last executing test programs: 22m26.124568068s ago: executing program 2 (id=3239): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@tcp6, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) utime(&(0x7f00000002c0)='./file0\x00', 0x0) 22m25.811943243s ago: executing program 2 (id=3240): sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x6, 0x200) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 22m25.571326224s ago: executing program 2 (id=3241): sched_setscheduler(0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="04060300c9"], 0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 22m25.453949985s ago: executing program 2 (id=3243): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f0000000880)=""/214, 0xd6}], 0x3, 0x6c, 0x0) 22m25.32817451s ago: executing program 2 (id=3245): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010121}, 0xfffc, 0xfffa, 0x0, 0x0, 0xa}, {0x10000000000000, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffd, 0x200}, 0x1, 0x0, 0x1, 0x0, 0x5}, {{@in=@private=0xa010102, 0x4d6, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x2, 0x2, 0xad, 0x0, 0xc600}}, 0xe8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xd, @loopback}, 0x1c) 22m25.078783435s ago: executing program 2 (id=3247): unshare(0x44040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xc6ed4000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x51e5, 0x8, 0x4, 0x3], 0x5, &(0x7f00000000c0), 0x0, [{}, {}, {}, {}, {}]}, 0xc8) 22m9.835019772s ago: executing program 32 (id=3247): unshare(0x44040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xc6ed4000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x51e5, 0x8, 0x4, 0x3], 0x5, &(0x7f00000000c0), 0x0, [{}, {}, {}, {}, {}]}, 0xc8) 10m55.572661115s ago: executing program 0 (id=5124): bind$l2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r8, &(0x7f0000000540)={0x2020}, 0x2020) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r9, 0xffffffffffffffff, 0x0) 10m53.162212614s ago: executing program 0 (id=5127): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) openat(0xffffffffffffff9c, 0x0, 0x141042, 0xdda01e4938171605) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0xc6, 0x3) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) socket$inet6_sctp(0xa, 0x5, 0x84) lsetxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x4, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) sched_setscheduler(0x0, 0x2, 0x0) 10m51.639198286s ago: executing program 0 (id=5130): bind$l2tp(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r7, &(0x7f0000000540)={0x2020}, 0x2020) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r8, 0xffffffffffffffff, 0x0) 10m50.226860502s ago: executing program 0 (id=5133): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x21, 0x0, 0x4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x109040, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x99, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f0000000840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000800) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) recvfrom(r8, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) 10m42.935374828s ago: executing program 0 (id=5146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@link_local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33c83", 0x30, 0x3a, 0x0, @empty, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9b5e, {0xe, 0x6, "90f26f", 0x5, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0x8, 0xff, 0xfa, 0x3}, {0xfff8, 0x88, 0x7, 0x3}, {0xfff9, 0xff, 0x8, 0xf}, {0x100, 0x5, 0x7, 0x4}, {0x9, 0x9, 0xfc, 0x3}, {0x4, 0x8, 0xb9, 0x2}, {0x7, 0xb8, 0x6, 0x7}, {0xf, 0x0, 0x60, 0x4ab8800}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee01, 0xee00) keyctl$chown(0x4, r4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) iopl(0x3) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000000)=0xffffffff) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x30, 0x2, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 10m41.682573604s ago: executing program 0 (id=5149): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) fstat(0xffffffffffffffff, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x7) 10m25.858978647s ago: executing program 33 (id=5149): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) fstat(0xffffffffffffffff, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x7) 45.313177122s ago: executing program 5 (id=6225): syz_emit_vhci(0x0, 0xf2) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f00000016c0)=""/4126, 0x101e}], 0x1) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x11b68000) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) 40.664385904s ago: executing program 5 (id=6232): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0xc) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, 0x0, 0x0, r7) ioctl(r2, 0x8b27, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000000300001802c00018014000300fe880000000000000000000000010001000004013c0003800c00028005000100000000002c00018006000300fe88000000000000000000000000010114"], 0xbc}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x1, 0x0, 0x0) 38.734848593s ago: executing program 5 (id=6233): pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x100, 0x0, 0x10}, &(0x7f0000000000)={0x18, 0x3, 0x0, 0x2, 0x4000, 0x0, 0x400}, 0x0, 0x0, 0x0) 38.514826613s ago: executing program 5 (id=6235): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 30.746766533s ago: executing program 5 (id=6251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}}, 0x20) 29.61055656s ago: executing program 5 (id=6255): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) 16.89519247s ago: executing program 3 (id=6276): openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x7ff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000000c0)) readv(0xffffffffffffffff, &(0x7f0000000240), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00'}, 0x18) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 15.872185972s ago: executing program 6 (id=6278): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000100000408"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 15.212627121s ago: executing program 3 (id=6280): syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c830ed00e900010007030400ff03050007030400018006000a02"], 0xf2) syz_create_resource$binfmt(0x0) r0 = socket(0x2a, 0x1, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f00000016c0)=""/4126, 0x101e}], 0x1) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x11b68000) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000700)={{0xb, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r4 = dup2(r2, r2) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) pipe2(&(0x7f0000001cc0), 0x800) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) 14.047802473s ago: executing program 6 (id=6281): syz_emit_vhci(&(0x7f0000008000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x1, 0x804}}}, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 12.742150286s ago: executing program 6 (id=6283): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000001840)=""/4090, 0xffa) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000002840)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x801004}, 0xc, &(0x7f0000002800)={&(0x7f00000023c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x13, 0x7, 0x1, 0x0, "0576258bed44905d123ea2f35b3b95"}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb6a1}]}}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x102, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, @NFT_MSG_NEWFLOWTABLE={0xf4, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbc9}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}]}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4ef577b74065d6eb}}}, 0x2a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 11.403685659s ago: executing program 3 (id=6285): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f0000001840)=""/4090, 0xffa) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000002840)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x801004}, 0xc, &(0x7f0000002800)={&(0x7f00000023c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xe8, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x13, 0x7, 0x1, 0x0, "0576258bed44905d123ea2f35b3b95"}, @NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb6a1}]}}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x102, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbc9}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}]}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4ef577b74065d6eb}}}, 0x2bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) 10.253648635s ago: executing program 3 (id=6287): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2749baca85309be96d5a45bbb29ea06f9cbc7eea15bc1ee369d2707231280f0415df341ab76de90db5ff7ffffffd075b373f51be98db7efbbe8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c1f870adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eacb4389adbb47efb7b3f19046c7f1bd1bf56e58555d96137f95b3aacd74ed1c8a8676468cf2405e48723c6b1ff3698422f88ffed8617dd64330f4c38ba86e3b50da03f4b1e4808aa5c9e9546d7190747c6abc5beab28cec4ff7faa3fab48cdb3d64cfd5d698416752a16f32a54ccef577832e4cf684fce2cb0bab7f6a5821b26483322000000000000596c6e1ac996b8a0924948750b6e52c09d53950e5c8143db8669f8a5bf6511df822532e3c78d019149651255048aab0399e5d6e317b6f3fbc2600ffc3c66c7244b7bcf6b78b5e8c0ee04ce344ceb084b4f2ef09b59a36a92b3874edc559e5bf58a567d385ba92df9121dfa257e60655dcbff581c75107b01b5baaf29ebaf24861c538fefcaecb52a6b69fc450e10645df60a9d50131466113c6aac5abbcf9e9f2f0384da3f9892af413bd87f51f7f0cf61096fd79327fa66effe89a72d7a75d40f0c1ad299f55eafcd52a39649ab6021e30f901933f11092"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0xffffffffffffffa0) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 8.880813734s ago: executing program 4 (id=6288): socket$inet6_tcp(0xa, 0x1, 0x0) iopl(0x3) acct(&(0x7f0000000140)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = openat$iommufd(0xffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8.691295628s ago: executing program 6 (id=6290): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="414c5450434d0a50484f4e45495220274d69632043617074757265272030303030303030303030303030303030303030300a50484f4e45494e20274d617374657230506c61796261636b20566f6c756d65272030303030303030303030303030303030303030300a4449474954414c33202743442730303030303030303030300a535045414b4552202743442720303030e125714606a90c46303030303030000000"], 0xe6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 7.301440065s ago: executing program 1 (id=6291): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f0000001840)=""/4090, 0xffa) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000002840)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x801004}, 0xc, &(0x7f0000002800)={&(0x7f00000023c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xe8, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x13, 0x7, 0x1, 0x0, "0576258bed44905d123ea2f35b3b95"}, @NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb6a1}]}}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x102, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbc9}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}]}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4ef577b74065d6eb}}}, 0x2bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) 6.301354541s ago: executing program 6 (id=6292): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532"], 0x138) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) socket$alg(0x26, 0x5, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6.215542745s ago: executing program 1 (id=6293): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x6800) read$FUSE(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) 6.135378765s ago: executing program 3 (id=6294): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r1, 0xcccccccc}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r1], &(0x7f0000000200), &(0x7f00000000c0)=[r2], &(0x7f0000000040), 0x0, 0x300}) 6.130796272s ago: executing program 4 (id=6295): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000500)=""/97, 0x61}], 0x1, 0x7fff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x20, 0x0, 0x0, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xc4, 0x0, 0x0, @loopback, @loopback}}}}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) 5.967817802s ago: executing program 3 (id=6296): socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x9, 0x7, "21507f99621acf6dd385ce83b03efcce17bee4", 0x1, 0xb}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7fffffff, 0x6, 0x9}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}}, 0x4000) 4.843295834s ago: executing program 4 (id=6297): syz_emit_vhci(&(0x7f0000008000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x1, 0x804}}}, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="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", 0x420}], 0x2}, 0x0) 4.742797597s ago: executing program 1 (id=6298): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 3.689032562s ago: executing program 4 (id=6299): syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) openat$nullb(0xffffff9c, &(0x7f0000000100), 0x40000, 0x0) r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x3, 0x1, 0x0, 0x5, 0x0, 0x98, [{0x1000000, 0x83}]}]}, {0x0, [0x30, 0x61]}}, 0x0, 0x34, 0x0, 0x8, 0xbf81, 0x0, @void, @value}, 0x28) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x100, 0x0, 0x10}, &(0x7f0000000000)={0x18, 0x3, 0x0, 0x2, 0x4000, 0x0, 0x400}, 0x0, 0x0, 0x0) 3.530343563s ago: executing program 1 (id=6300): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000000000"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) openat(0xffffffffffffff9c, 0x0, 0x141042, 0xdda01e4938171605) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0xc6, 0x3) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) socket$inet6_sctp(0xa, 0x5, 0x84) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x4, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d09f91b50090987f70906d038e7ff7fc6e5539b0d3d0e8b089b33396d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe59}}, 0xfa) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 3.463591944s ago: executing program 4 (id=6301): syz_emit_vhci(&(0x7f0000008000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x1, 0x804}}}, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b083", 0x420}], 0x2}, 0x0) 1.794829483s ago: executing program 4 (id=6302): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000001840)=""/4090, 0xffa) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000002840)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x801004}, 0xc, &(0x7f0000002800)={&(0x7f00000023c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x13, 0x7, 0x1, 0x0, "0576258bed44905d123ea2f35b3b95"}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb6a1}]}}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x102, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, @NFT_MSG_NEWFLOWTABLE={0xf4, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbc9}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}]}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4ef577b74065d6eb}}}, 0x2a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 1.552482497s ago: executing program 6 (id=6303): syz_emit_vhci(0x0, 0xf2) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x11b68000) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) 1.550697119s ago: executing program 1 (id=6304): socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x9, 0x7, "21507f99621acf6dd385ce83b03efcce17bee4", 