ T30] audit: type=1400 audit(1750124197.637:648): avc: denied { add_name } for pid=12148 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.168863][ T30] audit: type=1400 audit(1750124197.637:649): avc: denied { create } for pid=12148 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 433.190228][ T30] audit: type=1400 audit(1750124197.637:650): avc: denied { read open } for pid=12148 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=7303 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 433.215789][ T30] audit: type=1400 audit(1750124197.637:651): avc: denied { lock } for pid=12148 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=7303 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 433.256291][ T30] audit: type=1400 audit(1750124198.027:652): avc: denied { compute_member } for pid=12170 comm="syz.5.1205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 Stopping system message bus: [ 433.397850][ T30] audit: type=1400 audit(1750124198.037:653): avc: denied { append } for pid=12170 comm="syz.5.1205" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 433.458197][ T30] audit: type=1400 audit(1750124198.477:654): avc: denied { read write } for pid=12178 comm="syz.0.1207" name="video8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 433.510475][ T42] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 433.545172][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.554956][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.568075][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.585128][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.610662][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.686581][ T42] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 433.707074][ T42] usb 1-1: config 0 has no interface number 0 [ 433.734065][ T42] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 433.756755][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.776973][ T42] usb 1-1: Product: syz [ 433.779308][T12181] input: syz0 as /devices/virtual/input/input40 [ 433.829219][ T42] usb 1-1: Manufacturer: syz [ 433.850500][ T42] usb 1-1: SerialNumber: syz [ 433.866710][ T42] usb 1-1: config 0 descriptor?? done [ 434.095445][ T42] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 434.121583][ T42] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 434.155013][ T42] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 434.173422][ T42] usb 1-1: media controller created [ 434.207125][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.598492][ T42] usb 1-1: USB disconnect, device number 33 [ 435.108894][ T70] team0 (unregistering): Port device team_slave_1 removed [ 435.179631][ T70] team0 (unregistering): Port device team_slave_0 removed Stopping klogd: OK [ 435.701170][ T5871] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 435.708930][ T50] Bluetooth: hci0: command tx timeout Stopping acpid: [ 436.337317][T12206] tipc: Enabling of bearer rejected, already enabled [ 436.355553][ T5871] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 436.397121][ T5871] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 436.414775][T12184] lo speed is unknown, defaulting to 1000 [ 436.439708][ T5871] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 436.469415][ T5871] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 436.478617][ T5871] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 436.503462][ T5871] usb 1-1: Manufacturer: syz [ 436.508080][ T5871] usb 1-1: SerialNumber: syz [ 436.711119][T12229] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.014589][ T5871] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 437.092288][T12239] SET target dimension over the limit! [ 437.194267][ T5871] usb 1-1: USB disconnect, device number 34 [ 437.383052][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 437.383063][ T30] audit: type=1400 audit(1750124202.637:675): avc: denied { write } for pid=12241 comm="syz.4.