last executing test programs: 38m48.087887132s ago: executing program 32 (id=501): ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@any, 0x9}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f00000008c0)='syz1\x00') 36m55.619879527s ago: executing program 33 (id=1470): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x41) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000440)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r3, r4, 0x3, 0x0, 0x2, 0x804, {0xac7c, 0x401, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x3, 0x412f, 0xe154, 0x1000, 0x9, 0xfff, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 26m6.524160853s ago: executing program 34 (id=7614): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 25m10.732008824s ago: executing program 35 (id=7769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x90, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf0a}, @ETHTOOL_A_LINKMODES_OURS={0x5c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@=+*{\\\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')@](\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x90}}, 0x0) 20m29.569946538s ago: executing program 36 (id=9058): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 19m33.629305719s ago: executing program 5 (id=9234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 19m31.524458143s ago: executing program 5 (id=9240): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') socket$alg(0x26, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) 19m30.765993817s ago: executing program 5 (id=9243): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x1aa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff020000000000000000000000000001"], 0x0) 19m29.366118775s ago: executing program 5 (id=9246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a0001a05c191780fbdbdf250a8080000080"], 0x24}}, 0x20000050) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4010, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090008000000000000000a100000000000000000000008001e0001"], 0x24}}, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) 19m27.784894824s ago: executing program 5 (id=9249): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000040, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2200c851, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a", 0x62, 0x850, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 19m26.469744819s ago: executing program 5 (id=9251): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x18, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0x4}]}, 0x18}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @loopback, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, r1, 0x40099d}}, 0x48) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r4, 0x3) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') 19m11.343759811s ago: executing program 37 (id=9251): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x18, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0x4}]}, 0x18}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @loopback, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, r1, 0x40099d}}, 0x48) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r4, 0x3) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') 15m58.513710731s ago: executing program 8 (id=9810): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') socket$alg(0x26, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_PTRACER(0x59616d61, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) 15m55.984253626s ago: executing program 8 (id=9814): socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15m50.751177969s ago: executing program 8 (id=9818): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x2, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getpriority(0x1, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 15m44.397388748s ago: executing program 8 (id=9836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_script(r5, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000300)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r6 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r1, 0x409, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r6, 0x0) epoll_create1(0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffff", 0xc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 15m42.81867555s ago: executing program 8 (id=9839): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) open$dir(0x0, 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) 15m40.540992092s ago: executing program 8 (id=9841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x4, 0x1, 0xf0, 0x8000000}, {0xfff9, 0x3, 0xc, 0x1d20}, {0x18b, 0x9, 0x1, 0x9}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x7ff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x3, 0xe8, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x3, 0x1, 0x2, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x3}, [@extension_unit={0x9, 0x24, 0x8, 0x2, 0x585, 0x1, "0ece"}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x8, 0x2, "334f00cd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0xd, 0x4, "5618eb26d7"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x2}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x5, 0x0, "0cf619807e71"}, @as_header={0x7, 0x24, 0x1, 0xb1, 0x6, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x2, 0x1e, {0x7, 0x25, 0x1, 0x83, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0xd, 0x4f, "2a76be26e48551aa"}, @as_header={0x7, 0x24, 0x1, 0x2}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x1, 0x9, "efe070a60e"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x9}, @as_header={0x7, 0x24, 0x1, 0xf, 0x9c, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x20, 0x6, 0x6, {0x7, 0x25, 0x1, 0x2, 0x0, 0x101}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0xc, 0xd7, 0x5, 0x40, 0x4}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x80c}}, {0xd6, &(0x7f00000003c0)=@string={0xd6, 0x3, "33a650d3e7b3ab00642576c4ea525380943a8e9a7b8de61959ed212c5ed70c37587f1e34ac89a95e80b3763476bb2f44b5971d4b7e774c2620519dd3e105c9d3162c4ee07786f2b5e5cf9d26970d6699561bf460fd07474c2f1b36be836f28560d76e016ba2c44a47fca700c0f209f7f8fb30da93279329dfdfa24fb1980b978661806e0235172901b3ca26596faaa1a0625c01caf367798dbe087eb6c3dfd8231957873819862ebf3cc8d4fd8ee4b1aeb596bbfe991fd1ee06017ddd04a7e5cd3cd5a992dab25ec58d54b932127a93ddd88699c"}}, {0x17, &(0x7f00000004c0)=@string={0x17, 0x3, "7d8ecc02f14325dff3a894780cd60fd985dd6c85a0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x4c0a}}]}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000080)={&(0x7f0000000240)=[{0x0, 0x1000, 0x4f, &(0x7f0000000100)="b19b603c22a0c5e7467f0fd78a542a25b1849b8c9332343d1662531ac5f3395b1c87c7c20516543d747e501ca41be4b5cd0d73acc610b27e67634c307a85788dfe6378c0975f6c0cd4801b2ba5d3f0"}], 0x1}) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000000)="32d6", 0x2}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r11]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e0000001080003"], 0x80}}, 0x0) 15m37.838731532s ago: executing program 4 (id=9846): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r5, 0x7ac, &(0x7f0000000100)={0x0, 0x0, 0x4}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 15m36.28258188s ago: executing program 4 (id=9849): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f0000000580)={0x6, @win={{0x1, 0xe, 0x0, 0x100}, 0x0, 0x2, &(0x7f0000000300)={{0x3, 0x0, 0x4, 0x80000000}, &(0x7f0000000240)={{0x10, 0x5, 0xffff, 0x80000000}}}, 0x400, &(0x7f0000000400)="ce7f068a5f94e5dd184984e90f57cac241705cce5ff9"}}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x6b8ffd1e, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0xa, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x8, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x81, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x202, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x1, 0x9, 0x7, 0xa2c9, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x7ff, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x10009, 0x5, 0x1, 0x6, 0x10001, 0xf5, 0x4, 0x10000, 0x4, 0xffff, 0x3, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x2, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x6, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x8000004, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x13, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0x7f, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x9, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0x1, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0x6b94, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x12, 0x10001, 0x1, 0x7, 0x2, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x100, 0x0, 0xa95a, 0xff, 0xf07, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x1, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x1, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0x1000000f, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x3ff, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x5a03, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x5, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xcc, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351e, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xec, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x6, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x9, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x145, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x6, 0x6, 0x0, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x3e, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) 15m34.284641112s ago: executing program 4 (id=9853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x888000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4010) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0xd7) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8840) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 15m32.09596066s ago: executing program 4 (id=9857): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) listen(0xffffffffffffffff, 0xd083) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r7, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, 0x0) 15m30.298288533s ago: executing program 4 (id=9861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r3 = dup(r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r4}, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x3}, 0x20) request_key(0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) 15m28.986302918s ago: executing program 4 (id=9864): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b46, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000240)={0xa, 0x2, 0x2, {0x46, 0x13, 0xfffb, 0xf7168000}}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f00000005c0), 0x1}, 0x20) 15m24.256520714s ago: executing program 38 (id=9841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x4, 0x1, 0xf0, 0x8000000}, {0xfff9, 0x3, 0xc, 0x1d20}, {0x18b, 0x9, 0x1, 0x9}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x7ff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x3, 0xe8, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x3, 0x1, 0x2, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x3}, [@extension_unit={0x9, 0x24, 0x8, 0x2, 0x585, 0x1, "0ece"}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x8, 0x2, "334f00cd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0xd, 0x4, "5618eb26d7"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x2}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x5, 0x0, "0cf619807e71"}, @as_header={0x7, 0x24, 0x1, 0xb1, 0x6, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x2, 0x1e, {0x7, 0x25, 0x1, 0x83, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0xd, 0x4f, "2a76be26e48551aa"}, @as_header={0x7, 0x24, 0x1, 0x2}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x1, 0x9, "efe070a60e"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x9}, @as_header={0x7, 0x24, 0x1, 0xf, 0x9c, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x20, 0x6, 0x6, {0x7, 0x25, 0x1, 0x2, 0x0, 0x101}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0xc, 0xd7, 0x5, 0x40, 0x4}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x80c}}, {0xd6, &(0x7f00000003c0)=@string={0xd6, 0x3, "33a650d3e7b3ab00642576c4ea525380943a8e9a7b8de61959ed212c5ed70c37587f1e34ac89a95e80b3763476bb2f44b5971d4b7e774c2620519dd3e105c9d3162c4ee07786f2b5e5cf9d26970d6699561bf460fd07474c2f1b36be836f28560d76e016ba2c44a47fca700c0f209f7f8fb30da93279329dfdfa24fb1980b978661806e0235172901b3ca26596faaa1a0625c01caf367798dbe087eb6c3dfd8231957873819862ebf3cc8d4fd8ee4b1aeb596bbfe991fd1ee06017ddd04a7e5cd3cd5a992dab25ec58d54b932127a93ddd88699c"}}, {0x17, &(0x7f00000004c0)=@string={0x17, 0x3, "7d8ecc02f14325dff3a894780cd60fd985dd6c85a0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x4c0a}}]}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000080)={&(0x7f0000000240)=[{0x0, 