0x1, 0xb}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7fffffff, 0x6, 0x9}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}}, 0x4000) 0s ago: executing program 1 (id=6305): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1, 0x2, 0x100, 0x4}) fcntl$lock(r1, 0x26, &(0x7f00000002c0)={0x0, 0x0, 0xff34}) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r0, {0x7}}, './cgroup/../file0\x00'}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000fc0)=0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r6, 0xf09, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x8084) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200029bd7000fbdbdf2531000000080001005500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990004000000520000000800db00", @ANYRES32=r3, @ANYBLOB="0800010800db00"/20, @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xd7ecd36814b87d08}, 0x4) r7 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff620af8fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): 663346][T29650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.679067][T29650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.698018][T29650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.743419][T29650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.753604][T29650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.960957][T29650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.419381][T29650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.442655][T29650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.502115][T29650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.073044][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1143.084989][T30419] netlink: 'syz.4.5241': attribute type 10 has an invalid length. [ 1143.101576][T29650] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.143225][T29650] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.339441][T29650] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.355977][T29650] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.921633][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.000331][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.109631][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.218622][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.328147][ T30] audit: type=1400 audit(1742505947.911:3566): avc: denied { mounton } for pid=29650 comm="syz-executor" path="/root/syzkaller.6lXcoY/syz-tmp" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1144.359695][ T30] audit: type=1400 audit(1742505947.911:3567): avc: denied { mounton } for pid=29650 comm="syz-executor" path="/root/syzkaller.6lXcoY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1144.386653][ T30] audit: type=1400 audit(1742505947.911:3568): avc: denied { mounton } for pid=29650 comm="syz-executor" path="/root/syzkaller.6lXcoY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=71110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1144.452354][ T30] audit: type=1400 audit(1742505948.041:3569): avc: denied { mounton } for pid=29650 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1144.527995][ T30] audit: type=1400 audit(1742505948.081:3570): avc: denied { mounton } for pid=29650 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1145.367568][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1145.416762][ T10] usb 4-1: USB disconnect, device number 34 [ 1145.453184][ T30] audit: type=1400 audit(1742505949.031:3571): avc: denied { sys_chroot } for pid=30462 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1145.517585][ T30] audit: type=1400 audit(1742505949.031:3572): avc: denied { setgid } for pid=30462 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1145.549112][ T30] audit: type=1400 audit(1742505949.031:3573): avc: denied { setrlimit } for pid=30462 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1148.605593][T30526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5254'. [ 1149.221290][T30533] overlayfs: failed to resolve './file1': -2 [ 1152.430418][T25827] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1152.614078][T25827] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1152.629296][T25827] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1152.658724][T25827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.684317][T30589] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1152.704793][T25827] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1155.179713][T11933] usb 5-1: USB disconnect, device number 44 [ 1156.324022][ T30] audit: type=1400 audit(1742505959.891:3574): avc: denied { connect } for pid=30644 comm="syz.1.5266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1156.449702][ T30] audit: type=1400 audit(1742505959.891:3575): avc: denied { name_connect } for pid=30644 comm="syz.1.5266" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1158.869506][T30712] netlink: 'syz.4.5275': attribute type 4 has an invalid length. [ 1161.185898][T11910] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1162.919312][T11910] usb 7-1: Using ep0 maxpacket: 8 [ 1162.928808][T11910] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1162.938113][T11910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.946186][T11910] usb 7-1: Product: syz [ 1163.199068][T11910] usb 7-1: Manufacturer: syz [ 1164.174848][T11910] usb 7-1: SerialNumber: syz [ 1164.962364][T11910] usb 7-1: config 0 descriptor?? [ 1165.209692][T11910] usb 7-1: can't set config #0, error -71 [ 1165.238352][T11910] usb 7-1: USB disconnect, device number 2 [ 1165.562686][T30804] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5287'. [ 1166.263476][T30813] batadv1: entered promiscuous mode [ 1166.298104][T30813] batadv1: entered allmulticast mode [ 1168.162042][T30862] netlink: 'syz.4.5286': attribute type 10 has an invalid length. [ 1168.889885][T30880] fuse: Bad value for 'fd' [ 1170.439672][T24690] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1170.572368][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 1170.931422][T24690] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1171.409194][T24690] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1171.431920][T24690] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1171.464672][T24690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1171.479101][T24690] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1171.505510][T24690] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1171.560862][T24690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1171.593227][T24690] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1171.614057][T24690] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1171.642453][T24690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1171.656305][T24690] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1171.766138][T24690] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1171.777522][T24690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1171.789079][T24690] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1171.804864][T24690] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1171.815875][T24690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1171.823996][T24690] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1171.856641][T24690] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1172.589395][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1172.605079][T24690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1172.613129][T24690] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1172.834815][T24690] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1174.621967][T24690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1174.809331][T24690] usb 2-1: unable to read config index 7 descriptor/start: -71 [ 1174.829290][T24690] usb 2-1: can't read configurations, error -71 [ 1177.300745][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.564731][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.113146][T31013] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1183.739574][T11912] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1184.342619][T11912] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1184.574502][T25827] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1184.580489][T11912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1184.656514][T11912] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1184.695195][T11912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1184.730378][T11912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1184.759430][T25827] usb 5-1: Using ep0 maxpacket: 8 [ 1184.775979][T25827] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1184.796993][T25827] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1184.849285][T25827] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1184.927890][T11912] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1184.938950][T11912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1184.946691][T11912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1184.955767][T11912] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1184.966934][T11912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1185.311316][T25827] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1185.357927][T11912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.565404][T25827] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1185.595422][T25827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.749629][T11912] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.762048][T11912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1185.771375][T11912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.780538][T11912] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.791455][T11912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1185.798898][T11912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.807938][T11912] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.819409][T11912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1185.826933][T11912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.837073][T11912] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.848022][T11912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1185.856133][T11912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.865370][T11912] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.889355][T11912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1185.907358][T11912] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1185.917477][T25827] usb 5-1: GET_CAPABILITIES returned 0 [ 1185.926776][T31069] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1185.933302][T31069] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1185.940949][T25827] usbtmc 5-1:16.0: can't read capabilities [ 1185.945521][T11912] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1185.967462][T11912] usb 2-1: Product: syz [ 1185.978597][T11912] usb 2-1: Manufacturer: syz [ 1185.991433][T11912] usb 2-1: SerialNumber: syz [ 1185.999433][T31069] vhci_hcd vhci_hcd.0: Device attached [ 1186.033363][T31072] vhci_hcd: connection closed [ 1186.034368][T11912] usb 2-1: config 0 descriptor?? [ 1186.050871][T29934] vhci_hcd: stop threads [ 1186.073208][T29934] vhci_hcd: release socket [ 1186.088117][T11912] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 1186.108025][T29934] vhci_hcd: disconnect device [ 1186.172048][T25827] usb 5-1: USB disconnect, device number 45 [ 1186.391481][ T26] usb 2-1: USB disconnect, device number 41 [ 1186.770620][ T26] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 1190.218395][T31156] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1194.623402][T25827] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1194.805801][T25827] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1194.820227][T25827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1194.840309][T25827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1194.859406][T25827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1194.877142][T25827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1194.899297][T25827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1194.934859][T25827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1194.960809][T25827] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 1194.988294][T25827] usb 6-1: can't read configurations, error -71 [ 1195.899395][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1196.803600][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1197.153496][T11912] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1197.849930][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1197.930366][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.938369][ T10] usb 7-1: Product: syz [ 1197.942796][ T10] usb 7-1: Manufacturer: syz [ 1197.947530][ T10] usb 7-1: SerialNumber: syz [ 1198.008568][ T10] usb 7-1: config 0 descriptor?? [ 1198.234492][ T10] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1198.407174][T31235] Invalid ELF header type: 2 != 1 [ 1198.500494][T11912] usb 5-1: Using ep0 maxpacket: 8 [ 1198.516615][T11912] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1198.572370][T11912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.583986][T11912] usb 5-1: Product: syz [ 1198.588243][T11912] usb 5-1: Manufacturer: syz [ 1198.594462][T11912] usb 5-1: SerialNumber: syz [ 1198.607640][T11912] usb 5-1: config 0 descriptor?? [ 1198.703509][T31244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5355'. [ 1198.981058][T11912] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1199.993310][T24980] Bluetooth: hci0: command 0x0406 tx timeout [ 1200.020031][ T10] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1200.153211][ T10] usb 7-1: USB disconnect, device number 3 [ 1200.607342][T11912] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1200.681687][T11912] usb 5-1: USB disconnect, device number 46 [ 1200.826054][T31290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5360'. [ 1201.233177][T31299] overlay: filesystem on ./bus not supported as upperdir [ 1202.306492][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1202.600846][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1202.628877][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1202.698383][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1202.788357][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1202.844655][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1203.756504][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1203.839288][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1203.870327][ T10] usb 7-1: unable to read config index 2 descriptor/start: -71 [ 1203.877922][ T10] usb 7-1: can't read configurations, error -71 [ 1208.301359][T31332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'. [ 1208.361947][T31377] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1208.368495][T31377] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1209.449710][T31377] vhci_hcd vhci_hcd.0: Device attached [ 1209.493778][T31379] vhci_hcd: connection closed [ 1209.521193][ T1118] vhci_hcd: stop threads [ 1209.702167][ T1118] vhci_hcd: release socket [ 1209.706623][ T1118] vhci_hcd: disconnect device [ 1212.841823][T19411] Bluetooth: hci1: Frame reassembly failed (-84) [ 1214.741415][T24980] Bluetooth: hci1: command 0x1003 tx timeout [ 1214.756002][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1215.562352][T31459] bad cache= option: none [ 1215.562352][T31459] [ 1215.569412][T31459] CIFS: VFS: bad cache= option: none [ 1220.229351][T11910] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1221.257945][T31501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5394'. [ 