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 437.462030][ T30] audit: type=1400 audit(1750124202.667:676): avc: denied { getopt } for pid=12241 comm="syz.4.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 OK [ 437.560514][ T30] audit: type=1400 audit(1750124202.667:677): avc: denied { node_bind } for pid=12241 comm="syz.4.1218" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 437.810470][ T50] Bluetooth: hci0: command tx timeout [ 437.919977][ T30] audit: type=1400 audit(1750124203.077:678): avc: denied { write } for pid=12249 comm="syz.0.1220" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 438.007079][ T30] audit: type=1400 audit(1750124203.087:679): avc: denied { write } for pid=12249 comm="syz.0.1220" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 438.087459][T12184] chnl_net:caif_netlink_parms(): no params data found [ 438.161264][ T30] audit: type=1400 audit(1750124203.407:680): avc: denied { allowed } for pid=12263 comm="syz.5.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 438.198364][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'. Stopping syslogd: stopped /sbin/syslogd (pid 5171) OK [ 438.624732][ T30] audit: type=1400 audit(1750124203.867:681): avc: denied { kexec_image_load } for pid=12263 comm="syz.5.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 438.708134][T12281] netlink: 'syz.0.1225': attribute type 8 has an invalid length. [ 438.810769][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'. [ 438.889411][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.896781][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.952941][T12184] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.960124][T12184] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.001964][T12184] bridge_slave_0: entered allmulticast mode [ 439.034411][T12184] bridge_slave_0: entered promiscuous mode [ 439.072631][T12184] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.090619][T12184] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.209227][T12184] bridge_slave_1: entered allmulticast mode [ 439.234816][T12184] bridge_slave_1: entered promiscuous mode [ 439.689978][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.696327][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 umount: can't remount debugfs read-only umount: can't remount tmpfs read-only [ 439.774852][T12264] kexec: Could not allocate control_code_buffer [ 439.863587][ T50] Bluetooth: hci0: command tx timeout [ 439.922962][ T30] audit: type=1400 audit(1750124205.167:682): avc: denied { search } for pid=12297 comm="cat" name="proc" dev="sda1" ino=1264 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.990122][ T30] audit: type=1400 audit(1750124205.207:683): avc: denied { search } for pid=12297 comm="cat" name="proc" dev="sda1" ino=1264 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 440.033599][T12184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.105714][ T30] audit: type=1400 audit(1750124205.357:684): avc: denied { name_bind } for pid=12301 comm="syz.0.1231" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 440.391025][T12306] trusted_key: encrypted_key: insufficient parameters specified [ 440.421655][T12184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.562384][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 440.823315][T12184] team0: Port device team_slave_0 added [ 441.455747][T12184] team0: Port device team_slave_1 added [ 441.489333][T12314] lo speed is unknown, defaulting to 1000 [ 441.950516][ T50] Bluetooth: hci0: command tx timeout [ 442.180197][T12184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.192501][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.256540][T12333] [U]  [ 442.301790][T12184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.329149][T12184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.336631][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.383249][T12184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.397924][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 442.397941][ T30] audit: type=1400 audit(1750124207.647:700): avc: denied { mount } for pid=12341 comm="syz.4.1238" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 443.433773][ T30] audit: type=1400 audit(1750124208.687:701): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 443.518768][ T30] audit: type=1400 audit(1750124208.727:702): avc: denied { setopt } for pid=12347 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 umount: sysfs bu[ 444.106097][T12184] hsr_slave_0: entered promiscuous mode sy - remounted read-only umount: devtmpfs busy - remounted read-only [ 444.121420][T12184] hsr_slave_1: entered promiscuous mode umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.190 closed by remote host. [ 444.856667][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 444.883099][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 445.052718][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 445.064715][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 445.185058][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 445.194803][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 445.265926][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 445.275596][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 445.394415][ T13] bridge_slave_1: left allmulticast mode [ 445.400098][ T13] bridge_slave_1: left promiscuous mode [ 445.406714][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.415689][ T13] bridge_slave_0: left allmulticast mode [ 445.421367][ T13] bridge_slave_0: left promiscuous mode [ 445.426995][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.694014][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.704060][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.715839][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 445.726822][ T13] bond0 (unregistering): Released all slaves [ 445.737142][ T13] bond1 (unregistering): Released all slaves [ 445.808345][ T13] bond2 (unregistering): (slave bond3): Releasing backup interface [ 445.816732][ T13] bond2 (unregistering): Released all slaves [ 445.884988][ T13] bond3 (unregistering): Released all slaves [ 445.961202][ T13] tipc: Disabling bearer [ 445.972004][ T13] tipc: Left network mode [ 446.142869][ T13] hsr_slave_0: left promiscuous mode [ 446.148551][ T13] hsr_slave_1: left promiscuous mode [ 446.154307][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.162100][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.169802][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.177348][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.190267][ T13] veth0_macvtap: left promiscuous mode [ 446.196014][ T13] veth1_vlan: left promiscuous mode [ 446.400497][ T1205] usb 3-1: Direct firmware load for ti_5052.fw failed with error -2 [ 446.408552][ T1205] usb 3-1: Falling back to sysfs fallback for: ti_5052.fw [ 446.416420][ T1205] ------------[ cut here ]------------ [ 446.422335][ T1205] WARNING: CPU: 0 PID: 1205 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x6d3/0xbe0 [ 446.434251][ T1205] Modules linked in: [ 446.438280][ T1205] CPU: 0 UID: 0 PID: 1205 Comm: kworker/0:2 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 446.448797][ T1205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.459229][ T1205] Workqueue: usb_hub_wq hub_event [ 446.464264][ T1205] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xbe0 [ 446.470520][ T1205] Code: 88 fb e9 da f9 ff ff e8 db e9 a9 fb e8 46 11 70 fb 31 ff 89 c3 89 c6 e8 