0x1000, 0x4f, &(0x7f0000000100)="b19b603c22a0c5e7467f0fd78a542a25b1849b8c9332343d1662531ac5f3395b1c87c7c20516543d747e501ca41be4b5cd0d73acc610b27e67634c307a85788dfe6378c0975f6c0cd4801b2ba5d3f0"}], 0x1}) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000000)="32d6", 0x2}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r11]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e0000001080003"], 0x80}}, 0x0) 15m13.902129449s ago: executing program 39 (id=9864): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b46, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000240)={0xa, 0x2, 0x2, {0x46, 0x13, 0xfffb, 0xf7168000}}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f00000005c0), 0x1}, 0x20) 10m49.794787354s ago: executing program 9 (id=11019): syz_usb_connect(0x1, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502"], 0x0) 10m46.724999153s ago: executing program 9 (id=11034): clock_settime(0x7ffffffff000, &(0x7f0000000040)={0x0, 0x989680}) 10m46.514771554s ago: executing program 9 (id=11035): add_key$user(&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd) 10m46.3197845s ago: executing program 9 (id=11037): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 10m45.982339011s ago: executing program 9 (id=11040): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0xe) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0xf8, 0xd1, 0xc, 0x10, 0xb}, 0x1d, 0x0, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000800)=@string={0x2}}]}) 10m42.575228629s ago: executing program 9 (id=11059): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}], 0x7) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18) 10m23.376134417s ago: executing program 40 (id=11059): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}], 0x7) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18) 9m51.398978915s ago: executing program 0 (id=11240): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x2d, 0x1, 0x1, "1c13ebdaf2f293a684a1a058e8edb14399fcc100e267131b00", 0x494e4f4b}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @remote}}, [0xd, 0x3, 0x1, 0x4, 0x61, 0x2, 0x5, 0x1, 0xffffffffffff4de5, 0xfffffffffffeffff, 0x3, 0x5, 0x7, 0x8, 0x300000000]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916600000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) 9m49.721637681s ago: executing program 0 (id=11243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x888000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4010) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0xd7) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x8840) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 9m45.328636538s ago: executing program 0 (id=11257): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 9m44.999503083s ago: executing program 0 (id=11260): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259aa76d2688ca4c6588a8000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m42.453673581s ago: executing program 0 (id=11269): r0 = memfd_create(&(0x7f0000000000)='*\x92.\x00', 0x5) lseek(r0, 0x0, 0x1) 9m42.229489465s ago: executing program 0 (id=11273): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d01090050001180490067004df4fc8de71626db37a39716bc6a1d9cbb21e0a06208c366fbcb7bdf381a45efcace9782aab31f4423aa8b1fa6f26bc762d6030000004ff3c640b8656c018bebe844d61d0b0000004d001280"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m26.022023143s ago: executing program 41 (id=11273): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d01090050001180490067004df4fc8de71626db37a39716bc6a1d9cbb21e0a06208c366fbcb7bdf381a45efcace9782aab31f4423aa8b1fa6f26bc762d6030000004ff3c640b8656c018bebe844d61d0b0000004d001280"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m14.115300575s ago: executing program 1 (id=14205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07040000000000000000050000001000038004000400080002002000000018000180140003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3m13.684805386s ago: executing program 1 (id=14208): setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "4021f99f9cfee7ef", "49b15ab82f78d638233cff72ff7d0e89", "d0a7a99e", "6099eb986765cde0"}, 0x28) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)) 3m13.334780917s ago: executing program 1 (id=14211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000480)) 3m12.789569372s ago: executing program 1 (id=14214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}]}, 0x34}}, 0x0) 3m12.516413761s ago: executing program 1 (id=14217): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {}, 0x4, 0x1}) 3m12.326583204s ago: executing program 1 (id=14219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) 3m2.437595017s ago: executing program 2 (id=14279): set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3m0.241821836s ago: executing program 2 (id=14296): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000280)={@my=0x1}) 2m59.708131904s ago: executing program 2 (id=14303): r0 = io_uring_setup(0x6f2f, &(0x7f00000002c0)={0x0, 0x23dc, 0x800, 0x800002, 0x3ca}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) 2m59.411599711s ago: executing program 2 (id=14306): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 2m59.253536035s ago: executing program 7 (id=14308): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0xe) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0xf8, 0xd1, 0xc, 0x10, 0xb}, 0x1d, 0x0, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000800)=@string={0x2}}]}) 2m58.652548135s ago: executing program 2 (id=14309): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\v\x00\x00\x00\x00\x00v'], 0x0}, 0x0) 2m57.245062412s ago: executing program 42 (id=14219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) 2m54.298646985s ago: executing program 7 (id=14327): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002480)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2m54.115990474s ago: executing program 2 (id=14328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x958abc4e9e7fb59f}) 2m53.993089046s ago: executing program 7 (id=14329): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x5411, &(0x7f0000000100)) 2m53.783116418s ago: executing program 7 (id=14331): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 2m53.732049692s ago: executing program 7 (id=14332): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) 2m53.452469822s ago: executing program 7 (id=14333): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 2m39.092408885s ago: executing program 43 (id=14328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x958abc4e9e7fb59f}) 2m36.846437153s ago: executing program 44 (id=14333): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 6.21978243s ago: executing program 3 (id=15783): r0 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2026179e3f9e94f795c462aef6c3ea5725a79a084ad573851312355a1302", 0xff, 0x3, 0x6, 0x2}, 0x3c) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000080)={@local, @loopback, 0x1, "a25cfc95e75c9c55d5257a3fc5cf22adcb205d64f04fc93f830b020f52814d58", 0x2, 0xffffffff, 0x5, 0xfff}, 0x3c) 4.05175879s ago: executing program 3 (id=15811): unshare(0x2c020400) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 3.711734038s ago: executing program 3 (id=15816): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32=r2], 0x44}}, 0x40034) 2.875719691s ago: executing program 3 (id=15825): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.152994415s ago: executing program 3 (id=15835): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x1, 0x7fffffff}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x37) 875.640346ms ago: executing program 3 (id=15838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0xfc}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x4004) 359.278148ms ago: executing program 6 (id=15844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0) 245.760193ms ago: executing program 6 (id=15845): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x503, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r1}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 215.428721ms ago: executing program 6 (id=15846): unshare(0x2a060400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) 140.892175ms ago: executing program 6 (id=15847): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 37.901409ms ago: executing program 6 (id=15848): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0xff, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=15849): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f00000001c0)=[{0x3, 0x4, 0x800}, {0x1, 0xabdd, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) kernel console output (not intermixed with test programs): 94967295 subj=_ pid=4002 comm="syz.3.12239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2069.412863][ T38] audit: type=1326 audit(1763808281.736:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4002 comm="syz.3.12239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2069.412918][ T38] audit: type=1326 audit(1763808281.736:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4002 comm="syz.3.12239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2069.412966][ T38] audit: type=1326 audit(1763808281.736:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4002 comm="syz.3.12239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2069.413778][ T38] audit: type=1326 audit(1763808281.736:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4002 comm="syz.3.12239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2069.413848][ T38] audit: type=1326 audit(1763808281.736:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4002 comm="syz.3.12239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2069.416666][ T38] audit: type=1326 audit(1763808281.736:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4002 comm="syz.3.12239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2071.791968][ T3162] vhci_hcd: vhci_device speed not set [ 2074.076671][ T4046] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12256'. [ 2074.076697][ T4046] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12256'. [ 2074.475583][ T4055] overlayfs: empty lowerdir [ 2074.672149][ T4060] netlink: 'syz.7.12264': attribute type 13 has an invalid length. [ 2074.896166][ T4066] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12267'. [ 2074.896213][ T4066] netlink: 'syz.7.12267': attribute type 1 has an invalid length. [ 2074.896229][ T4066] netlink: 'syz.7.12267': attribute type 2 has an invalid length. [ 2076.818271][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 2076.818368][ T38] audit: type=1326 audit(1763808289.136:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4079 comm="syz.7.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2076.819660][ T38] audit: type=1326 audit(1763808289.136:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4079 comm="syz.7.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2076.821018][ T38] audit: type=1326 audit(1763808289.136:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4079 comm="syz.7.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2076.824825][ T38] audit: type=1326 audit(1763808289.136:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4079 comm="syz.7.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2076.825278][ T38] audit: type=1326 audit(1763808289.146:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4079 comm="syz.7.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2076.827128][ T38] audit: type=1326 audit(1763808289.146:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4079 comm="syz.7.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2076.827482][ T38] audit: type=1326 audit(1763808289.146:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4079 comm="syz.7.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2076.828224][ T38] audit: type=1326 audit(1763808289.146:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4079 comm="syz.7.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2076.831074][ T38] audit: type=1326 audit(1763808289.146:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4079 comm="syz.7.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2076.831703][ T38] audit: type=1326 audit(1763808289.146:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4079 comm="syz.7.