1221.314667][T31501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31501 comm=syz.4.5394 [ 1221.433689][T11910] usb 7-1: Using ep0 maxpacket: 16 [ 1221.445669][T11910] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1221.462558][T11910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1222.714029][T11910] usb 7-1: string descriptor 0 read error: -71 [ 1222.730601][T11910] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1222.751178][T11910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.765144][T11910] usb 7-1: config 0 descriptor?? [ 1222.917071][T11910] usb 7-1: can't set config #0, error -71 [ 1222.924963][T11910] usb 7-1: USB disconnect, device number 6 [ 1224.329375][ T5919] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1224.510523][ T5919] usb 6-1: no configurations [ 1224.519299][ T5919] usb 6-1: can't read configurations, error -22 [ 1225.228331][ T5919] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1225.413189][ T5919] usb 6-1: no configurations [ 1225.417813][ T5919] usb 6-1: can't read configurations, error -22 [ 1225.466372][ T5919] usb usb6-port1: attempt power cycle [ 1226.814804][T31570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5405'. [ 1226.940110][T31570] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31570 comm=syz.3.5405 [ 1226.959879][ T5919] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1226.990613][ T5919] usb 6-1: no configurations [ 1226.995822][ T5919] usb 6-1: can't read configurations, error -22 [ 1227.170646][ T5919] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1228.361497][ T5919] usb 6-1: device not accepting address 34, error -71 [ 1228.369947][ T5919] usb usb6-port1: unable to enumerate USB device [ 1232.861678][T31637] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5418'. [ 1232.956411][T31637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31637 comm=syz.6.5418 [ 1233.230137][T31660] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5420'. [ 1234.771198][T31668] netlink: 'syz.1.5416': attribute type 10 has an invalid length. [ 1238.740904][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.747259][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.693948][T31726] batadv1: entered promiscuous mode [ 1240.699199][T31726] batadv1: entered allmulticast mode [ 1240.701521][T31728] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5433'. [ 1240.826681][T31738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31738 comm=syz.6.5433 [ 1241.249371][T11910] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1241.699333][T24980] Bluetooth: hci0: command 0x0406 tx timeout [ 1242.079399][T11910] usb 4-1: Using ep0 maxpacket: 8 [ 1242.218771][T11910] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1242.239341][T11910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1242.345815][T11910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1242.356678][T11910] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1242.958133][T11910] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1242.969436][T11910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.195690][T11910] usb 4-1: GET_CAPABILITIES returned 0 [ 1243.201521][T11910] usbtmc 4-1:16.0: can't read capabilities [ 1243.273718][T31807] netlink: 'syz.6.5441': attribute type 10 has an invalid length. [ 1243.836952][T31762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5436'. [ 1244.700110][T31807] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1245.146021][T31826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5439'. [ 1245.860068][ T5919] usb 4-1: USB disconnect, device number 35 [ 1246.702012][T31842] netlink: 'syz.6.5442': attribute type 10 has an invalid length. [ 1246.831071][T31842] bond0: (slave netdevsim0): Releasing backup interface [ 1246.883896][T31842] team0: Port device netdevsim0 added [ 1248.926528][T31874] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1248.952628][ C1] vkms_vblank_simulate: vblank timer overrun [ 1248.958705][T31874] CIFS mount error: No usable UNC path provided in device string! [ 1248.958705][T31874] [ 1248.969054][T31874] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1249.092074][T31874] block device autoloading is deprecated and will be removed. [ 1249.389863][T31876] netlink: 'syz.1.5452': attribute type 10 has an invalid length. [ 1249.677216][ T5919] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1249.740431][T31879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5454'. [ 1249.872797][ T5919] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1249.885593][ T5919] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1249.895471][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.913341][T31861] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1249.945295][ T5919] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1250.147288][T11910] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1250.188887][ T5919] usb 4-1: USB disconnect, device number 36 [ 1250.880889][T11910] usb 7-1: Using ep0 maxpacket: 8 [ 1250.969926][T11910] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1250.983577][T11910] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1250.994606][T11910] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1251.004577][T11910] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1251.017593][T11910] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1251.038999][T11910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.052300][T31917] udevd[31917]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1251.094496][T11912] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1251.253309][T11910] usb 7-1: GET_CAPABILITIES returned 0 [ 1251.259045][T11910] usbtmc 7-1:16.0: can't read capabilities [ 1251.279488][T11912] usb 2-1: no configurations [ 1251.284096][T11912] usb 2-1: can't read configurations, error -22 [ 1251.429453][T11912] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1251.463186][T31881] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5455'. [ 1251.711918][T11912] usb 2-1: no configurations [ 1251.717555][T11912] usb 2-1: can't read configurations, error -22 [ 1251.725718][T11912] usb usb2-port1: attempt power cycle [ 1252.090036][T11912] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1252.250442][T11912] usb 2-1: no configurations [ 1252.258253][T11912] usb 2-1: can't read configurations, error -22 [ 1252.412595][T11912] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1252.465937][T31958] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1252.480250][T11912] usb 2-1: no configurations [ 1252.558514][T11912] usb 2-1: can't read configurations, error -22 [ 1252.605404][T11912] usb usb2-port1: unable to enumerate USB device [ 1253.718858][T11912] usb 7-1: USB disconnect, device number 7 [ 1254.621120][T31980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5464'. [ 1255.111498][T31997] netlink: 'syz.5.5469': attribute type 10 has an invalid length. [ 1257.120311][T25827] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1257.318953][T25827] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1257.340606][T25827] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1257.362187][T25827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.416795][T32006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1257.482756][T25827] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1258.436720][T25827] usb 2-1: USB disconnect, device number 46 [ 1258.506299][T32028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 1259.488514][T32024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5472'. [ 1264.986840][T32119] netlink: 'syz.6.5483': attribute type 10 has an invalid length. [ 1265.602739][T32119] team0: Port device netdevsim0 removed [ 1265.610556][T32119] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1267.430040][ T30] audit: type=1326 audit(1742506071.011:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32136 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc540b8d169 code=0x7ffc0000 [ 1267.472796][T32137] bridge0: port 3(vlan2) entered blocking state [ 1267.495316][T32137] bridge0: port 3(vlan2) entered disabled state [ 1267.577884][T32144] Invalid ELF header type: 2 != 1 [ 1268.059646][T32137] vlan2: entered allmulticast mode [ 1268.137268][ T30] audit: type=1326 audit(1742506071.011:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32136 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc540b8d169 code=0x7ffc0000 [ 1268.220058][T32137] vlan2: left allmulticast mode [ 1268.242944][ T30] audit: type=1326 audit(1742506071.051:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32136 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc540b8d169 code=0x7ffc0000 [ 1268.267482][ T30] audit: type=1326 audit(1742506071.051:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32136 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc540b8d169 code=0x7ffc0000 [ 1268.291259][ T30] audit: type=1326 audit(1742506071.051:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32136 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc540b8d169 code=0x7ffc0000 [ 1268.315005][ T30] audit: type=1326 audit(1742506071.051:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32136 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc540b8d169 code=0x7ffc0000 [ 1268.345317][ T30] audit: type=1326 audit(1742506071.051:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32136 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fc540b8d169 code=0x7ffc0000 [ 1268.549924][ T30] audit: type=1326 audit(1742506071.051:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32136 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc540b8d169 code=0x7ffc0000 [ 1269.183977][ T30] audit: type=1326 audit(1742506071.051:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32136 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc540b8d169 code=0x7ffc0000 [ 1269.207531][ T30] audit: type=1326 audit(1742506071.051:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32136 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc540b8d169 code=0x7ffc0000 [ 1270.299356][ T5919] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1270.770801][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 1270.840002][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1270.920191][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1270.939320][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1270.984457][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1271.007061][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1271.016332][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.672144][ T5919] usb 2-1: GET_CAPABILITIES returned 0 [ 1271.682236][ T5919] usbtmc 2-1:16.0: can't read capabilities [ 1271.939472][ T5829] Bluetooth: hci5: unexpected event for opcode 0x0804 [ 1272.177929][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.187081][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.196192][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.205289][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.287410][T32195] netlink: 124 bytes leftover after parsing attributes in process `syz.5.5500'. [ 1272.463893][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.478955][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.489203][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.499175][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.508838][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.527890][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.537841][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.547952][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.557478][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.600987][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.611308][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1272.622000][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1273.207381][ T5919] usb 2-1: USB disconnect, device number 47 [ 1275.638687][ T1118] Bluetooth: hci1: Frame reassembly failed (-84) [ 1277.701318][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1280.612533][T32278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5518'. [ 1280.757184][T32280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32280 comm=syz.4.5518 [ 1281.908350][T32310] overlayfs: failed to resolve './file1': -2 [ 1284.527212][ T5829] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 1287.912693][T32353] overlayfs: failed to resolve './file0': -2 [ 1288.624188][T32355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5533'. [ 1288.752166][T32355] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32355 comm=syz.1.5533 [ 1290.368921][ T5829] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 1291.289466][T11933] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1291.542249][T11933] usb 2-1: Using ep0 maxpacket: 8 [ 1291.592225][T11933] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1291.593510][T11933] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1291.596116][T11933] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1291.596788][T11933] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1291.597338][T11933] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1291.597659][T11933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.946893][T32411] Invalid ELF header type: 2 != 1 [ 1292.942119][T32413] overlayfs: failed to resolve './file1': -2 [ 1293.526290][T11933] usb 2-1: GET_CAPABILITIES returned 0 [ 1293.539715][T11933] usbtmc 2-1:16.0: can't read capabilities [ 1293.548356][T11933] usb 2-1: USB disconnect, device number 48 [ 1294.135713][T32434] overlayfs: failed to resolve './file0': -2 [ 1299.530453][T32462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5552'. [ 1299.685817][T32462] bond1: entered promiscuous mode [ 1299.715616][T32462] bond1: entered allmulticast mode [ 1299.754752][T32490] batadv1: entered promiscuous mode [ 1299.789059][T32490] batadv1: entered allmulticast mode [ 1300.211264][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.217568][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.751646][T32547] overlay: filesystem on ./bus not supported as upperdir [ 1307.909492][ T5919] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1307.933594][T32574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5568'. [ 1308.172809][ T5919] usb 6-1: no configurations [ 1308.173288][ T5919] usb 6-1: can't read configurations, error -22 [ 1308.382764][T32574] bond1: entered promiscuous mode [ 1308.382788][T32574] bond1: entered allmulticast mode [ 1308.429313][ T5919] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1308.630472][ T5919] usb 6-1: no configurations [ 1308.630529][ T5919] usb 6-1: can't read configurations, error -22 [ 1308.631040][ T5919] usb usb6-port1: attempt power cycle [ 1309.019424][ T5919] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1309.045840][ T5919] usb 6-1: no configurations [ 1309.045896][ T5919] usb 6-1: can't read configurations, error -22 [ 1309.179395][ T5919] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1309.206209][ T5919] usb 6-1: no configurations [ 1309.206265][ T5919] usb 6-1: can't read configurations, error -22 [ 1309.206843][ T5919] usb usb6-port1: unable to enumerate USB device [ 1310.875274][T32633] overlay: filesystem on ./bus not supported as upperdir [ 1312.938423][T32655] netlink: 'syz.5.5581': attribute type 4 has an invalid length. [ 1314.801675][ T5829] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 1316.470363][T32684] netlink: 'syz.3.5587': attribute type 4 has an invalid length. [ 