0b e5 a9 fb 85 db 0f 84 17 fb ff ff e8 be e9 a9 fb 90 <0f> 0b 90 48 c7 c6 a0 ab 42 8c 4c 89 e2 4c 89 f7 e8 68 28 f9 ff e9 [ 446.490309][ T1205] RSP: 0018:ffffc9000447ec90 EFLAGS: 00010283 [ 446.496393][ T1205] RAX: 00000000000802f2 RBX: 00000000fffffff5 RCX: ffffc900191b8000 [ 446.504383][ T1205] RDX: 0000000000100000 RSI: ffffffff86123232 RDI: 0000000000000005 [ 446.512666][ T1205] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 446.520652][ T1205] R10: 00000000fffffff5 R11: 0000000000002c00 R12: ffffc9000447ef20 [ 446.528623][ T1205] R13: ffff8880655376c0 R14: ffff88806f65d0b0 R15: 0000000000001770 [ 446.536616][ T1205] FS: 0000000000000000(0000) GS:ffff888124753000(0000) knlGS:0000000000000000 [ 446.545749][ T1205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.552331][ T1205] CR2: 00007f2ff8bf84c0 CR3: 00000000360d1000 CR4: 00000000003526f0 [ 446.560280][ T1205] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.568260][ T1205] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.576393][ T1205] Call Trace: [ 446.579654][ T1205] [ 446.582656][ T1205] _request_firmware+0xfe9/0x1470 [ 446.587672][ T1205] ? __pfx__request_firmware+0x10/0x10 [ 446.593130][ T1205] ? __pfx_sprintf+0x10/0x10 [ 446.597707][ T1205] ? lockdep_init_map_type+0x5c/0x280 [ 446.603309][ T1205] request_firmware+0x35/0x50 [ 446.608004][ T1205] ti_startup+0x8f3/0x1350 [ 446.612425][ T1205] ? __pfx_ti_startup+0x10/0x10 [ 446.617261][ T1205] ? trace_kmalloc+0x2b/0xd0 [ 446.621847][ T1205] ? __kmalloc_noprof+0x242/0x510 [ 446.626861][ T1205] ? __asan_memset+0x23/0x50 [ 446.631770][ T1205] ? __pfx_ti_startup+0x10/0x10 [ 446.636624][ T1205] ? __pfx_ti_interrupt_callback+0x10/0x10 [ 446.642442][ T1205] usb_serial_probe+0x2819/0x4040 [ 446.647478][ T1205] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 446.653287][ T1205] usb_probe_interface+0x303/0x9c0 [ 446.658384][ T1205] ? __pfx_usb_probe_interface+0x10/0x10 [ 446.664600][ T1205] really_probe+0x241/0xa90 [ 446.669118][ T1205] __driver_probe_device+0x1de/0x440 [ 446.674435][ T1205] driver_probe_device+0x4c/0x1b0 [ 446.679444][ T1205] __device_attach_driver+0x1df/0x310 [ 446.684810][ T1205] ? __pfx___device_attach_driver+0x10/0x10 [ 446.691012][ T1205] bus_for_each_drv+0x159/0x1e0 [ 446.695880][ T1205] ? __pfx_bus_for_each_drv+0x10/0x10 [ 446.701244][ T1205] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.706439][ T1205] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 446.712259][ T1205] __device_attach+0x1e4/0x4b0 [ 446.717022][ T1205] ? __pfx___device_attach+0x10/0x10 [ 446.722471][ T1205] ? do_raw_spin_unlock+0x172/0x230 [ 446.727655][ T1205] bus_probe_device+0x17f/0x1c0 [ 446.732522][ T1205] device_add+0x1148/0x1a70 [ 446.737023][ T1205] ? __pfx_device_add+0x10/0x10 [ 446.741887][ T1205] ? mark_held_locks+0x49/0x80 [ 446.746647][ T1205] usb_set_configuration+0x1187/0x1e20 [ 446.752318][ T1205] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 446.758365][ T1205] usb_generic_driver_probe+0xb1/0x110 [ 446.763819][ T1205] usb_probe_device+0xef/0x3e0 [ 446.768574][ T1205] ? __pfx_usb_probe_device+0x10/0x10 [ 446.773957][ T1205] really_probe+0x241/0xa90 [ 446.778465][ T1205] __driver_probe_device+0x1de/0x440 [ 446.783974][ T1205] ? usb_driver_applicable+0x1c7/0x220 [ 446.789431][ T1205] driver_probe_device+0x4c/0x1b0 [ 446.794459][ T1205] __device_attach_driver+0x1df/0x310 [ 446.799815][ T1205] ? __pfx___device_attach_driver+0x10/0x10 [ 446.805701][ T1205] bus_for_each_drv+0x159/0x1e0 [ 446.810851][ T1205] ? __pfx_bus_for_each_drv+0x10/0x10 [ 446.816222][ T1205] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.821606][ T1205] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 446.827400][ T1205] __device_attach+0x1e4/0x4b0 [ 446.832267][ T1205] ? __pfx___device_attach+0x10/0x10 [ 446.837624][ T1205] ? do_raw_spin_unlock+0x172/0x230 [ 446.842985][ T1205] bus_probe_device+0x17f/0x1c0 [ 446.847829][ T1205] device_add+0x1148/0x1a70 [ 446.852341][ T1205] ? __pfx_device_add+0x10/0x10 [ 446.857165][ T1205] ? add_device_randomness+0xb7/0xf0 [ 446.862445][ T1205] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 446.868330][ T1205] usb_new_device+0xd07/0x1a20 [ 446.873263][ T1205] ? do_raw_spin_lock+0x12c/0x2b0 [ 446.878265][ T1205] ? __pfx_usb_new_device+0x10/0x10 [ 446.883457][ T1205] ? mark_held_locks+0x49/0x80 [ 446.888206][ T1205] hub_event+0x2eb7/0x4fa0 [ 446.892665][ T1205] ? __pfx_hub_event+0x10/0x10 [ 446.897432][ T1205] ? devm_arch_io_free_memtype_wc_release+0x30/0x70 [ 446.904226][ T1205] ? rcu_is_watching+0x12/0xc0 [ 446.908970][ T1205] process_one_work+0x9cc/0x1b70 [ 446.913907][ T1205] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 446.920399][ T1205] ? __pfx_process_one_work+0x10/0x10 [ 446.925751][ T1205] ? assign_work+0x1a0/0x250 [ 446.930324][ T1205] worker_thread+0x6c8/0xf10 [ 446.934928][ T1205] ? __kthread_parkme+0x19e/0x250 [ 446.939931][ T1205] ? __pfx_worker_thread+0x10/0x10 [ 446.945204][ T1205] kthread+0x3c2/0x780 [ 446.949248][ T1205] ? __pfx_kthread+0x10/0x10 [ 446.953828][ T1205] ? rcu_is_watching+0x12/0xc0 [ 446.958586][ T1205] ? __pfx_kthread+0x10/0x10 [ 446.963161][ T1205] ret_from_fork+0x5d7/0x6f0 [ 446.967737][ T1205] ? __pfx_kthread+0x10/0x10 [ 446.972489][ T1205] ret_from_fork_asm+0x1a/0x30 [ 446.977254][ T1205] [ 446.980258][ T1205] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 446.987526][ T1205] CPU: 0 UID: 0 PID: 1205 Comm: kworker/0:2 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 446.997846][ T1205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 447.007882][ T1205] Workqueue: usb_hub_wq hub_event [ 447.012898][ T1205] Call Trace: [ 447.016161][ T1205] [ 447.019078][ T1205] dump_stack_lvl+0x3d/0x1f0 [ 447.023671][ T1205] panic+0x71c/0x800 [ 447.027563][ T1205] ? __pfx_panic+0x10/0x10 [ 447.031974][ T1205] ? show_trace_log_lvl+0x29b/0x3e0 [ 447.037176][ T1205] ? firmware_fallback_sysfs+0x6d3/0xbe0 [ 447.042802][ T1205] check_panic_on_warn+0xab/0xb0 [ 447.047757][ T1205] __warn+0xf6/0x3c0 [ 447.051650][ T1205] ? firmware_fallback_sysfs+0x6d3/0xbe0 [ 447.057273][ T1205] report_bug+0x3c3/0x580 [ 447.061595][ T1205] ? firmware_fallback_sysfs+0x6d3/0xbe0 [ 447.067218][ T1205] handle_bug+0x184/0x210 [ 447.071533][ T1205] exc_invalid_op+0x17/0x50 [ 447.076022][ T1205] asm_exc_invalid_op+0x1a/0x20 [ 447.080857][ T1205] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xbe0 [ 447.087088][ T1205] Code: 88 fb e9 da f9 ff ff e8 db e9 a9 fb e8 46 11 70 fb 31 ff 89 c3 89 c6 e8 0b e5 a9 fb 85 db 0f 84 17 fb ff ff e8 be e9 a9 fb 90 <0f> 0b 90 48 c7 c6 a0 ab 42 8c 4c 89 e2 4c 89 f7 e8 68 28 f9 ff e9 [ 447.106679][ T1205] RSP: 0018:ffffc9000447ec90 EFLAGS: 00010283 [ 447.112731][ T1205] RAX: 00000000000802f2 RBX: 00000000fffffff5 RCX: ffffc900191b8000 [ 447.120687][ T1205] RDX: 0000000000100000 RSI: ffffffff86123232 RDI: 0000000000000005 [ 447.128639][ T1205] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 447.136593][ T1205] R10: 00000000fffffff5 R11: 0000000000002c00 R12: ffffc9000447ef20 [ 447.144549][ T1205] R13: ffff8880655376c0 R14: ffff88806f65d0b0 R15: 0000000000001770 [ 447.152512][ T1205] ? firmware_fallback_sysfs+0x6d2/0xbe0 [ 447.158143][ T1205] _request_firmware+0xfe9/0x1470 [ 447.163166][ T1205] ? __pfx__request_firmware+0x10/0x10 [ 447.168608][ T1205] ? __pfx_sprintf+0x10/0x10 [ 447.173197][ T1205] ? lockdep_init_map_type+0x5c/0x280 [ 447.178566][ T1205] request_firmware+0x35/0x50 [ 447.183233][ T1205] ti_startup+0x8f3/0x1350 [ 447.187645][ T1205] ? __pfx_ti_startup+0x10/0x10 [ 447.192488][ T1205] ? trace_kmalloc+0x2b/0xd0 [ 447.197069][ T1205] ? __kmalloc_noprof+0x242/0x510 [ 447.202081][ T1205] ? __asan_memset+0x23/0x50 [ 447.206658][ T1205] ? __pfx_ti_startup+0x10/0x10 [ 447.211497][ T1205] ? __pfx_ti_interrupt_callback+0x10/0x10 [ 447.217290][ T1205] usb_serial_probe+0x2819/0x4040 [ 447.222336][ T1205] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 447.228141][ T1205] usb_probe_interface+0x303/0x9c0 [ 447.233244][ T1205] ? __pfx_usb_probe_interface+0x10/0x10 [ 447.238866][ T1205] really_probe+0x241/0xa90 [ 447.243364][ T1205] __driver_probe_device+0x1de/0x440 [ 447.248641][ T1205] driver_probe_device+0x4c/0x1b0 [ 447.253656][ T1205] __device_attach_driver+0x1df/0x310 [ 447.259020][ T1205] ? __pfx___device_attach_driver+0x10/0x10 [ 447.264903][ T1205] bus_for_each_drv+0x159/0x1e0 [ 447.269740][ T1205] ? __pfx_bus_for_each_drv+0x10/0x10 [ 447.275097][ T1205] ? lockdep_hardirqs_on+0x7c/0x110 [ 447.280286][ T1205] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 447.286097][ T1205] __device_attach+0x1e4/0x4b0 [ 447.290852][ T1205] ? __pfx___device_attach+0x10/0x10 [ 447.296126][ T1205] ? do_raw_spin_unlock+0x172/0x230 [ 447.301315][ T1205] bus_probe_device+0x17f/0x1c0 [ 447.306158][ T1205] device_add+0x1148/0x1a70 [ 447.310646][ T1205] ? __pfx_device_add+0x10/0x10 [ 447.315480][ T1205] ? mark_held_locks+0x49/0x80 [ 447.320259][ T1205] usb_set_configuration+0x1187/0x1e20 [ 447.325745][ T1205] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 447.331813][ T1205] usb_generic_driver_probe+0xb1/0x110 [ 447.337264][ T1205] usb_probe_device+0xef/0x3e0 [ 447.342028][ T1205] ? __pfx_usb_probe_device+0x10/0x10 [ 447.347408][ T1205] really_probe+0x241/0xa90 [ 447.351915][ T1205] __driver_probe_device+0x1de/0x440 [ 447.357201][ T1205] ? usb_driver_applicable+0x1c7/0x220 [ 447.362745][ T1205] driver_probe_device+0x4c/0x1b0 [ 447.367766][ T1205] __device_attach_driver+0x1df/0x310 [ 447.373135][ T1205] ? __pfx___device_attach_driver+0x10/0x10 [ 447.379019][ T1205] bus_for_each_drv+0x159/0x1e0 [ 447.383865][ T1205] ? __pfx_bus_for_each_drv+0x10/0x10 [ 447.389233][ T1205] ? lockdep_hardirqs_on+0x7c/0x110 [ 447.394430][ T1205] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 447.400238][ T1205] __device_attach+0x1e4/0x4b0 [ 447.405010][ T1205] ? __pfx___device_attach+0x10/0x10 [ 447.410297][ T1205] ? do_raw_spin_unlock+0x172/0x230 [ 447.415491][ T1205] bus_probe_device+0x17f/0x1c0 [ 447.420374][ T1205] device_add+0x1148/0x1a70 [ 447.424878][ T1205] ? __pfx_device_add+0x10/0x10 [ 447.429720][ T1205] ? add_device_randomness+0xb7/0xf0 [ 447.435016][ T1205] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 447.440915][ T1205] usb_new_device+0xd07/0x1a20 [ 447.445673][ T1205] ? do_raw_spin_lock+0x12c/0x2b0 [ 447.450683][ T1205] ? __pfx_usb_new_device+0x10/0x10 [ 447.455872][ T1205] ? mark_held_locks+0x49/0x80 [ 447.460632][ T1205] hub_event+0x2eb7/0x4fa0 [ 447.465060][ T1205] ? __pfx_hub_event+0x10/0x10 [ 447.469807][ T1205] ? devm_arch_io_free_memtype_wc_release+0x30/0x70 [ 447.476396][ T1205] ? rcu_is_watching+0x12/0xc0 [ 447.481156][ T1205] process_one_work+0x9cc/0x1b70 [ 447.486088][ T1205] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 447.492575][ T1205] ? __pfx_process_one_work+0x10/0x10 [ 447.497938][ T1205] ? assign_work+0x1a0/0x250 [ 447.502524][ T1205] worker_thread+0x6c8/0xf10 [ 447.507104][ T1205] ? __kthread_parkme+0x19e/0x250 [ 447.512118][ T1205] ? __pfx_worker_thread+0x10/0x10 [ 447.517213][ T1205] kthread+0x3c2/0x780 [ 447.521267][ T1205] ? __pfx_kthread+0x10/0x10 [ 447.525840][ T1205] ? rcu_is_watching+0x12/0xc0 [ 447.530589][ T1205] ? __pfx_kthread+0x10/0x10 [ 447.535162][ T1205] ret_from_fork+0x5d7/0x6f0 [ 447.539739][ T1205] ? __pfx_kthread+0x10/0x10 [ 447.544314][ T1205] ret_from_fork_asm+0x1a/0x30 [ 447.549074][ T1205] [ 447.552256][ T1205] Kernel Offset: disabled [ 447.556564][ T1205] Rebooting in 86400 seconds..