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2076.858803][ T4085] binfmt_misc: register: failed to install interpreter file ./file0 [ 2078.296852][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12290'. [ 2078.296885][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12290'. [ 2080.584917][ T4139] binfmt_misc: register: failed to install interpreter file ./file0 [ 2081.557967][ T4225] bond1: option lacp_active: invalid value (8) [ 2081.610343][ T4225] bond1 (unregistering): Released all slaves [ 2083.400555][ T4260] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 2084.846093][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.910715][ C0] vkms_vblank_simulate: vblank timer overrun [ 2086.071267][ T4300] Scaler: ================= START STATUS ================= [ 2086.071286][ T4300] Scaler: ================== END STATUS ================== [ 2086.421287][ T4313] netlink: 'syz.2.12370': attribute type 49 has an invalid length. [ 2086.847149][ C0] vkms_vblank_simulate: vblank timer overrun [ 2087.010932][ C0] vkms_vblank_simulate: vblank timer overrun [ 2087.572123][ C0] vkms_vblank_simulate: vblank timer overrun [ 2087.827048][ C0] vkms_vblank_simulate: vblank timer overrun [ 2088.034059][ T4325] binfmt_misc: register: failed to install interpreter file ./file0 [ 2089.392256][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 2089.392275][ T38] audit: type=1326 audit(1763808301.716:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4384 comm="syz.2.12402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2089.392762][ T38] audit: type=1326 audit(1763808301.716:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4384 comm="syz.2.12402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2089.392991][ T38] audit: type=1326 audit(1763808301.716:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4384 comm="syz.2.12402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2089.393258][ T38] audit: type=1326 audit(1763808301.716:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4384 comm="syz.2.12402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2089.393482][ T38] audit: type=1326 audit(1763808301.716:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4384 comm="syz.2.12402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2089.395967][ T38] audit: type=1326 audit(1763808301.716:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4384 comm="syz.2.12402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2089.396228][ T38] audit: type=1326 audit(1763808301.716:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4384 comm="syz.2.12402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2089.522319][ T38] audit: type=1326 audit(1763808301.816:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4384 comm="syz.2.12402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2089.522389][ T38] audit: type=1326 audit(1763808301.836:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4384 comm="syz.2.12402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2089.522441][ T38] audit: type=1326 audit(1763808301.846:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4384 comm="syz.2.12402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2090.414058][ T4409] binfmt_misc: register: failed to install interpreter file ./file0 [ 2090.790541][ T4441] netlink: 'syz.3.12424': attribute type 3 has an invalid length. [ 2094.234697][ T5810] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 2097.867397][ T4582] netlink: 'syz.7.12491': attribute type 5 has an invalid length. [ 2099.101126][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 2099.101144][ T38] audit: type=1326 audit(1763808311.416:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4568 comm="syz.1.12485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2099.101194][ T38] audit: type=1326 audit(1763808311.416:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4568 comm="syz.1.12485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2099.161120][ T38] audit: type=1326 audit(1763808311.416:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4568 comm="syz.1.12485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2099.162353][ T38] audit: type=1326 audit(1763808311.476:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4568 comm="syz.1.12485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2099.162416][ T38] audit: type=1326 audit(1763808311.476:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4568 comm="syz.1.12485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2099.416229][ T4605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12501'. [ 2099.916495][ T4577] binfmt_misc: register: failed to install interpreter file ./file0 [ 2100.740008][ T4631] random: crng reseeded on system resumption [ 2102.593941][ T38] audit: type=1326 audit(1763808314.916:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4658 comm="syz.7.12525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2102.595675][ T38] audit: type=1326 audit(1763808314.916:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4658 comm="syz.7.12525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2102.597241][ T38] audit: type=1326 audit(1763808314.916:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4658 comm="syz.7.12525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2102.598892][ T38] audit: type=1326 audit(1763808314.916:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4658 comm="syz.7.12525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2102.599318][ T38] audit: type=1326 audit(1763808314.916:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4658 comm="syz.7.12525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2102.982083][T28266] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2103.145778][T28266] usb 2-1: Using ep0 maxpacket: 32 [ 2103.150011][T28266] usb 2-1: config 2 has an invalid interface number: 194 but max is 0 [ 2103.150040][T28266] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2103.150059][T28266] usb 2-1: config 2 has no interface number 0 [ 2103.150121][T28266] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 2103.150148][T28266] usb 2-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2103.150192][T28266] usb 2-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 2103.150215][T28266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.389632][T28266] usb 2-1: string descriptor 0 read error: -71 [ 2103.425232][T28266] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2103.762628][T28266] usb 2-1: USB disconnect, device number 20 [ 2103.789770][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.248120][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12548'. [ 2107.081557][ T4762] netlink: 'syz.1.12571': attribute type 9 has an invalid length. [ 2107.367101][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 2107.367120][ T38] audit: type=1326 audit(1763808319.686:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4749 comm="syz.7.12567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2107.367367][ T38] audit: type=1326 audit(1763808319.686:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4749 comm="syz.7.12567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2107.367654][ T4750] binfmt_misc: register: failed to install interpreter file ./file0 [ 2107.432677][ T38] audit: type=1326 audit(1763808319.686:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4749 comm="syz.7.12567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2107.433126][ T38] audit: type=1326 audit(1763808319.686:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4749 comm="syz.7.12567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2108.735843][ T4782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12578'. [ 2109.014702][ T4797] netlink: 11 bytes leftover after parsing attributes in process `syz.2.12583'. [ 2109.689985][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12598'. [ 2109.709915][ T4829] netlink: 'syz.1.12597': attribute type 7 has an invalid length. [ 2109.709940][ T4829] netlink: 'syz.1.12597': attribute type 8 has an invalid length. [ 2109.709955][ T4829] netlink: 'syz.1.12597': attribute type 13 has an invalid length. [ 2109.765551][ T4833] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12601'. [ 2110.308013][ T5810] Bluetooth: hci5: unexpected cc 0x042d length: 63 > 7 [ 2110.311377][ T5810] Bluetooth: hci5: unexpected event for opcode 0x042d [ 2110.370504][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12613'. [ 2110.421839][ T38] audit: type=1326 audit(1763808322.716:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4826 comm="syz.2.12599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2110.421901][ T38] audit: type=1326 audit(1763808322.716:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4826 comm="syz.2.12599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2110.421949][ T38] audit: type=1326 audit(1763808322.736:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4826 comm="syz.2.12599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2110.421995][ T38] audit: type=1326 audit(1763808322.736:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4826 comm="syz.2.12599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2110.422041][ T38] audit: type=1326 audit(1763808322.736:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4826 comm="syz.2.12599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2110.563612][ T4856] binfmt_misc: register: failed to install interpreter file ./file0 [ 2110.572635][ T38] audit: type=1326 audit(1763808322.886:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4826 comm="syz.2.12599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2111.471929][T29857] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 2111.622129][T29857] usb 8-1: Using ep0 maxpacket: 8 [ 2111.626206][T29857] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 2111.626241][T29857] usb 8-1: config 0 has no interface number 0 [ 2111.630797][T29857] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2111.630828][T29857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.630849][T29857] usb 8-1: Product: syz [ 2111.630863][T29857] usb 8-1: Manufacturer: syz [ 2111.630878][T29857] usb 8-1: SerialNumber: syz [ 2111.700353][T29857] usb 8-1: config 0 descriptor?? [ 2111.924451][T29857] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2111.924642][T29857] uvcvideo 8-1:0.31: No valid video chain found. [ 2111.949412][T29857] usb 8-1: USB disconnect, device number 2 [ 2114.379937][ T5810] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2114.393091][ T5810] Bluetooth: hci5: Injecting HCI hardware error event [ 2114.415418][ T5810] Bluetooth: hci5: hardware error 0x00 [ 2115.926848][ T5016] netlink: 'syz.7.12687': attribute type 3 has an invalid length. [ 2116.312014][T32258] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 2116.511920][T32258] usb 8-1: Using ep0 maxpacket: 32 [ 2116.514273][T32258] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 2116.514308][T32258] usb 8-1: config 0 has no interface number 0 [ 2116.514363][T32258] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2116.517243][T32258] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2116.517273][T32258] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.517294][T32258] usb 8-1: Product: syz [ 2116.517309][T32258] usb 8-1: Manufacturer: syz [ 2116.517323][T32258] usb 8-1: SerialNumber: syz [ 2116.824879][T32258] usb 8-1: config 0 descriptor?? [ 2117.120932][ T5020] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2117.491576][ T5020] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2117.702036][ T5810] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2117.731645][T32258] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2117.733946][T32258] asix 8-1:0.188: probe with driver asix failed with error -71 [ 2117.798493][T32258] usb 8-1: USB disconnect, device number 3 [ 2119.559444][ T5063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12709'. [ 2119.964360][ T5077] comedi comedi4: bad chanlist[0]=0x00200002 chan=2 range length=2 [ 2121.462629][ T1189] Bluetooth: hci0: command 0x0406 tx timeout [ 2122.471458][ T5088] binfmt_misc: register: failed to install interpreter file ./file0 [ 2122.491983][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 2122.492004][ T38] audit: type=1326 audit(1763808334.786:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5082 comm="syz.1.12719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2122.492060][ T38] audit: type=1326 audit(1763808334.786:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5082 comm="syz.1.12719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2124.333343][ T38] audit: type=1326 audit(1763808336.656:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.1.12744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2124.336858][ T38] audit: type=1326 audit(1763808336.656:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.1.12744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2124.337254][ T38] audit: type=1326 audit(1763808336.656:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.1.12744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2124.337702][ T38] audit: type=1326 audit(1763808336.656:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.1.12744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2124.342143][ T38] audit: type=1326 audit(1763808336.656:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.1.12744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2124.354757][ T38] audit: type=1326 audit(1763808336.666:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.1.12744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2124.364795][ T38] audit: type=1326 audit(1763808336.686:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.1.12744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2124.385013][ T38] audit: type=1326 audit(1763808336.686:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.1.12744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2132.197452][ T5251] netlink: 'syz.2.12786': attribute type 11 has an invalid length. [ 2134.698178][ T5278] netlink: 'syz.2.12800': attribute type 1 has an invalid length. [ 2134.698196][ T5278] netlink: 'syz.2.12800': attribute type 2 has an invalid length. [ 2134.698723][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12800'. [ 2134.976854][ T5284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2136.487270][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12821'. [ 2136.487301][ T5318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12821'. [ 2137.434802][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 2137.434822][ T38] audit: type=1326 audit(1763808349.746:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.7.