1316.832875][T32689] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1316.843887][T32689] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1320.563983][T32722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5595'. [ 1320.598154][T32722] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32722 comm=syz.1.5595 [ 1323.225338][T32748] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1324.880750][T32759] Invalid ELF header type: 2 != 1 [ 1325.411885][ T5829] Bluetooth: hci3: unexpected event for opcode 0x0804 [ 1325.708506][ T306] overlay: filesystem on ./bus not supported as upperdir [ 1327.218197][ T323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5607'. [ 1329.893859][ T348] Invalid ELF header type: 2 != 1 [ 1334.136147][ T377] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=377 comm=syz.3.5627 [ 1335.661169][ T5829] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 1340.325815][ T455] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=455 comm=syz.6.5642 [ 1342.386101][ T468] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5641'. [ 1343.716577][ T479] netlink: 'syz.6.5647': attribute type 4 has an invalid length. [ 1344.566228][T13985] Bluetooth: hci1: Frame reassembly failed (-84) [ 1345.974963][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1347.643762][ T520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5651'. [ 1350.118640][ T543] Invalid ELF header type: 2 != 1 [ 1350.457381][ T545] bad cache= option: none [ 1350.457381][ T545] [ 1350.464079][ T545] CIFS: VFS: bad cache= option: none [ 1351.071117][ T5829] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 1352.250589][ T557] fuse: Unknown parameter 'use00000000000000000000' [ 1352.320891][ T559] netlink: 'syz.5.5666': attribute type 4 has an invalid length. [ 1352.370726][ T559] netlink: 'syz.5.5666': attribute type 4 has an invalid length. [ 1352.827927][ T569] overlay: filesystem on ./bus not supported as upperdir [ 1353.417652][ T559] syz.5.5666 (559) used greatest stack depth: 20992 bytes left [ 1358.063814][ T5829] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 1359.099365][ T5829] Bluetooth: hci3: unexpected event for opcode 0x0804 [ 1359.178587][ T5829] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1361.621808][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.628128][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.736262][ T5829] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 1361.894451][ T650] fuse: Unknown parameter 'grou00000000000000000000' [ 1366.746681][ T684] overlay: filesystem on ./bus not supported as upperdir [ 1370.651833][ T5829] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1370.789072][ T707] netlink: 'syz.6.5697': attribute type 4 has an invalid length. [ 1370.963203][ T707] netlink: 'syz.6.5697': attribute type 4 has an invalid length. [ 1376.472170][ T5829] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1378.027335][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 1378.286791][ T777] fuse: Bad value for 'fd' [ 1378.722132][T24980] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1378.817473][ T790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5712'. [ 1378.857424][ T790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5712'. [ 1379.193117][ T790] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5712'. [ 1379.297738][ T794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5710'. [ 1379.940642][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1382.391966][ T841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5714'. [ 1382.462844][ T842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5718'. [ 1382.516606][ T842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5718'. [ 1384.074787][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5721'. [ 1384.105924][ T856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5721'. [ 1384.122536][ T856] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5721'. [ 1384.131115][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1384.131129][ T30] audit: type=1400 audit(1742506187.711:3603): avc: denied { write } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1384.220437][ T30] audit: type=1400 audit(1742506187.711:3604): avc: denied { remove_name } for pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1384.323326][ T30] audit: type=1400 audit(1742506187.711:3605): avc: denied { rename } for pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1384.392288][ T30] audit: type=1400 audit(1742506187.711:3606): avc: denied { add_name } for pid=5177 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1384.499416][ T30] audit: type=1400 audit(1742506187.711:3607): avc: denied { unlink } for pid=5177 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1384.552327][ T30] audit: type=1400 audit(1742506187.711:3608): avc: denied { create } for pid=5177 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1384.775693][ T5829] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1388.362022][ T917] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1388.575197][ T905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5723'. [ 1390.064773][ T5829] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 1392.122040][ T5829] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1392.387153][ T969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5733'. [ 1392.760775][T25827] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1393.009554][T25827] usb 4-1: Using ep0 maxpacket: 8 [ 1393.020263][T25827] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1393.034838][T25827] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1393.045040][T25827] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1393.659494][T25827] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1393.697924][T25827] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1393.740729][T25827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.984826][T25827] usb 4-1: GET_CAPABILITIES returned 0 [ 1393.990808][T25827] usbtmc 4-1:16.0: can't read capabilities [ 1394.217975][ T968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5739'. [ 1395.496633][ T30] audit: type=1400 audit(1742506199.081:3609): avc: denied { mount } for pid=1014 comm="syz.6.5743" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1395.687119][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 1396.814182][T11910] usb 4-1: USB disconnect, device number 37 [ 1397.857601][T24980] Bluetooth: hci1: command 0x1003 tx timeout [ 1397.864008][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1398.439142][ T5829] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 1403.769452][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1404.796079][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1404.803005][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1405.609658][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1405.620079][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1405.630144][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1406.322890][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1406.332478][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.417026][ T10] usb 2-1: can't set config #16, error -71 [ 1406.443137][ T10] usb 2-1: USB disconnect, device number 49 [ 1406.690310][ T5829] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1412.434786][ T1261] bad cache= option: none [ 1412.434786][ T1261] [ 1412.441934][ T1261] CIFS: VFS: bad cache= option: none [ 1414.550895][ T5829] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 1419.869448][ T26] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1420.136611][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 1420.158255][ T26] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1420.223501][ T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1420.237942][ T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1420.353992][ T26] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1420.367309][ T26] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1420.376459][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.389502][T25827] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1420.420134][ T5829] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1420.843322][ T1353] overlay: filesystem on ./bus not supported as upperdir [ 1421.319431][T25827] usb 6-1: Using ep0 maxpacket: 8 [ 1421.375311][ T26] usb 4-1: GET_CAPABILITIES returned 0 [ 1421.382299][ T26] usbtmc 4-1:16.0: can't read capabilities [ 1421.408003][T25827] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1421.465918][T25827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.616272][T25827] usb 6-1: Product: syz [ 1421.617582][ T1324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5786'. [ 1422.610222][T25827] usb 6-1: Manufacturer: syz [ 1422.614864][T25827] usb 6-1: SerialNumber: syz [ 1423.290951][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.616769][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.648759][T25827] usb 6-1: config 0 descriptor?? [ 1423.799891][T11910] usb 4-1: USB disconnect, device number 38 [ 1424.021158][ T5829] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1424.043038][T25827] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 1425.021578][T25827] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1425.684300][T25827] usb 6-1: USB disconnect, device number 39 [ 1427.543194][T24980] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1429.959007][ T1457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5802'. [ 1430.072237][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 1430.080252][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 1430.080692][ T1457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5802'. [ 1430.087966][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1430.104910][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1430.797507][ T1457] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5802'. [ 1430.836994][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1430.940132][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1430.948060][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1430.974365][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1430.989395][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1430.997137][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1431.022297][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1431.046305][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1431.573326][ T1479] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1431.688112][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1431.718275][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1431.855227][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1431.881538][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.259123][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.277247][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.301564][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.321645][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.451073][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.458823][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.466677][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.483198][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.491125][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.498948][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.506803][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.516981][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.525182][T11910] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1433.577413][T11910] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 1433.635027][ T5829] Bluetooth: hci5: unexpected event for opcode 0x0804 [ 1441.249292][ T5829] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1441.331735][ T26] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1441.619336][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 1441.626434][ T26] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1441.655975][ T26] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1441.734342][ T26] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1441.779424][ T26] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1442.737401][ T1586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5826'. [ 1442.747152][ T30] audit: type=1400 audit(1742506246.321:3610): avc: denied { ioctl } for pid=1584 comm="syz.3.5826" path="socket:[80355]" dev="sockfs" ino=80355 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1442.789396][ T26] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1442.859270][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.014417][ T1589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5824'. [ 1443.026496][ T1589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5824'. [ 1443.315146][ T1564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5822'. [ 1443.826473][ T1600] overlay: filesystem on ./bus not supported as upperdir [ 1444.442415][ T26] usb 6-1: GET_CAPABILITIES returned 0 [ 1444.447935][ T26] usbtmc 6-1:16.0: can't read capabilities [ 1444.693943][ T5829] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1444.942632][ T5829] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1445.610789][ T1615] netlink: 'syz.6.5830': attribute type 10 has an invalid length. [ 1445.679551][ T1615] bond0: (slave netdevsim0): Releasing backup interface [ 1445.742363][ T1615] team0: Port device netdevsim0 added [ 1446.045459][T11933] usb 6-1: USB disconnect, device number 40 [ 1446.063711][ T5829] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1447.245792][ T5829] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1449.958472][ T1651] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1450.210346][ T5829] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1452.163834][ T1675] overlay: filesystem on ./bus not supported as upperdir [ 1452.587831][ T5829] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1452.598347][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: kworker/u9:2 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1452.598380][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1452.598395][ T5829] Workqueue: hci0 hci_rx_work [ 1452.598425][ T5829] Call Trace: [ 1452.598432][ T5829] [ 1452.598441][ T5829] dump_stack_lvl+0x16c/0x1f0 [ 1452.598476][ T5829] sysfs_warn_dup+0x7f/0xa0 [ 1452.598506][ T5829] sysfs_create_dir_ns+0x24d/0x2b0 [ 1452.598531][ T5829] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1452.598557][ T5829] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1452.598577][ T5829] ? kobject_add_internal+0x12d/0x990 [ 1452.598606][ T5829] ? do_raw_spin_unlock+0x172/0x230 [ 1452.598627][ T5829] kobject_add_internal+0x2c8/0x990 [ 1452.598658][ T5829] kobject_add+0x16f/0x240 [ 1452.598687][ T5829] ? __pfx_kobject_add+0x10/0x10 [ 1452.598714][ T5829] ? class_to_subsys+0x3e/0x160 [ 1452.598743][ T5829] ? do_raw_spin_unlock+0x172/0x230 [ 1452.598763][ T5829] ? kobject_put+0xab/0x5a0 [ 1452.598800][ T5829] device_add+0x289/0x1a70 [ 1452.598825][ T5829] ? __pfx_dev_set_name+0x10/0x10 [ 1452.598858][ T5829] ? __pfx_device_add+0x10/0x10 [ 1452.598886][ T5829] ? mgmt_send_event_skb+0x2f2/0x460 [ 1452.598925][ T5829] hci_conn_add_sysfs+0x17e/0x230 [ 1452.598949][ T5829] le_conn_complete_evt+0x1077/0x1d60 [ 1452.598986][ T5829] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1452.599015][ T5829] ? __mutex_lock+0x1cc/0xb10 [ 1452.599051][ T5829] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 1452.599083][ T5829] ? skb_pull_data+0x166/0x210 [ 