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2137.434861][ T38] audit: type=1326 audit(1763808349.746:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.7.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2137.434895][ T38] audit: type=1326 audit(1763808349.746:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.7.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2137.434927][ T38] audit: type=1326 audit(1763808349.756:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.7.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2137.434959][ T38] audit: type=1326 audit(1763808349.756:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.7.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2137.436421][ T38] audit: type=1326 audit(1763808349.756:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.7.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2137.437133][ T38] audit: type=1326 audit(1763808349.756:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.7.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2137.438984][ T5328] binfmt_misc: register: failed to install interpreter file ./file0 [ 2137.442151][ T38] audit: type=1326 audit(1763808349.756:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.7.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2137.442217][ T38] audit: type=1326 audit(1763808349.756:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.7.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2137.442273][ T38] audit: type=1326 audit(1763808349.756:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.7.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2139.370429][ T5364] bond1 (unregistering): Released all slaves [ 2143.100213][ T5460] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 2143.317870][ T5467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 2143.317911][ T5467] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12884'. [ 2143.695484][ T5480] netlink: 'syz.7.12866': attribute type 3 has an invalid length. [ 2144.139203][ T5501] comedi: No check for data length of config insn id 33554453 is implemented [ 2144.139224][ T5501] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 2144.139239][ T5501] comedi: Assuming n=15 is correct [ 2145.289332][ T5553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2145.645224][ T5566] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 2145.646847][ T5566] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2146.603199][ T5611] binfmt_misc: register: failed to install interpreter file ./file0 [ 2148.342869][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 2150.687494][ T5665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12976'. [ 2152.851457][ T5717] netlink: zone id is out of range [ 2152.851472][ T5717] netlink: zone id is out of range [ 2152.851480][ T5717] netlink: zone id is out of range [ 2152.851489][ T5717] netlink: zone id is out of range [ 2152.851497][ T5717] netlink: zone id is out of range [ 2152.969186][ T5724] bond0: (slave veth1_macvtap): Error: Device is in use and cannot be enslaved [ 2153.112474][ T5726] kAFS: unable to lookup cell 'syz1' [ 2153.161980][T29161] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2153.325579][T29161] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2153.325612][T29161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.325633][T29161] usb 2-1: Product: syz [ 2153.325649][T29161] usb 2-1: Manufacturer: syz [ 2153.325673][T29161] usb 2-1: SerialNumber: syz [ 2153.384274][T29161] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2153.585484][T32258] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2154.054490][ T9] usb 2-1: USB disconnect, device number 21 [ 2154.748925][T32258] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2154.749802][T32258] ath9k_htc: Failed to initialize the device [ 2154.776778][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 2155.197520][ T5805] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 2155.213339][ T5805] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2155.971952][T29161] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 2156.124320][T29161] usb 2-1: config 2 has an invalid interface number: 50 but max is 0 [ 2156.124352][T29161] usb 2-1: config 2 has no interface number 0 [ 2156.124388][T29161] usb 2-1: config 2 interface 50 has no altsetting 0 [ 2156.127449][T29161] usb 2-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=ac.66 [ 2156.127480][T29161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.127501][T29161] usb 2-1: Product: syz [ 2156.127516][T29161] usb 2-1: Manufacturer: syz [ 2156.127531][T29161] usb 2-1: SerialNumber: syz [ 2156.206947][T29161] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 2156.396639][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13076'. [ 2156.396672][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13076'. [ 2156.396694][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13076'. [ 2156.396717][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13076'. [ 2156.396894][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13076'. [ 2156.396919][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13076'. [ 2156.396941][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13076'. [ 2156.396964][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13076'. [ 2156.396985][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13076'. [ 2156.397006][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13076'. [ 2156.642191][T29161] gspca_zc3xx: reg_r err -71 [ 2156.642296][T29161] gspca_zc3xx 2-1:2.50: probe with driver gspca_zc3xx failed with error -71 [ 2156.672404][T29161] usb 2-1: USB disconnect, device number 22 [ 2157.942731][ T5934] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2157.942763][ T5934] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2158.162252][ T5949] netlink: 'syz.2.13104': attribute type 7 has an invalid length. [ 2158.162277][ T5949] netlink: 'syz.2.13104': attribute type 8 has an invalid length. [ 2158.162292][ T5949] netlink: 'syz.2.13104': attribute type 13 has an invalid length. [ 2158.658014][ T5966] netlink: 'syz.7.13113': attribute type 2 has an invalid length. [ 2160.888151][ T5999] netlink: 'syz.1.13127': attribute type 10 has an invalid length. [ 2160.889406][ T5999] veth1_vlan: entered allmulticast mode [ 2161.012842][ T5999] team0: Device veth1_vlan failed to register rx_handler [ 2161.801304][ T6024] __nla_validate_parse: 91 callbacks suppressed [ 2161.801329][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13142'. [ 2161.801361][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13142'. [ 2161.801385][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13142'. [ 2162.129825][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13146'. [ 2162.359104][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 2162.359142][ T38] audit: type=1326 audit(1763808374.676:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.3.13145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2162.362046][ T38] audit: type=1326 audit(1763808374.676:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.3.13145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2162.363177][ T38] audit: type=1326 audit(1763808374.686:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.3.13145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2162.382236][ T38] audit: type=1326 audit(1763808374.686:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.3.13145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2162.382294][ T38] audit: type=1326 audit(1763808374.686:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.3.13145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2162.382341][ T38] audit: type=1326 audit(1763808374.686:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.3.13145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2162.382395][ T38] audit: type=1326 audit(1763808374.686:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.3.13145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2162.382441][ T38] audit: type=1326 audit(1763808374.686:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.3.13145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2162.382486][ T38] audit: type=1326 audit(1763808374.686:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.3.13145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2162.382532][ T38] audit: type=1326 audit(1763808374.686:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.3.13145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2162.935763][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13151'. [ 2162.935807][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13151'. [ 2162.936418][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13151'. [ 2162.936472][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13151'. [ 2163.002172][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13151'. [ 2163.002210][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13151'. [ 2163.089771][ T6052] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 2165.247629][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2166.386775][ T6148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2167.635969][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 2167.635991][ T38] audit: type=1326 audit(1763808379.956:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6105 comm="syz.7.13178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2167.669750][ T38] audit: type=1326 audit(1763808379.956:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6105 comm="syz.7.13178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2167.695299][ T38] audit: type=1326 audit(1763808380.016:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6105 comm="syz.7.13178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2167.695350][ T38] audit: type=1326 audit(1763808380.016:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6105 comm="syz.7.13178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2167.752348][ T38] audit: type=1326 audit(1763808380.076:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6105 comm="syz.7.13178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2167.752586][ T38] audit: type=1326 audit(1763808380.076:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6105 comm="syz.7.13178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2167.752877][ T38] audit: type=1326 audit(1763808380.076:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6105 comm="syz.7.13178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2168.129145][ T38] audit: type=1326 audit(1763808380.446:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6105 comm="syz.7.13178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2169.166808][ T6191] binfmt_misc: register: failed to install interpreter file ./file0 [ 2171.099144][ T38] audit: type=1326 audit(1763808383.416:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6196 comm="syz.2.13217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2171.099685][ T38] audit: type=1326 audit(1763808383.416:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6196 comm="syz.2.13217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2171.821339][ T6237] __nla_validate_parse: 146 callbacks suppressed [ 