1452.599113][ T5829] hci_le_meta_evt+0x2e2/0x5d0 [ 1452.599134][ T5829] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1452.599169][ T5829] hci_event_packet+0x666/0x1180 [ 1452.599205][ T5829] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1452.599228][ T5829] ? __pfx_hci_event_packet+0x10/0x10 [ 1452.599255][ T5829] ? mark_held_locks+0x9f/0xe0 [ 1452.599282][ T5829] ? kcov_remote_start+0x3cf/0x6e0 [ 1452.599310][ T5829] ? lockdep_hardirqs_on+0x7c/0x110 [ 1452.599343][ T5829] hci_rx_work+0x2c5/0x16b0 [ 1452.599372][ T5829] ? process_one_work+0x921/0x1ba0 [ 1452.599402][ T5829] process_one_work+0x9c5/0x1ba0 [ 1452.599435][ T5829] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1452.599461][ T5829] ? __pfx_process_one_work+0x10/0x10 [ 1452.599494][ T5829] ? assign_work+0x1a0/0x250 [ 1452.599520][ T5829] worker_thread+0x6c8/0xf00 [ 1452.599556][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 1452.599583][ T5829] kthread+0x3af/0x750 [ 1452.599606][ T5829] ? __pfx_kthread+0x10/0x10 [ 1452.599627][ T5829] ? lock_acquire+0x2f/0xb0 [ 1452.599658][ T5829] ? __pfx_kthread+0x10/0x10 [ 1452.599681][ T5829] ret_from_fork+0x45/0x80 [ 1452.599706][ T5829] ? __pfx_kthread+0x10/0x10 [ 1452.599728][ T5829] ret_from_fork_asm+0x1a/0x30 [ 1452.599763][ T5829] [ 1452.862078][ C1] vkms_vblank_simulate: vblank timer overrun [ 1452.929501][ T5829] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1452.944322][ T5829] Bluetooth: hci0: failed to register connection device [ 1454.231464][ T1695] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1454.537963][ T1689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5845'. [ 1458.705936][ T1720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5848'. [ 1459.167914][ T1726] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5851'. [ 1465.308277][ T1776] overlay: filesystem on ./bus not supported as upperdir [ 1468.050801][ T1844] overlayfs: failed to resolve './file1': -2 [ 1469.869382][T11933] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1470.059408][T11933] usb 6-1: Using ep0 maxpacket: 8 [ 1470.074716][T11933] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1470.101764][T11933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.167140][T11933] usb 6-1: Product: syz [ 1470.181733][T11933] usb 6-1: Manufacturer: syz [ 1470.186347][T11933] usb 6-1: SerialNumber: syz [ 1470.863846][T11933] usb 6-1: config 0 descriptor?? [ 1471.723079][T11933] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1472.030236][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1472.044508][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1472.053364][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1472.063014][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1472.070548][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1472.077829][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1472.618638][ T3480] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.925360][ T3480] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.260489][ T3480] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.750992][ T3480] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.009712][T11933] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1474.077159][ T1891] chnl_net:caif_netlink_parms(): no params data found [ 1474.111345][T11933] usb 6-1: USB disconnect, device number 41 [ 1474.190744][ T1612] Bluetooth: hci1: command tx timeout [ 1476.336512][ T1612] Bluetooth: hci1: command tx timeout [ 1476.391670][ T1891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.403947][ T1891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.411258][ T1891] bridge_slave_0: entered allmulticast mode [ 1476.422963][ T1891] bridge_slave_0: entered promiscuous mode [ 1477.074295][ T1891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.102849][ T1891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.205536][ T1891] bridge_slave_1: entered allmulticast mode [ 1477.242533][ T1891] bridge_slave_1: entered promiscuous mode [ 1477.348009][ T3480] bridge_slave_1: left allmulticast mode [ 1477.359780][ T3480] bridge_slave_1: left promiscuous mode [ 1477.375864][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.400741][ T3480] bridge_slave_0: left allmulticast mode [ 1477.406414][ T3480] bridge_slave_0: left promiscuous mode [ 1477.417029][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.609907][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5879'. [ 1478.419538][ T1612] Bluetooth: hci1: command tx timeout [ 1478.606120][ T3480] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 1478.639510][ T2143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5882'. [ 1478.713048][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.729705][ T3480] bond0 (unregistering): Released all slaves [ 1479.758675][ T1891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.779470][ T2143] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5882'. [ 1479.829988][ T3480] tipc: Left network mode [ 1479.835982][ T1891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.136178][ T2172] bad cache= option: none [ 1480.136178][ T2172] [ 1480.142887][ T2172] CIFS: VFS: bad cache= option: none [ 1480.719403][ T1612] Bluetooth: hci1: command tx timeout [ 1481.455873][ T1891] team0: Port device team_slave_0 added [ 1481.710339][ T1891] team0: Port device team_slave_1 added [ 1482.707569][ T2251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5887'. [ 1482.846697][ T1891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.910494][ T1891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.714887][ T1891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.857132][ T1891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.895864][ T1891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.933708][ T1891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.661410][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.667807][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.425959][ T3480] hsr_slave_0: left promiscuous mode [ 1485.438316][ T3480] hsr_slave_1: left promiscuous mode [ 1485.456464][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.475384][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.713793][ T3480] veth1_macvtap: left promiscuous mode [ 1485.732768][ T3480] veth0_macvtap: left promiscuous mode [ 1485.738517][ T3480] veth1_vlan: left promiscuous mode [ 1485.743994][ T3480] veth0_vlan: left promiscuous mode [ 1486.685060][ T2306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5892'. [ 1487.434148][ T2314] bad cache= option: none [ 1487.434148][ T2314] [ 1487.440881][ T2314] CIFS: VFS: bad cache= option: none [ 1491.769174][ T3480] team0 (unregistering): Port device team_slave_1 removed [ 1491.842664][ T3480] team0 (unregistering): Port device team_slave_0 removed [ 1491.850524][T29934] smc: removing ib device syz! [ 1491.958187][ T2336] overlayfs: failed to resolve './file1': -2 [ 1492.814350][ T1891] hsr_slave_0: entered promiscuous mode [ 1492.826284][ T1891] hsr_slave_1: entered promiscuous mode [ 1492.833809][ T1891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1492.841470][ T1891] Cannot create hsr debugfs directory [ 1496.239944][ T2482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5902'. [ 1496.289931][ T2482] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5902'. [ 1498.717833][ T1612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1499.532338][ T1891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1499.555268][ T1891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1499.642009][ T1891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1499.655271][ T1891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1500.011946][ T1891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.629927][ T1891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.657820][ T1891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1500.669021][ T1891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1500.790315][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.797407][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.850746][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.857821][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.198985][ T1891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1501.962231][ T1891] veth0_vlan: entered promiscuous mode [ 1501.982362][ T1891] veth1_vlan: entered promiscuous mode [ 1502.177481][ T1891] veth0_macvtap: entered promiscuous mode [ 1502.192287][ T1891] veth1_macvtap: entered promiscuous mode [ 1502.246690][ T1891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1502.275667][ T1891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1502.299324][ T1891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1502.329032][ T1891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1502.361640][ T1891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1502.390961][ T1891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1502.416514][ T1891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1502.447802][ T1891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1502.475263][ T1891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1502.486857][ T1891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1502.500116][ T1891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1502.517900][ T1891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1502.563196][ T1891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1502.593534][ T1891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1502.628548][ T1891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1502.641646][ T1891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1502.676111][ T1891] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.703605][ T1891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.720803][ T1891] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.729717][ T1891] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.943161][T29934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.309021][T29934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.394937][T19411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.450366][T19411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.492264][ T30] audit: type=1326 audit(1742506307.081:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2673 comm="syz.6.5920" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fe1b8d169 code=0x0 [ 1503.616386][ T30] audit: type=1400 audit(1742506307.201:3612): avc: denied { write } for pid=1891 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 1503.643177][ C0] vkms_vblank_simulate: vblank timer overrun [ 1504.382467][ T30] audit: type=1400 audit(1742506307.201:3613): avc: denied { open } for pid=1891 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 1504.410900][ C0] vkms_vblank_simulate: vblank timer overrun [ 1504.532955][ T1612] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1506.295284][ T2706] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1506.595656][ T1612] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1511.152391][ T2755] bad cache= option: none [ 1511.152391][ T2755] [ 1511.159501][ T2755] CIFS: VFS: bad cache= option: none [ 1512.140291][ T1612] Bluetooth: Wrong link type (-71) [ 1513.987660][ T2790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5931'. [ 1514.607401][ T1612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1514.789442][ T1612] Bluetooth: Wrong link type (-71) [ 1515.205964][ T2813] overlayfs: failed to resolve './file0': -2 [ 1518.764242][ T1612] Bluetooth: Wrong link type (-71) [ 1518.770425][ T1612] Bluetooth: hci1: link tx timeout [ 1518.775980][ T1612] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1520.869374][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 1521.052389][ T5829] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1521.792056][ T2900] overlayfs: failed to resolve './file1': -2 [ 1524.430762][ T30] audit: type=1326 audit(1742506328.011:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2920 comm="syz.3.5955" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc540b8d169 code=0x0 [ 1524.592898][ T2921] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1524.673456][ T2926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5956'. [ 1524.708058][ T2926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5956'. [ 1524.733899][ T2926] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5956'. [ 1527.797089][ T2953] overlayfs: failed to resolve './file1': -2 [ 1528.659077][ T2955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5960'. [ 1529.539448][T29934] Bluetooth: hci2: Frame reassembly failed (-84) [ 1529.548513][ T5829] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1530.434271][ T5829] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1531.482822][ T1612] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1534.516806][ T3003] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1536.004190][ T1612] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1537.520926][ T1612] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1538.645286][ T1612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1538.657756][ T1612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1538.671750][ T1612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1538.680427][ T1612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1538.687872][ T1612] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1538.695790][ T1612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1538.707717][T13985] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.970828][ T1612] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1539.645429][ T1612] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1540.469599][T13985] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.666224][T13985] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.748572][ T1612] Bluetooth: hci2: command tx timeout [ 1541.521298][T13985] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.764737][ T3043] chnl_net:caif_netlink_parms(): no params data found [ 1542.949436][ T1612] Bluetooth: hci2: command tx timeout [ 1543.787111][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.811940][ T3043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.825983][ T3043] bridge_slave_0: entered allmulticast mode [ 1543.847769][ T3043] bridge_slave_0: entered promiscuous mode [ 1543.888102][ T1612] Bluetooth: Wrong link type (-71) [ 1544.374322][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.491105][ T3043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.557047][ T3043] bridge_slave_1: entered allmulticast mode [ 1544.593370][ T3043] bridge_slave_1: entered promiscuous mode [ 1544.630564][T13985] bridge_slave_1: left allmulticast mode [ 1544.636196][T13985] bridge_slave_1: left promiscuous mode [ 1544.688129][T13985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.769599][T13985] bridge_slave_0: left allmulticast mode [ 1544.777357][T13985] bridge_slave_0: left promiscuous mode [ 1544.788527][T13985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.926306][ T1612] Bluetooth: hci2: command tx timeout [ 1546.075165][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.083658][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.865970][ T770] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1547.939361][ T1612] Bluetooth: hci2: command tx timeout [ 1548.189584][ T3318] bad cache= option: none [ 1548.189584][ T3318] [ 1548.196242][ T3318] CIFS: VFS: bad cache= option: none [ 1548.902101][ T3312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5991'. [ 