2171.821355][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13230'. [ 2172.443659][ T6231] binfmt_misc: register: failed to install interpreter file ./file0 [ 2173.639563][ T6272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13247'. [ 2173.917883][ T6282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13251'. [ 2174.296945][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13256'. [ 2176.556326][ T6354] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 2176.573249][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13280'. [ 2178.255115][ T6369] netlink: 296 bytes leftover after parsing attributes in process `syz.1.13287'. [ 2178.692164][ T6371] netlink: 71 bytes leftover after parsing attributes in process `syz.7.13286'. [ 2179.933457][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13295'. [ 2180.057357][ T6390] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 2180.370966][ T6390] bond1 (unregistering): Released all slaves [ 2181.365133][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2181.574999][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2181.575034][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2181.575077][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2181.575100][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.581176][ T9] usb 2-1: config 0 descriptor?? [ 2182.026622][ T9] cp2112 0003:10C4:EA90.0013: item fetching failed at offset 5/7 [ 2182.028686][ T9] cp2112 0003:10C4:EA90.0013: parse failed [ 2182.028847][ T9] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -22 [ 2182.221257][ T764] usb 2-1: USB disconnect, device number 23 [ 2182.693095][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 2182.693113][ T38] audit: type=1326 audit(1763808395.016:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.13325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2182.693552][ T38] audit: type=1326 audit(1763808395.016:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.13325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2182.693868][ T38] audit: type=1326 audit(1763808395.016:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.13325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2182.701958][ T38] audit: type=1326 audit(1763808395.016:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.13325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2182.824700][ T38] audit: type=1326 audit(1763808395.096:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.13325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2182.825039][ T38] audit: type=1326 audit(1763808395.146:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.13325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2182.825302][ T38] audit: type=1326 audit(1763808395.146:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.13325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2182.978989][ T6455] binfmt_misc: register: failed to install interpreter file ./file0 [ 2183.494803][ T6476] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2183.494824][ T6476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2183.494940][ T6476] vhci_hcd vhci_hcd.0: Device attached [ 2183.769741][ T6486] netlink: 'syz.2.13339': attribute type 3 has an invalid length. [ 2183.784215][ T3162] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 2183.802260][ T764] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 2183.956463][ T3162] usb 2-1: config 0 has no interfaces? [ 2183.956507][ T3162] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2183.956531][ T3162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2183.970651][ T3162] usb 2-1: config 0 descriptor?? [ 2189.708973][T29857] usb 2-1: USB disconnect, device number 24 [ 2189.740482][ T6479] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2189.853101][T24284] vhci_hcd: stop threads [ 2189.853123][T24284] vhci_hcd: release socket [ 2190.001995][T24284] vhci_hcd: disconnect device [ 2190.062433][ T764] vhci_hcd: vhci_device speed not set [ 2190.347965][ T6523] ALSA: seq fatal error: cannot create timer (-19) [ 2190.484230][ T38] audit: type=1326 audit(1763808402.796:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.2.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2190.485660][ T38] audit: type=1326 audit(1763808402.806:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.2.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2190.490736][ T38] audit: type=1326 audit(1763808402.806:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.2.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2190.490785][ T38] audit: type=1326 audit(1763808402.806:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.2.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2190.491480][ T38] audit: type=1326 audit(1763808402.806:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.2.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2190.545660][ T38] audit: type=1326 audit(1763808402.806:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.2.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2190.572477][ T38] audit: type=1326 audit(1763808402.876:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.2.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2190.653656][ T38] audit: type=1326 audit(1763808402.926:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.2.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2190.653849][ T38] audit: type=1326 audit(1763808402.976:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.2.13350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2190.869615][ T38] audit: type=1326 audit(1763808403.186:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6522 comm="syz.3.13353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2191.647358][ T6546] binfmt_misc: register: failed to install interpreter file ./file0 [ 2191.684211][ T6561] tipc: Started in network mode [ 2191.684245][ T6561] tipc: Node identity ac141441, cluster identity 4711 [ 2191.691124][ T6561] tipc: Enabled bearer , priority 10 [ 2192.102140][ T6567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2192.802760][T28266] tipc: Node number set to 2886997057 [ 2193.193044][ T6612] rdma_op ffff888026300270 conn xmit_rdma 0000000000000000 [ 2193.707969][ T6583] binfmt_misc: register: failed to install interpreter file ./file0 [ 2196.233534][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 2196.233556][ T38] audit: type=1326 audit(1763808408.526:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6638 comm="syz.7.13401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2196.240220][ T38] audit: type=1326 audit(1763808408.556:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6638 comm="syz.7.13401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2196.240644][ T6645] binfmt_misc: register: failed to install interpreter file ./file0 [ 2196.240898][ T38] audit: type=1326 audit(1763808408.556:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6638 comm="syz.7.13401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2196.241570][ T38] audit: type=1326 audit(1763808408.556:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6638 comm="syz.7.13401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2197.453898][ T38] audit: type=1326 audit(1763808409.776:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6679 comm="syz.1.13418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2197.456838][ T38] audit: type=1326 audit(1763808409.776:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6679 comm="syz.1.13418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2197.457293][ T38] audit: type=1326 audit(1763808409.776:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6679 comm="syz.1.13418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2197.457861][ T38] audit: type=1326 audit(1763808409.776:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6679 comm="syz.1.13418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2197.460984][ T38] audit: type=1326 audit(1763808409.776:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6679 comm="syz.1.13418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2197.461464][ T38] audit: type=1326 audit(1763808409.776:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6679 comm="syz.1.13418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2197.472120][ T6684] binfmt_misc: register: failed to install interpreter file ./file0 [ 2198.075996][ T6701] netlink: 104 bytes leftover after parsing attributes in process `syz.7.13424'. [ 2199.219935][T29857] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2201.241884][T29857] usb 3-1: Using ep0 maxpacket: 32 [ 2201.249548][T29857] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 2201.249578][T29857] usb 3-1: config 0 has no interface number 0 [ 2201.249633][T29857] usb 3-1: config 0 interface 12 has no altsetting 0 [ 2201.270632][T29857] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2201.270668][T29857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.270694][T29857] usb 3-1: Product: syz [ 2201.270712][T29857] usb 3-1: Manufacturer: syz [ 2201.270729][T29857] usb 3-1: SerialNumber: syz [ 2201.347272][T29857] usb 3-1: config 0 descriptor?? [ 2201.980092][T29857] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2201.980150][T29857] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 2201.980167][T29857] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2201.980263][T29857] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 2202.031036][T29857] usb 3-1: USB disconnect, device number 15 [ 2205.367099][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13495'. [ 2205.608984][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 2205.609004][ T38] audit: type=1326 audit(1763808417.926:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.1.13491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2205.648400][ T38] audit: type=1326 audit(1763808417.966:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.1.13491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2205.676400][ T38] audit: type=1326 audit(1763808417.996:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.1.13491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2205.710922][ T38] audit: type=1326 audit(1763808418.026:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.1.13491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2205.711336][ T38] audit: type=1326 audit(1763808418.026:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.1.13491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2205.930099][ T38] audit: type=1326 audit(1763808418.236:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.1.13491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2205.930519][ T38] audit: type=1326 audit(1763808418.246:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.1.13491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2205.937704][ T38] audit: type=1326 audit(1763808418.246:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.1.13491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2205.937769][ T38] audit: type=1326 audit(1763808418.246:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.1.13491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2206.965787][ T6891] lo speed is unknown, defaulting to 1000 [ 2207.528568][ T38] audit: type=1326 audit(1763808419.846:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6906 comm="syz.3.13523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2207.568236][ T6913] bond0: Unable to set down delay as MII monitoring is disabled [ 2212.644454][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 2212.644475][ T38] audit: type=1326 audit(1763808424.966:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.2.13546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2212.644528][ T38] audit: type=1326 audit(1763808424.966:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.2.13546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2212.646030][ T38] audit: type=1326 audit(1763808424.966:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.2.13546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2212.646085][ T38] audit: type=1326 audit(1763808424.966:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.2.13546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2212.646133][ T38] audit: type=1326 audit(1763808424.966:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.2.13546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2212.682105][ T38] audit: type=1326 audit(1763808425.006:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.2.13546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2212.682336][ T38] audit: type=1326 audit(1763808425.006:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.2.13546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2212.682539][ T38] audit: type=1326 audit(1763808425.006:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.2.13546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2212.682927][ T38] audit: type=1326 audit(1763808425.006:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.2.13546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2212.683578][ T38] audit: type=1326 audit(1763808425.006:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.2.13546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2212.684439][ T6968] binfmt_misc: register: failed to install interpreter file ./file0 [ 2213.132134][ T6977] netlink: 48 bytes leftover after parsing attributes in process `syz.7.13532'. [ 2213.703008][T29161] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2213.854547][T29161] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2213.854579][T29161] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2213.854600][T29161] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.854621][T29161] usb 2-1: config 220 has no interface number 2 [ 2213.854699][T29161] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2213.854727][T29161] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2213.854746][T29161] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2213.854766][T29161] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2213.858152][T29161] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2213.858184][T29161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.858205][T29161] usb 2-1: Product: syz [ 2213.858220][T29161] usb 2-1: Manufacturer: syz [ 2213.858235][T29161] usb 2-1: SerialNumber: syz [ 2214.149460][T29161] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2214.149487][T29161] uvcvideo 2-1:220.0: No valid video chain found. [ 2214.149535][T29161] usb 2-1: selecting invalid altsetting 0 [ 2214.269791][T29161] usb 2-1: selecting invalid altsetting 0 [ 2214.269834][T29161] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2214.301980][T29161] usb 2-1: USB disconnect, device number 25 [ 2214.822047][T29161] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2214.971897][T29161] usb 3-1: Using ep0 maxpacket: 16 [ 2214.974369][T29161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2214.974401][T29161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2214.974425][T29161] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2214.974468][T29161] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2214.974492][T29161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.048567][T29161] usb 3-1: config 0 descriptor?? [ 2215.506346][T29161] microsoft 0003:045E:07DA.0014: item 0 4 0 8 parsing failed [ 2215.507255][T29161] microsoft 0003:045E:07DA.0014: parse failed [ 2215.507374][T29161] microsoft 0003:045E:07DA.0014: probe with driver microsoft failed with error -22 [ 2216.023202][T29161] usb 3-1: USB disconnect, device number 16 [ 2217.260579][ T7071] batadv_slave_1: entered promiscuous mode [ 2217.260901][ T7071] macsec1: entered promiscuous mode [ 2217.261134][ T7071] macsec1: entered allmulticast mode [ 2217.261146][ T7071] batadv_slave_1: entered allmulticast mode [ 2217.337372][ T7071] batadv_slave_1: left allmulticast mode [ 2217.337784][ T7071] batadv_slave_1: left promiscuous mode [ 2217.585560][ T7080] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13599'. [ 2217.586323][ T7085] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13599'. [ 2220.891907][ T7012] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2221.054619][ T7012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2221.054764][ T7012] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 2221.054789][ T7012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.060877][ T7012] usb 3-1: config 0 descriptor?? [ 2222.532610][ T7012] zeroplus 0003:0C12:0005.0015: item fetching failed at offset 1/3 [ 2222.533176][ T7012] zeroplus 0003:0C12:0005.0015: parse failed [ 2222.533227][ T7012] zeroplus 0003:0C12:0005.0015: probe with driver zeroplus failed with error -22 [ 2224.260947][ T3162] usb 3-1: USB disconnect, device number 17 [ 2224.512460][ T7157] netlink: 'syz.7.13631': attribute type 3 has an invalid length. [ 2224.945536][ T7172] team0: Port device veth0_to_bridge added [ 2224.946186][ T7172] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 2224.997780][ T7176] kernel profiling enabled (shift: 9) [ 2225.297545][ T7188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13648'. [ 2225.749408][ T7196] binfmt_misc: register: failed to install interpreter file ./file0 [ 2225.892038][ T7012] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2226.044798][ T7012] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 2226.044832][ T7012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.089328][ T7012] usb 3-1: config 0 descriptor?? [ 2226.120894][ T7012] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 2226.310731][ T7012] usb 3-1: USB disconnect, device number 18 [ 2226.669306][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.436028][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 2227.436165][ T38] audit: type=1326 audit(1763808439.756:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.7.13674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2227.437362][ T38] audit: type=1326 audit(1763808439.756:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.7.13674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2227.438104][ T38] audit: type=1326 audit(1763808439.756:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.7.13674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2227.439702][ T38] audit: type=1326 audit(1763808439.756:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.7.13674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2227.439995][ T38] audit: type=1326 audit(1763808439.756:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.7.13674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2227.440942][ T38] audit: type=1326 audit(1763808439.756:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.7.13674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2227.441250][ T38] audit: type=1326 audit(1763808439.756:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.7.13674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2227.603978][ T38] audit: type=1326 audit(1763808439.926:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.7.13674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2227.642590][ T7256] binfmt_misc: register: failed to install interpreter file ./file0 [ 2227.663306][ T38] audit: type=1326 audit(1763808439.926:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.7.13674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2227.663392][ T38] audit: type=1326 audit(1763808439.966:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.7.13674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2227.917214][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 2231.014477][ T7316] netlink: 'syz.3.13704': attribute type 3 has an invalid length. [ 2232.137221][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13731'. [ 2232.137252][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13731'. [ 2232.342079][T32258] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 2232.504366][T32258] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2232.504399][T32258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.504422][T32258] usb 2-1: Product: syz [ 2232.504436][T32258] usb 2-1: Manufacturer: syz [ 2232.504452][T32258] usb 2-1: SerialNumber: syz [ 2232.514843][T32258] usb 2-1: config 0 descriptor?? [ 2232.585567][T32258] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2234.360949][T32258] gspca_stk1135: reg_w 0x0 err -110 [ 2234.362173][T32258] gspca_stk1135: serial bus timeout: status=0x00 [ 2234.362190][T32258] gspca_stk1135: Sensor write failed [ 2234.362238][T32258] gspca_stk1135: serial bus timeout: status=0x00 [ 2234.362249][T32258] gspca_stk1135: Sensor write failed [ 2234.362287][T32258] gspca_stk1135: serial bus timeout: status=0x00 [ 2234.362298][T32258] gspca_stk1135: Sensor read failed [ 2234.362339][T32258] gspca_stk1135: serial bus timeout: status=0x00 [ 2234.362350][T32258] gspca_stk1135: Sensor read failed [ 2234.362358][T32258] gspca_stk1135: Detected sensor type unknown (0x0) [ 2234.362434][T32258] gspca_stk1135: serial bus timeout: status=0x00 [ 2234.362447][T32258] gspca_stk1135: Sensor read failed [ 2234.362484][T32258] gspca_stk1135: serial bus timeout: status=0x00 [ 2234.362496][T32258] gspca_stk1135: Sensor read failed [ 2234.362535][T32258] gspca_stk1135: serial bus timeout: status=0x00 [ 2234.362548][T32258] gspca_stk1135: Sensor write failed [ 2234.362585][T32258] gspca_stk1135: serial bus timeout: status=0x00 [ 2234.362597][T32258] gspca_stk1135: Sensor write failed [ 2234.362705][T32258] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 2235.707494][ T7429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13756'. [ 2236.130808][ T7443] IPVS: stopping backup sync thread 6354 ... [ 2236.232252][T26017] usb 2-1: USB disconnect, device number 26 [ 2238.339052][ C0] vkms_vblank_simulate: vblank timer overrun [ 2238.522056][ T764] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 2238.674785][ T764] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2238.674855][ T764] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2238.674884][ T764] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2238.674907][ T764] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2238.677864][ T764] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2238.677894][ T764] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2238.677915][ T764] usb 8-1: Manufacturer: syz [ 2238.783997][ T764] usb 8-1: config 0 descriptor?? [ 2239.224274][ T764] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 2239.279055][ T764] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 2239.428433][ T764] usb 8-1: USB disconnect, device number 4 [ 2239.797702][ T7477] fido_id[7477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2240.432039][ T7502] netlink: 80 bytes leftover after parsing attributes in process `syz.7.13791'. [ 2240.432142][ T7502] netlink: 80 bytes leftover after parsing attributes in process `syz.7.13791'. [ 2240.624197][ T7507] netlink: 79 bytes leftover after parsing attributes in process `syz.1.13770'. [ 2246.288508][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 2246.288528][ T38] audit: type=1326 audit(1763808458.606:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7554 comm="syz.2.13816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2246.289188][ T38] audit: type=1326 audit(1763808458.606:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7554 comm="syz.2.13816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2246.290482][ T38] audit: type=1326 audit(1763808458.606:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7554 comm="syz.2.13816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2246.398558][ T38] audit: type=1326 audit(1763808458.706:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7554 comm="syz.2.13816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2246.399353][ T7568] binfmt_misc: register: failed to install interpreter file ./file0 [ 2246.399648][ T38] audit: type=1326 audit(1763808458.716:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7554 comm="syz.2.13816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2246.660340][ T38] audit: type=1326 audit(1763808458.976:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7575 comm="syz.7.13822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2246.661659][ T38] audit: type=1326 audit(1763808458.976:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7575 comm="syz.7.13822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2246.710256][ T38] audit: type=1326 audit(1763808459.026:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7575 comm="syz.7.13822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2246.735734][ T38] audit: type=1326 audit(1763808459.056:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7575 comm="syz.7.13822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2246.736042][ T38] audit: type=1326 audit(1763808459.056:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7575 comm="syz.7.13822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2248.340245][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13830'. [ 2248.838901][ T7616] overlayfs: regular lower layers cannot follow data lower layers [ 2251.794752][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 2251.794772][ T38] audit: type=1326 audit(1763808464.116:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7664 comm="syz.2.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2251.794827][ T38] audit: type=1326 audit(1763808464.116:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7664 comm="syz.2.