1553.041456][T13985] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 1553.061609][T13985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.072345][T13985] bond0 (unregistering): Released all slaves [ 1553.098045][T13985] bond1 (unregistering): Released all slaves [ 1553.203525][ T770] usb 2-1: device descriptor read/all, error -71 [ 1553.216728][ T3043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.277394][ T3043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1553.819966][ T3043] team0: Port device team_slave_0 added [ 1553.863663][ T3043] team0: Port device team_slave_1 added [ 1555.196031][ T1612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1555.344103][ T3043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1555.377541][ T3043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1555.403512][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.642824][ T3043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.840455][ T3043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.851855][ T3043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1555.924237][ T3043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.034273][ T1612] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1556.059858][T13985] hsr_slave_0: left promiscuous mode [ 1556.071550][T13985] hsr_slave_1: left promiscuous mode [ 1556.087482][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1556.107038][T13985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1556.170480][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1556.194781][T13985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.245561][T13985] veth0_macvtap: left promiscuous mode [ 1556.263763][T13985] veth1_vlan: left promiscuous mode [ 1556.281340][T13985] veth0_vlan: left promiscuous mode [ 1559.459315][T11933] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1559.612493][T11933] usb 7-1: Using ep0 maxpacket: 8 [ 1560.296838][T11933] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1560.327629][T11933] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1560.337824][T11933] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1560.349155][T11933] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1560.364871][T11933] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1560.374626][T11933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.740962][T11933] usb 7-1: GET_CAPABILITIES returned 0 [ 1560.764032][T11933] usbtmc 7-1:16.0: can't read capabilities [ 1560.932801][ T3513] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6010'. [ 1562.104589][T13985] team0 (unregistering): Port device team_slave_1 removed [ 1563.251959][T13985] team0 (unregistering): Port device team_slave_0 removed [ 1563.716578][ T770] usb 7-1: USB disconnect, device number 8 [ 1566.002564][ T3043] hsr_slave_0: entered promiscuous mode [ 1566.008704][ T3043] hsr_slave_1: entered promiscuous mode [ 1566.196431][ T3043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1566.216734][ T3043] Cannot create hsr debugfs directory [ 1568.277828][ T3701] overlayfs: missing 'lowerdir' [ 1571.579349][ T2645] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1571.749351][ T2645] usb 2-1: Using ep0 maxpacket: 8 [ 1571.798493][ T2645] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1571.815237][T13985] IPVS: stop unused estimator thread 0... [ 1571.846013][ T2645] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1571.866126][ T2645] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1571.885518][ T2645] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1571.914158][ T2645] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1571.928851][ T2645] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.029424][T11933] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1572.272016][ T2645] usb 2-1: GET_CAPABILITIES returned 0 [ 1572.303772][T11933] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1572.319674][ T2645] usbtmc 2-1:16.0: can't read capabilities [ 1572.409414][T11933] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1572.419645][T11933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.451158][ T3783] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1572.468171][ T3748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6027'. [ 1572.482998][T11933] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1572.742030][ T3043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1572.791144][ T770] usb 4-1: USB disconnect, device number 39 [ 1572.842120][ T3043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1572.882820][ T3043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1572.927564][ T3043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1573.025869][ T3043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.204473][ T3854] Invalid ELF header type: 2 != 1 [ 1573.775789][ T3043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.825865][ T3043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1573.841214][ T3043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1573.892890][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.900007][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.069108][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.076217][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1575.136327][ T5829] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1575.674453][ T5829] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1575.682270][ T770] usb 2-1: USB disconnect, device number 52 [ 1575.761589][ T3043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1577.238737][ T3043] veth0_vlan: entered promiscuous mode [ 1577.249046][ T3043] veth1_vlan: entered promiscuous mode [ 1577.616101][ T3043] veth0_macvtap: entered promiscuous mode [ 1577.645965][ T3043] veth1_macvtap: entered promiscuous mode [ 1577.865068][ T1612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1577.871353][ T3043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.891345][ T3043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.877122][ T3043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.866348][ T3043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.876219][ T3043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.889338][ T3043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.900025][ T3043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.927316][ T3043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.938069][ T3043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.949806][ T3043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.960532][ T3043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.970918][ T3043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.981379][ T3043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.991310][ T3043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1580.001789][ T3043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.045005][ T3043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.083932][ T3043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.094704][ T3043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.111254][ T3043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.120114][ T3043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.350115][ T3941] Invalid ELF header type: 2 != 1 [ 1581.021915][ T1612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1581.191393][T19411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.200253][T19411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.229347][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.851893][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.252763][T11933] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1582.419394][T11933] usb 4-1: Using ep0 maxpacket: 8 [ 1582.513835][T11933] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1583.169431][T11933] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1583.179509][T11933] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1583.189533][T11933] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1583.202783][T11933] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1584.393296][T11933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.949607][T11933] usb 4-1: GET_CAPABILITIES returned 0 [ 1584.959765][T11933] usbtmc 4-1:16.0: can't read capabilities [ 1585.028481][ T4015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6045'. [ 1586.663902][ T1612] Bluetooth: Wrong link type (-71) [ 1586.673491][ T1612] Bluetooth: hci2: link tx timeout [ 1586.678842][ T1612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1587.506375][T11933] usb 4-1: USB disconnect, device number 40 [ 1587.633334][ T5829] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1588.110792][ T5829] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1588.120704][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: kworker/u9:2 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1588.120726][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1588.120734][ T5829] Workqueue: hci2 hci_rx_work [ 1588.120752][ T5829] Call Trace: [ 1588.120756][ T5829] [ 1588.120761][ T5829] dump_stack_lvl+0x16c/0x1f0 [ 1588.120780][ T5829] sysfs_warn_dup+0x7f/0xa0 [ 1588.120797][ T5829] sysfs_create_dir_ns+0x24d/0x2b0 [ 1588.120813][ T5829] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1588.120829][ T5829] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1588.120841][ T5829] ? kobject_add_internal+0x12d/0x990 [ 1588.120859][ T5829] ? do_raw_spin_unlock+0x172/0x230 [ 1588.120871][ T5829] kobject_add_internal+0x2c8/0x990 [ 1588.120890][ T5829] kobject_add+0x16f/0x240 [ 1588.120907][ T5829] ? __pfx_kobject_add+0x10/0x10 [ 1588.120923][ T5829] ? class_to_subsys+0x3e/0x160 [ 1588.120940][ T5829] ? do_raw_spin_unlock+0x172/0x230 [ 1588.120951][ T5829] ? kobject_put+0xab/0x5a0 [ 1588.120971][ T5829] device_add+0x289/0x1a70 [ 1588.120986][ T5829] ? __pfx_dev_set_name+0x10/0x10 [ 1588.121003][ T5829] ? __pfx_device_add+0x10/0x10 [ 1588.121019][ T5829] ? mgmt_send_event_skb+0x2f2/0x460 [ 1588.121040][ T5829] hci_conn_add_sysfs+0x17e/0x230 [ 1588.121053][ T5829] le_conn_complete_evt+0x1077/0x1d60 [ 1588.121074][ T5829] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1588.121091][ T5829] ? __mutex_lock+0x1cc/0xb10 [ 1588.121112][ T5829] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 1588.121130][ T5829] ? skb_pull_data+0x166/0x210 [ 1588.121148][ T5829] hci_le_meta_evt+0x2e2/0x5d0 [ 1588.121159][ T5829] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1588.121179][ T5829] hci_event_packet+0x666/0x1180 [ 1588.121196][ T5829] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1588.121208][ T5829] ? __pfx_hci_event_packet+0x10/0x10 [ 1588.121225][ T5829] ? mark_held_locks+0x9f/0xe0 [ 1588.121241][ T5829] ? kcov_remote_start+0x3cf/0x6e0 [ 1588.121257][ T5829] ? lockdep_hardirqs_on+0x7c/0x110 [ 1588.121275][ T5829] hci_rx_work+0x2c5/0x16b0 [ 1588.121287][ T5829] ? process_one_work+0x921/0x1ba0 [ 1588.121305][ T5829] process_one_work+0x9c5/0x1ba0 [ 1588.121324][ T5829] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1588.121340][ T5829] ? __pfx_process_one_work+0x10/0x10 [ 1588.121359][ T5829] ? assign_work+0x1a0/0x250 [ 1588.121374][ T5829] worker_thread+0x6c8/0xf00 [ 1588.121395][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 1588.121411][ T5829] kthread+0x3af/0x750 [ 1588.121425][ T5829] ? __pfx_kthread+0x10/0x10 [ 1588.121438][ T5829] ? lock_acquire+0x2f/0xb0 [ 1588.121455][ T5829] ? __pfx_kthread+0x10/0x10 [ 1588.121469][ T5829] ret_from_fork+0x45/0x80 [ 1588.121483][ T5829] ? __pfx_kthread+0x10/0x10 [ 1588.121497][ T5829] ret_from_fork_asm+0x1a/0x30 [ 1588.121517][ T5829] [ 1588.121530][ T5829] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1588.401286][ T5829] Bluetooth: hci2: failed to register connection device [ 1588.741699][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 1588.876827][ T4081] Invalid ELF header type: 2 != 1 [ 1590.382776][ T1612] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1590.680439][ T1612] Bluetooth: Wrong link type (-71) [ 1590.693876][ T1612] Bluetooth: hci2: link tx timeout [ 1591.542057][ T1612] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1594.689402][T11933] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1594.899345][T11933] usb 2-1: Using ep0 maxpacket: 8 [ 1594.913646][T11933] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1595.003263][T11933] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1595.039354][T11933] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1595.049386][T11933] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1595.062399][T11933] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1595.071506][T11933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.630750][T11933] usb 2-1: GET_CAPABILITIES returned 0 [ 1595.654430][T11933] usbtmc 2-1:16.0: can't read capabilities [ 1595.726788][ T5829] Bluetooth: Wrong link type (-71) [ 1595.732881][ T5829] Bluetooth: hci2: link tx timeout [ 1595.735874][ T1612] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1595.926586][ T4121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6063'. [ 1596.650795][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 1596.756031][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 1596.779305][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1596.787036][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1596.804644][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1596.822428][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1596.853467][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1596.965940][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1597.133767][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1597.325160][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1597.407725][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1597.420066][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1597.427809][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1597.609453][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1597.627120][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1597.641432][ T770] usb 2-1: USB disconnect, device number 53 [ 1597.650681][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1597.697906][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1597.727732][ T4169] overlayfs: failed to resolve './file1': -2 [ 1598.274476][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.321091][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.379502][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.388588][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.396681][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.405190][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.413613][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.425916][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.434512][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.442216][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.505041][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.512856][T24690] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1598.521977][T24690] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 1599.725576][T24980] Bluetooth: hci1: command 0x0406 tx timeout [ 1599.931669][T19411] Bluetooth: hci5: Frame reassembly failed (-84) [ 1601.038915][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1601.045928][T24980] Bluetooth: hci5: command 0x1003 tx timeout [ 1602.503618][ T1612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1602.592809][ T4233] overlayfs: failed to resolve './file1': -2 [ 1603.342318][ T1612] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1604.858300][ T1612] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1604.964984][ T4267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6084'. [ 1604.974018][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6084'. [ 1604.989316][ T4267] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6084'. [ 1605.049431][ T26] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1605.062103][ T1612] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1605.219707][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 1605.233583][ T26] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1605.257126][ T26] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1605.283916][ T26] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1605.305192][ T26] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1605.322609][ T26] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1605.332003][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.698910][ T26] usb 2-1: GET_CAPABILITIES returned 0 [ 1605.704913][ T26] usbtmc 2-1:16.0: can't read capabilities [ 1605.779006][ T4277] bad cache= option: none [ 1605.779006][ T4277] [ 1605.786182][ T4277] CIFS: VFS: bad cache= option: none [ 1605.911067][ T4261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6083'. [ 1607.763104][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.769538][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.492290][ T26] usb 2-1: USB disconnect, device number 54 [ 1611.138132][ T4327] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6088'. [ 1617.501889][ T4408] bad cache= option: none [ 1617.501889][ T4408] [ 1617.508548][ T4408] CIFS: VFS: bad cache= option: none [ 1618.610276][ T4418] bad cache= option: none [ 1618.610276][ T4418] [ 1618.616970][ T4418] CIFS: VFS: bad cache= option: none [ 1619.997595][ T1612] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1621.295479][T16320] bond0: (slave syz_tun): Releasing backup interface [ 1621.400971][T24980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1621.410343][T24980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1621.419125][T24980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1621.430196][T24980] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1621.440695][T24980] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1621.450311][T24980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1621.501854][ T3480] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.559167][ T3480] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.637085][ T3480] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.501975][ T4453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1622.689761][ T3480] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.528867][ T4467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6110'. [ 1623.542310][ T1612] Bluetooth: hci3: command tx timeout [ 1623.874291][ T4447] chnl_net:caif_netlink_parms(): no params data found [ 1623.926844][ T3480] bridge_slave_1: left allmulticast mode [ 1623.937618][ T3480] bridge_slave_1: left promiscuous mode [ 1624.150113][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.590385][ T3480] bridge_slave_0: left allmulticast mode [ 1624.611308][ T3480] bridge_slave_0: left promiscuous mode [ 1624.618913][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.630854][ T1612] Bluetooth: hci3: command tx timeout [ 1626.118688][ T4631] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6115'. [ 1626.661022][ T30] audit: type=1400 audit(1742506430.201:3615): avc: denied { ioctl } for pid=4635 comm="syz.6.6118" path="socket:[88454]" dev="sockfs" ino=88454 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1627.699424][T24980] Bluetooth: hci3: command tx timeout [ 1627.704927][ T1612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1629.387759][ T3480] team0: Port device geneve0 removed [ 1629.639645][ T3480] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 1629.653139][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.664038][ T3480] bond0 (unregistering): Released all slaves [ 1629.674649][ T3480] bond1 (unregistering): Released all slaves [ 1629.789465][ T1612] Bluetooth: hci3: command tx timeout [ 1629.849018][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.884246][ T4447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.897571][ T4447] bridge_slave_0: entered allmulticast mode [ 1629.905223][ T4447] bridge_slave_0: entered promiscuous mode [ 1629.913211][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.920722][ T4447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.932538][ T4447] bridge_slave_1: entered allmulticast mode [ 1629.941463][ T4447] bridge_slave_1: entered promiscuous mode [ 1630.083703][ T4447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.098023][ T1612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1630.985199][ T4447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.608951][ T4447] team0: Port device team_slave_0 added [ 1633.891970][ T4447] team0: Port device team_slave_1 added [ 1634.504164][ T30] audit: type=1400 audit(1742506438.091:3616): avc: denied { create } for pid=4786 comm="syz.6.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1634.709824][ T4447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1634.778642][ T30] audit: type=1400 audit(1742506438.091:3617): avc: denied { listen } for pid=4786 comm="syz.6.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1634.801978][ T4447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1634.999661][ T30] audit: type=1400 audit(1742506438.091:3618): avc: denied { connect } for pid=4786 comm="syz.6.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1635.032903][ T4447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.392938][ T4447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.409339][ T4447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.952681][ T4447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.992905][ T3480] hsr_slave_0: left promiscuous mode [ 1636.003956][ T3480] hsr_slave_1: left promiscuous mode [ 1636.095524][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.199044][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1636.239127][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.268274][ T3480] veth1_macvtap: left promiscuous mode [ 1637.291372][ T3480] veth0_macvtap: left promiscuous mode [ 1638.127812][ T3480] team0 (unregistering): Port device team_slave_1 removed [ 1638.244543][ T3480] team0 (unregistering): Port device team_slave_0 removed [ 1639.114762][ T4862] overlayfs: failed to resolve './file1': -2 [ 1639.839427][ T1612] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1642.299861][ T4447] hsr_slave_0: entered promiscuous mode [ 1642.306127][ T4447] hsr_slave_1: entered promiscuous mode [ 1642.359742][ T4447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1642.396431][ T4447] Cannot create hsr debugfs directory [ 1642.535976][ T1612] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1644.149874][T24980] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1644.153157][ T3480] IPVS: stop unused estimator thread 0... [ 1649.597906][ T4447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1649.740217][ T4447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1649.763233][ T4447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1649.848250][ T5117] overlayfs: missing 'workdir' [ 1650.470184][ T4447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1651.485040][ T4447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.573308][ T4447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.595500][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 1652.395088][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 1652.410250][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.417374][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1652.459708][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.468023][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.490858][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.497276][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.497932][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.505907][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.538046][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.550612][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.558278][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.569395][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.577059][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.586878][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.599379][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.607033][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.636532][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.675682][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.706415][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.734982][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.753362][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.767057][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.969376][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.977659][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.985405][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1652.997658][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1653.006509][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1653.014354][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1653.290078][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1653.879310][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1653.887133][T11933] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 1654.875126][T11933] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 1655.906729][ T4447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1655.999194][ T4447] veth0_vlan: entered promiscuous mode [ 1656.242999][ T4447] veth1_vlan: entered promiscuous mode [ 1658.226420][ T4447] veth0_macvtap: entered promiscuous mode [ 1658.296633][ T4447] veth1_macvtap: entered promiscuous mode [ 1658.328329][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.437696][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.454673][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.466515][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.483527][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.497090][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.606720][ T5236] CIFS mount error: No usable UNC path provided in device string! [ 1659.606720][ T5236] [ 1659.616769][ T5236] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1659.622354][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.140033][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.156298][ T4447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1660.191838][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1660.215978][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.371295][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.167441][T24980] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1661.209340][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.289386][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.312250][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.356422][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.379324][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.399874][ T4447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1662.840912][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6173'. [ 1663.047745][ T4447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.056572][ T4447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.065399][ T4447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.074132][ T4447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.537109][ T30] audit: type=1400 audit(1742506468.121:3619): avc: denied { listen } for pid=5270 comm="syz.6.6174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1664.623973][T24980] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1664.704387][ T2335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.471331][T24980] Bluetooth: hci2: link tx timeout [ 1665.476519][T24980] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1665.484248][T24980] Bluetooth: hci2: link tx timeout [ 1665.689439][ T2335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.030626][T24980] Bluetooth: hci2: command 0x0406 tx timeout [ 1666.073557][T24980] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1666.107069][ T2335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.175738][ T2335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.491296][T24980] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1666.529910][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 1666.537608][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 1666.559334][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1666.566997][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1666.649489][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1666.657177][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1666.737793][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1666.782166][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1666.926747][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1666.934681][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1666.947356][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1666.955266][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.599320][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.607011][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.621204][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.628867][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.636573][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.719400][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.737239][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.745508][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.768020][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.792170][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.940353][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.957713][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1667.965959][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1668.924904][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.931348][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.940959][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1668.948757][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1669.523537][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1669.531259][T25827] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 1669.540729][T25827] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 1673.721284][T24980] Bluetooth: hci3: link tx timeout [ 1673.726667][T24980] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1673.968284][ T30] audit: type=1400 audit(1742506477.531:3620): avc: denied { bind } for pid=5404 comm="syz.5.6191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1675.154344][T24980] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1675.792738][ T2972] Bluetooth: hci3: command 0x0406 tx timeout [ 1677.850108][ T1612] Bluetooth: hci5: command 0x1003 tx timeout [ 1677.909365][T24980] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1678.243479][T24980] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1680.925002][T24980] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1682.757582][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6203'. [ 1682.786847][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6203'. [ 1683.095792][T24980] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1685.564608][T31158] Bluetooth: hci5: Frame reassembly failed (-84) [ 1686.912442][ T5529] bad cache= option: none [ 1686.912442][ T5529] [ 1686.919105][ T5529] CIFS: VFS: bad cache= option: none [ 1687.459472][ T2972] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1689.292485][ T2972] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1689.639106][ T5554] overlayfs: missing 'lowerdir' [ 1690.969931][ T2972] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1694.565849][ T2972] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1694.636275][ T2335] Bluetooth: hci5: Frame reassembly failed (-84) [ 1697.012225][T24980] Bluetooth: hci5: command 0x1003 tx timeout [ 1697.017657][ T2972] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1697.707726][ T2972] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1698.558529][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6230'. [ 1701.408253][T24980] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1702.661433][T24980] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1702.919970][ T3115] Bluetooth: hci5: Frame reassembly failed (-84) [ 1703.093855][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6237'. [ 1704.979317][ T2972] Bluetooth: hci5: command 0x1003 tx timeout [ 1704.985671][T24980] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1707.005249][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6245'. [ 1707.059319][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6245'. [ 1707.100647][ T5729] nbd: socks must be embedded in a SOCK_ITEM attr [ 1714.697847][ T2972] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1714.713919][ T2972] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1714.722730][ T2972] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1714.732337][ T2972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1714.739983][ T2972] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1714.747528][ T2972] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1714.814590][ T2335] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.836651][ T2335] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.964572][ T2335] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.135066][T24980] Bluetooth: hci5: command tx timeout [ 1717.329899][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6265'. [ 1717.440725][ T2335] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.236228][T24980] Bluetooth: hci5: command tx timeout [ 1719.562658][ T2335] bridge_slave_1: left allmulticast mode [ 1719.659354][ T2335] bridge_slave_1: left promiscuous mode [ 1719.979395][ T2335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.023577][ T2335] bridge_slave_0: left allmulticast mode [ 1720.037629][ T2335] bridge_slave_0: left promiscuous mode [ 1720.049858][ T2335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.258812][T24980] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1721.381689][ T2972] Bluetooth: hci5: command tx timeout [ 1722.455892][ T2335] team0: Port device geneve0 removed [ 1722.839719][ T2335] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 1722.850000][ T2335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1722.861902][ T2335] bond0 (unregistering): Released all slaves [ 1722.885645][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 1723.922462][T24980] Bluetooth: hci5: command tx timeout [ 1724.602642][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.650749][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.690393][ T5840] bridge_slave_0: entered allmulticast mode [ 1724.703924][ T5840] bridge_slave_0: entered promiscuous mode [ 1724.857485][T24980] Bluetooth: Wrong link type (-71) [ 1725.574014][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.581702][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.588871][ T5840] bridge_slave_1: entered allmulticast mode [ 1725.603934][ T5840] bridge_slave_1: entered promiscuous mode [ 1725.697181][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1725.728052][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1725.910729][ T5840] team0: Port device team_slave_0 added [ 1726.122377][ T5840] team0: Port device team_slave_1 added [ 1726.130279][T24980] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 1728.131170][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1728.138759][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1728.269336][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1728.351468][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1728.366321][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1728.420719][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1728.484653][ T6225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6284'. [ 1728.602257][ T2335] hsr_slave_0: left promiscuous mode [ 1728.614417][ T2335] hsr_slave_1: left promiscuous mode [ 1728.622491][ T2335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1728.643892][ T2335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1728.665403][ T2335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1728.696213][ T2335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1728.790995][ T2335] veth1_macvtap: left promiscuous mode [ 1728.796534][ T2335] veth0_macvtap: left promiscuous mode [ 1729.470428][ T2335] veth1_vlan: left promiscuous mode [ 1729.475751][ T2335] veth0_vlan: left promiscuous mode [ 1730.106877][ T6255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6287'. [ 1730.751995][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.758266][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.139357][ T2972] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1731.331720][ T2972] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1731.341551][ T2972] CPU: 1 UID: 0 PID: 2972 Comm: kworker/u9:3 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1731.341580][ T2972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1731.341595][ T2972] Workqueue: hci1 hci_rx_work [ 1731.341621][ T2972] Call Trace: [ 1731.341628][ T2972] [ 1731.341633][ T2972] dump_stack_lvl+0x16c/0x1f0 [ 1731.341653][ T2972] sysfs_warn_dup+0x7f/0xa0 [ 1731.341671][ T2972] sysfs_create_dir_ns+0x24d/0x2b0 [ 1731.341688][ T2972] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1731.341705][ T2972] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1731.341717][ T2972] ? kobject_add_internal+0x12d/0x990 [ 1731.341735][ T2972] ? do_raw_spin_unlock+0x172/0x230 [ 1731.341747][ T2972] kobject_add_internal+0x2c8/0x990 [ 1731.341766][ T2972] kobject_add+0x16f/0x240 [ 1731.341783][ T2972] ? __pfx_kobject_add+0x10/0x10 [ 1731.341803][ T2972] ? kobject_put+0xab/0x5a0 [ 1731.341823][ T2972] device_add+0x289/0x1a70 [ 1731.341839][ T2972] ? __pfx_dev_set_name+0x10/0x10 [ 1731.341856][ T2972] ? __pfx_device_add+0x10/0x10 [ 1731.341877][ T2972] hci_conn_add_sysfs+0x17e/0x230 [ 1731.341889][ T2972] ? le_conn_complete_evt+0xfa2/0x1d60 [ 1731.341906][ T2972] le_conn_complete_evt+0x1077/0x1d60 [ 1731.341927][ T2972] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1731.341944][ T2972] ? __mutex_lock+0x1cc/0xb10 [ 1731.341965][ T2972] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 1731.341983][ T2972] ? skb_pull_data+0x166/0x210 [ 1731.342001][ T2972] hci_le_meta_evt+0x2e2/0x5d0 [ 1731.342012][ T2972] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1731.342032][ T2972] hci_event_packet+0x666/0x1180 [ 1731.342050][ T2972] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1731.342062][ T2972] ? __pfx_hci_event_packet+0x10/0x10 [ 1731.342082][ T2972] ? kcov_remote_start+0x3df/0x6e0 [ 1731.342102][ T2972] hci_rx_work+0x2c5/0x16b0 [ 1731.342114][ T2972] ? process_one_work+0x921/0x1ba0 [ 1731.342132][ T2972] process_one_work+0x9c5/0x1ba0 [ 1731.342151][ T2972] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1731.342167][ T2972] ? __pfx_process_one_work+0x10/0x10 [ 1731.342187][ T2972] ? assign_work+0x1a0/0x250 [ 1731.342211][ T2972] worker_thread+0x6c8/0xf00 [ 1731.342232][ T2972] ? __kthread_parkme+0x148/0x220 [ 1731.342245][ T2972] ? __pfx_worker_thread+0x10/0x10 [ 1731.342261][ T2972] kthread+0x3af/0x750 [ 1731.342276][ T2972] ? __pfx_kthread+0x10/0x10 [ 1731.342290][ T2972] ? lock_acquire+0x2f/0xb0 [ 1731.342307][ T2972] ? __pfx_kthread+0x10/0x10 [ 1731.342321][ T2972] ret_from_fork+0x45/0x80 [ 1731.342336][ T2972] ? __pfx_kthread+0x10/0x10 [ 1731.342350][ T2972] ret_from_fork_asm+0x1a/0x30 [ 1731.342370][ T2972] [ 1731.342440][ T2972] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1731.606841][ T2972] Bluetooth: hci1: failed to register connection device [ 1732.155783][ T2335] team0 (unregistering): Port device team_slave_0 removed [ 1733.621065][ T6257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6288'. [ 1733.705438][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 1733.734495][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 1733.755747][ T5840] hsr_slave_0: entered promiscuous mode [ 1733.774276][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1733.788695][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1733.806720][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1733.817949][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1733.848750][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1733.867204][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1733.897804][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1733.924862][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1733.936782][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1733.949888][ T5840] hsr_slave_1: entered promiscuous mode [ 1734.013241][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.024877][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.034937][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.047029][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.090244][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.119116][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.139330][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.146993][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.778700][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.786440][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.794644][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.802731][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.810420][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.818078][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.856298][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.901935][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.938370][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1734.964923][ T2645] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 1735.051880][ T2645] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 1735.129709][T24980] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 1736.630516][T24980] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 1737.943653][ T2335] IPVS: stop unused estimator thread 0... [ 1739.873098][ T2972] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1740.685854][ T6470] ------------[ cut here ]------------ [ 1740.691377][ T6470] UBSAN: array-index-out-of-bounds in kernel/bpf/core.c:2384:29 [ 1740.698994][ T6470] index 16 is out of range for type ' *[16]' [ 1740.705764][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.1.6305 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1740.705779][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1740.705787][ T6470] Call Trace: [ 1740.705792][ T6470] [ 1740.705797][ T6470] dump_stack_lvl+0x16c/0x1f0 [ 1740.705817][ T6470] __ubsan_handle_out_of_bounds+0x110/0x150 [ 1740.705839][ T6470] bpf_prog_select_runtime+0x665/0x6f0 [ 1740.705861][ T6470] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 1740.705887][ T6470] bpf_prog_load+0xe70/0x2480 [ 1740.705908][ T6470] ? __pfx_bpf_prog_load+0x10/0x10 [ 1740.705920][ T6470] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1740.705942][ T6470] ? selinux_bpf+0xde/0x130 [ 1740.705955][ T6470] __sys_bpf+0x4043/0x49c0 [ 1740.705969][ T6470] ? __pfx___sys_bpf+0x10/0x10 [ 1740.705980][ T6470] ? __mutex_unlock_slowpath+0x24f/0x6a0 [ 1740.706001][ T6470] ? do_futex+0x123/0x350 [ 1740.706016][ T6470] ? __pfx_do_futex+0x10/0x10 [ 1740.706036][ T6470] ? xfd_validate_state+0x5d/0x180 [ 1740.706053][ T6470] ? rcu_is_watching+0x12/0xc0 [ 1740.706068][ T6470] __x64_sys_bpf+0x78/0xc0 [ 1740.706080][ T6470] ? lockdep_hardirqs_on+0x7c/0x110 [ 1740.706096][ T6470] do_syscall_64+0xcd/0x250 [ 1740.706114][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.706130][ T6470] RIP: 0033:0x7fd217f8d169 [ 1740.706146][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1740.706157][ T6470] RSP: 002b:00007fd215df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1740.706168][ T6470] RAX: ffffffffffffffda RBX: 00007fd2181a6080 RCX: 00007fd217f8d169 [ 1740.706176][ T6470] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1740.706183][ T6470] RBP: 00007fd21800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.706190][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1740.706197][ T6470] R13: 0000000000000000 R14: 00007fd2181a6080 R15: 00007ffdf1801b68 [ 1740.706210][ T6470] [ 1740.706214][ T6470] ---[ end trace ]--- [ 1740.908353][ T6470] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1740.915525][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.1.6305 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1740.926172][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1740.936380][ T6470] Call Trace: [ 1740.939642][ T6470] [ 1740.942561][ T6470] dump_stack_lvl+0x3d/0x1f0 [ 1740.947148][ T6470] panic+0x71d/0x800 [ 1740.951024][ T6470] ? __pfx_panic+0x10/0x10 [ 1740.955422][ T6470] ? __pfx__printk+0x10/0x10 [ 1740.960011][ T6470] check_panic_on_warn+0xab/0xb0 [ 1740.964927][ T6470] __ubsan_handle_out_of_bounds+0x137/0x150 [ 1740.970800][ T6470] bpf_prog_select_runtime+0x665/0x6f0 [ 1740.976234][ T6470] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 1740.981672][ T6470] bpf_prog_load+0xe70/0x2480 [ 1740.986329][ T6470] ? __pfx_bpf_prog_load+0x10/0x10 [ 1740.991417][ T6470] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1740.996774][ T6470] ? selinux_bpf+0xde/0x130 [ 1741.001256][ T6470] __sys_bpf+0x4043/0x49c0 [ 1741.005650][ T6470] ? __pfx___sys_bpf+0x10/0x10 [ 1741.010393][ T6470] ? __mutex_unlock_slowpath+0x24f/0x6a0 [ 1741.016011][ T6470] ? do_futex+0x123/0x350 [ 1741.020335][ T6470] ? __pfx_do_futex+0x10/0x10 [ 1741.024995][ T6470] ? xfd_validate_state+0x5d/0x180 [ 1741.030086][ T6470] ? rcu_is_watching+0x12/0xc0 [ 1741.034828][ T6470] __x64_sys_bpf+0x78/0xc0 [ 1741.039228][ T6470] ? lockdep_hardirqs_on+0x7c/0x110 [ 1741.044432][ T6470] do_syscall_64+0xcd/0x250 [ 1741.048917][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.054791][ T6470] RIP: 0033:0x7fd217f8d169 [ 1741.059179][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1741.078786][ T6470] RSP: 002b:00007fd215df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1741.087180][ T6470] RAX: ffffffffffffffda RBX: 00007fd2181a6080 RCX: 00007fd217f8d169 [ 1741.095131][ T6470] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1741.103079][ T6470] RBP: 00007fd21800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.111026][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1741.118981][ T6470] R13: 0000000000000000 R14: 00007fd2181a6080 R15: 00007ffdf1801b68 [ 1741.126937][ T6470] [ 1741.130124][ T6470] Kernel Offset: disabled [ 1741.134428][ T6470] Rebooting in 86400 seconds..