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2251.842144][ T38] audit: type=1326 audit(1763808464.126:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7664 comm="syz.2.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2251.842223][ T38] audit: type=1326 audit(1763808464.126:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7664 comm="syz.2.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2251.842279][ T38] audit: type=1326 audit(1763808464.126:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7664 comm="syz.2.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2251.842338][ T38] audit: type=1326 audit(1763808464.126:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7664 comm="syz.2.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2251.842395][ T38] audit: type=1326 audit(1763808464.126:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7664 comm="syz.2.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2251.842449][ T38] audit: type=1326 audit(1763808464.126:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7664 comm="syz.2.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2255.347447][ T7710] tipc: Started in network mode [ 2255.347490][ T7710] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2255.363093][ T7710] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2255.383045][ T7710] tipc: Enabled bearer , priority 10 [ 2256.588405][T26017] tipc: Node number set to 1 [ 2256.694512][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13886'. [ 2257.453949][ T7756] netlink: 'syz.2.13901': attribute type 46 has an invalid length. [ 2259.060644][ T38] audit: type=1326 audit(1763808471.376:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7769 comm="syz.1.13907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2259.061135][ T38] audit: type=1326 audit(1763808471.376:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7769 comm="syz.1.13907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2259.061537][ T38] audit: type=1326 audit(1763808471.376:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7769 comm="syz.1.13907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2259.062233][ T38] audit: type=1326 audit(1763808471.386:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7769 comm="syz.1.13907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2259.062612][ T38] audit: type=1326 audit(1763808471.386:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7769 comm="syz.1.13907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2259.063227][ T38] audit: type=1326 audit(1763808471.386:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7769 comm="syz.1.13907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2259.063969][ T38] audit: type=1326 audit(1763808471.386:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7769 comm="syz.1.13907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2259.064468][ T38] audit: type=1326 audit(1763808471.386:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7769 comm="syz.1.13907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2259.064851][ T7773] binfmt_misc: register: failed to install interpreter file ./file0 [ 2259.065170][ T38] audit: type=1326 audit(1763808471.386:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7769 comm="syz.1.13907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2259.065819][ T38] audit: type=1326 audit(1763808471.386:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7769 comm="syz.1.13907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2259.483007][ T7787] tmpfs: Cannot disable swap on remount [ 2260.692642][T32258] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 2260.863971][ C1] vkms_vblank_simulate: vblank timer overrun [ 2260.964932][T32258] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 2260.964962][T32258] usb 8-1: config 0 has no interface number 0 [ 2260.971137][T32258] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2260.971176][T32258] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.971198][T32258] usb 8-1: Product: syz [ 2260.971213][T32258] usb 8-1: Manufacturer: syz [ 2260.971228][T32258] usb 8-1: SerialNumber: syz [ 2260.990185][T32258] usb 8-1: config 0 descriptor?? [ 2261.513428][ C1] vkms_vblank_simulate: vblank timer overrun [ 2261.540835][T32258] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 2261.560132][T32258] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 2261.560461][T32258] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 2261.560778][T32258] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 2261.808049][ C1] vkms_vblank_simulate: vblank timer overrun [ 2262.212345][T32258] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2262.262768][ C1] vkms_vblank_simulate: vblank timer overrun [ 2262.521947][T28266] usb 8-1: USB disconnect, device number 5 [ 2262.573348][T28266] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2262.588317][T28266] keyspan 8-1:0.133: device disconnected [ 2263.119691][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13958'. [ 2263.119723][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13958'. [ 2263.168226][ T7883] erspan0: entered promiscuous mode [ 2263.521191][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13965'. [ 2263.556271][ T7897] IPVS: Error connecting to the multicast addr [ 2264.256338][ C1] vkms_vblank_simulate: vblank timer overrun [ 2264.411976][ C1] vkms_vblank_simulate: vblank timer overrun [ 2269.968819][ T7940] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2269.968883][ T7940] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2269.968988][ T7940] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2269.969143][ T7940] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 2269.969197][ T7940] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2269.969253][ T7940] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 2269.969398][ T7940] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2269.969451][ T7940] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2269.969503][ T7940] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 2269.969555][ T7940] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 2269.969607][ T7940] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 2269.969658][ T7940] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 2269.986792][ T7944] netlink: 'syz.1.13985': attribute type 1 has an invalid length. [ 2271.785302][ T7957] 9pnet_fd: Insufficient options for proto=fd [ 2271.902908][ T7958] netdevsim netdevsim2: Firmware load for '../file0' refused, path contains '..' component [ 2273.276645][ T38] audit: type=1326 audit(1763808485.596:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2273.277293][ T38] audit: type=1326 audit(1763808485.596:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2273.278362][ T38] audit: type=1326 audit(1763808485.596:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2273.382604][ T38] audit: type=1326 audit(1763808485.706:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2273.382950][ T38] audit: type=1326 audit(1763808485.706:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2273.441850][ T3162] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2273.500232][ T38] audit: type=1326 audit(1763808485.816:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2273.524109][ T38] audit: type=1326 audit(1763808485.846:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2273.524372][ T38] audit: type=1326 audit(1763808485.846:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2273.525923][ T38] audit: type=1326 audit(1763808485.846:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2273.525974][ T38] audit: type=1326 audit(1763808485.846:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2273.711912][ T3162] usb 3-1: Using ep0 maxpacket: 8 [ 2273.714414][ T3162] usb 3-1: config 0 interface 0 altsetting 108 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2273.714446][ T3162] usb 3-1: config 0 interface 0 altsetting 108 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2273.714478][ T3162] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2273.714514][ T3162] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 2273.714540][ T3162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.888160][ T3162] usb 3-1: config 0 descriptor?? [ 2274.810562][ T3162] cypress 0003:04B4:0001.0017: unknown main item tag 0x2 [ 2274.810592][ T3162] cypress 0003:04B4:0001.0017: item fetching failed at offset 8/164 [ 2274.811168][ T3162] cypress 0003:04B4:0001.0017: parse failed [ 2274.811218][ T3162] cypress 0003:04B4:0001.0017: probe with driver cypress failed with error -22 [ 2275.022246][T32258] usb 3-1: USB disconnect, device number 19 [ 2279.991903][T28266] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2280.156742][T28266] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 2280.156777][T28266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.197512][T28266] usb 3-1: config 0 descriptor?? [ 2280.225390][T28266] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2280.512070][T28266] gp8psk: usb in 128 operation failed. [ 2280.726424][T28266] gp8psk: usb in 146 operation failed. [ 2280.726462][T28266] gp8psk: failed to get FW version [ 2280.726904][T28266] gp8psk: usb in 149 operation failed. [ 2280.726921][T28266] gp8psk: failed to get FPGA version [ 2280.727361][T28266] gp8psk: usb in 138 operation failed. [ 2280.727457][T28266] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2280.728651][T28266] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 2280.728713][T28266] usb 3-1: media controller created [ 2280.980132][T28266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2281.112546][T28266] gp8psk_fe: Frontend attached [ 2281.114596][T28266] usb 3-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 2281.116165][T28266] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 2283.565864][T28266] gp8psk: usb in 138 operation failed. [ 2283.565888][T28266] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 2283.565903][T28266] gp8psk: found Genpix USB device pID = 203 (hex) [ 2283.589942][T28266] usb 3-1: USB disconnect, device number 20 [ 2284.494933][T28266] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 2285.172270][ T8111] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14058'. [ 2286.915995][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 2286.916015][ T38] audit: type=1326 audit(1763808499.236:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8121 comm="syz.3.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2286.916070][ T38] audit: type=1326 audit(1763808499.236:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8121 comm="syz.3.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2287.107016][ T8148] netlink: 'syz.2.14072': attribute type 2 has an invalid length. [ 2287.107041][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14072'. [ 2287.352080][T28266] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2287.571931][T28266] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2287.571964][T28266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2287.572114][T28266] usb 2-1: Product: syz [ 2287.572131][T28266] usb 2-1: Manufacturer: syz [ 2287.572147][T28266] usb 2-1: SerialNumber: syz [ 2287.655620][T28266] usb 2-1: config 0 descriptor?? [ 2287.691496][T28266] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2287.722169][ T8159] netlink: 92 bytes leftover after parsing attributes in process `syz.7.14078'. [ 2287.761482][T28266] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2287.781549][T28266] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2287.781617][T28266] usb 2-1: media controller created [ 2287.926596][T28266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2288.123227][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.335883][T28266] DVB: Unable to find symbol mt352_attach() [ 2288.489506][T28266] DVB: Unable to find symbol nxt6000_attach() [ 2288.489525][T28266] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2288.522143][T28266] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input71 [ 2288.547304][T28266] dvb-usb: schedule remote query interval to 1000 msecs. [ 2288.547330][T28266] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2288.547349][T28266] dvb-usb: bulk message failed: -22 (7/0) [ 2288.547368][T28266] dvb-usb: bulk message failed: -22 (7/0) [ 2288.603899][T28266] usb 2-1: USB disconnect, device number 27 [ 2290.012027][ T8199] batadv_slave_0: entered promiscuous mode [ 2290.012048][ T8199] batadv_slave_0: entered allmulticast mode [ 2290.417898][T28266] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2290.562240][ T38] audit: type=1326 audit(1763808502.876:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8182 comm="syz.1.14088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2290.562302][ T38] audit: type=1326 audit(1763808502.876:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8182 comm="syz.1.14088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2290.562351][ T38] audit: type=1326 audit(1763808502.876:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8182 comm="syz.1.14088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2290.591996][ T38] audit: type=1326 audit(1763808502.896:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8182 comm="syz.1.14088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2290.608392][ T38] audit: type=1326 audit(1763808502.926:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8182 comm="syz.1.14088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2290.642040][ T38] audit: type=1326 audit(1763808502.966:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8182 comm="syz.1.14088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2290.642397][ T38] audit: type=1326 audit(1763808502.966:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8182 comm="syz.1.14088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2290.642704][ T38] audit: type=1326 audit(1763808502.966:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8182 comm="syz.1.14088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e0b1f749 code=0x7ffc0000 [ 2290.648145][ T8197] binfmt_misc: register: failed to install interpreter file ./file0 [ 2291.539064][ T8225] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 2293.947151][ T8251] macvlan2: entered promiscuous mode [ 2293.947177][ T8251] bridge0: entered promiscuous mode [ 2294.261964][T32258] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 2294.431050][T32258] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2294.431083][T32258] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2294.431109][T32258] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2294.508358][T32258] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2294.508388][T32258] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2294.508409][T32258] usb 8-1: Product: syz [ 2294.508424][T32258] usb 8-1: Manufacturer: syz [ 2294.508438][T32258] usb 8-1: SerialNumber: syz [ 2294.924417][T32258] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2295.116681][T32258] usb 8-1: USB disconnect, device number 6 [ 2295.200737][T32258] usblp0: removed [ 2296.536242][ T8302] Bluetooth: MGMT ver 1.23 [ 2298.102043][T32258] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2298.274666][T32258] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2298.274698][T32258] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2298.274718][T32258] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2298.274740][T32258] usb 2-1: config 220 has no interface number 2 [ 2298.274824][T32258] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2298.274853][T32258] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2298.274872][T32258] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2298.274893][T32258] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2298.279128][T32258] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2298.279160][T32258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.279183][T32258] usb 2-1: Product: syz [ 2298.279198][T32258] usb 2-1: Manufacturer: syz [ 2298.279215][T32258] usb 2-1: SerialNumber: syz [ 2298.671841][T32258] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2298.671878][T32258] uvcvideo 2-1:220.0: No valid video chain found. [ 2298.671945][T32258] usb 2-1: selecting invalid altsetting 0 [ 2298.739109][T32258] usb 2-1: selecting invalid altsetting 0 [ 2298.739145][T32258] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2298.780383][T32258] usb 2-1: USB disconnect, device number 28 [ 2300.528139][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14162'. [ 2301.012018][ T8364] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14169'. [ 2305.684568][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 2305.684591][ T38] audit: type=1326 audit(1763808517.976:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8414 comm="syz.7.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2305.687242][ T38] audit: type=1326 audit(1763808518.006:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8414 comm="syz.7.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2305.687287][ T38] audit: type=1326 audit(1763808518.006:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8414 comm="syz.7.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2305.770771][ T8424] binfmt_misc: register: failed to install interpreter file ./file0 [ 2305.834305][ T38] audit: type=1326 audit(1763808518.146:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8414 comm="syz.7.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2305.834655][ T38] audit: type=1326 audit(1763808518.156:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8414 comm="syz.7.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2305.834964][ T38] audit: type=1326 audit(1763808518.156:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8414 comm="syz.7.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2310.171878][T28266] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2310.324476][T28266] usb 8-1: Using ep0 maxpacket: 16 [ 2310.340370][T28266] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 2310.340403][T28266] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.340425][T28266] usb 8-1: Product: syz [ 2310.340441][T28266] usb 8-1: Manufacturer: syz [ 2310.340457][T28266] usb 8-1: SerialNumber: syz [ 2310.387235][T28266] usb 8-1: config 0 descriptor?? [ 2310.412522][T28266] ums-onetouch 8-1:0.0: USB Mass Storage device detected [ 2313.290302][ T38] audit: type=1326 audit(1763808525.606:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.2.14251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2313.290874][ T38] audit: type=1326 audit(1763808525.606:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.2.14251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2313.291187][ T38] audit: type=1326 audit(1763808525.606:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.2.14251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2313.526774][ T8556] binfmt_misc: register: failed to install interpreter file ./file0 [ 2313.528737][ T38] audit: type=1326 audit(1763808525.846:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.2.14251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2313.529064][ T38] audit: type=1326 audit(1763808525.846:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.2.14251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2313.628299][ T38] audit: type=1326 audit(1763808525.946:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.2.14251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2313.628577][ T38] audit: type=1326 audit(1763808525.946:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.2.14251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa536a8f749 code=0x7ffc0000 [ 2315.475425][ T38] audit: type=1326 audit(1763808527.786:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8562 comm="syz.7.14259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2315.476651][ T38] audit: type=1326 audit(1763808527.796:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8562 comm="syz.7.14259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2315.500213][ T38] audit: type=1326 audit(1763808527.816:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8562 comm="syz.7.14259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff024a3f749 code=0x7ffc0000 [ 2316.853715][ T8595] tipc: Started in network mode [ 2316.853750][ T8595] tipc: Node identity ac14140f, cluster identity 4711 [ 2316.854217][ T8595] tipc: New replicast peer: 255.255.255.255 [ 2316.884040][ T8595] tipc: Enabled bearer , priority 10 [ 2318.187483][T24366] tipc: Node number set to 2886997007 [ 2318.701994][ T8605] netlink: 'syz.2.14277': attribute type 7 has an invalid length. [ 2318.702020][ T8605] netlink: 'syz.2.14277': attribute type 8 has an invalid length. [ 2319.868601][ T8615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14281'. [ 2321.795033][ T8657] Invalid ELF header magic: != ELF [ 2323.972000][T32258] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2324.121900][T32258] usb 3-1: Using ep0 maxpacket: 8 [ 2324.124992][T32258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2324.125026][T32258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2324.125069][T32258] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 2324.125095][T32258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.191983][T32258] usb 3-1: config 0 descriptor?? [ 2324.808349][T32258] wacom 0003:056A:0000.0018: unknown main item tag 0x0 [ 2324.808398][T32258] wacom 0003:056A:0000.0018: unknown main item tag 0x0 [ 2324.808430][T32258] wacom 0003:056A:0000.0018: unknown main item tag 0x0 [ 2324.808467][T32258] wacom 0003:056A:0000.0018: unknown main item tag 0x0 [ 2324.808498][T32258] wacom 0003:056A:0000.0018: unknown main item tag 0x0 [ 2324.808527][T32258] wacom 0003:056A:0000.0018: unknown main item tag 0x0 [ 2324.808557][T32258] wacom 0003:056A:0000.0018: unknown main item tag 0x0 [ 2324.808586][T32258] wacom 0003:056A:0000.0018: unknown main item tag 0x0 [ 2326.525473][T32258] usb 3-1: USB disconnect, device number 21 [ 2327.218468][ T7117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2327.254130][ T7117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2327.283877][ T7117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2327.288962][ T7117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2327.290564][ T7117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2327.773627][ T8709] lo speed is unknown, defaulting to 1000 [ 2329.097978][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 2329.097999][ T38] audit: type=1326 audit(1763808541.416:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.3.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2329.098057][ T38] audit: type=1326 audit(1763808541.416:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.3.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2329.162825][ T38] audit: type=1326 audit(1763808541.416:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.3.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2329.162897][ T38] audit: type=1326 audit(1763808541.446:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.3.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c6dbcf783 code=0x7ffc0000 [ 2329.162949][ T38] audit: type=1326 audit(1763808541.446:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.3.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2329.163000][ T38] audit: type=1326 audit(1763808541.446:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.3.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2329.326752][ T38] audit: type=1326 audit(1763808541.646:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.3.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2329.326812][ T38] audit: type=1326 audit(1763808541.646:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.3.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2329.326871][ T38] audit: type=1326 audit(1763808541.646:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.3.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2329.386820][ T5810] Bluetooth: hci4: command tx timeout [ 2329.493876][ T38] audit: type=1326 audit(1763808541.656:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.3.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2330.485724][ T8709] chnl_net:caif_netlink_parms(): no params data found [ 2331.174526][ T8768] netlink: 'syz.3.14352': attribute type 3 has an invalid length. [ 2331.461899][ T5810] Bluetooth: hci4: command tx timeout [ 2332.178134][ T8805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14369'. [ 2333.548968][ T5810] Bluetooth: hci4: command tx timeout [ 2334.093611][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 2334.093850][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 2334.094042][ T8709] bridge_slave_0: entered allmulticast mode [ 2334.101842][ T8709] bridge_slave_0: entered promiscuous mode [ 2334.478658][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 2334.478776][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 2334.478996][ T8709] bridge_slave_1: entered allmulticast mode [ 2334.519259][ T8709] bridge_slave_1: entered promiscuous mode [ 2334.554583][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 2334.554604][ T38] audit: type=1326 audit(1763808546.876:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8849 comm="syz.3.14391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2334.555128][ T38] audit: type=1326 audit(1763808546.876:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8849 comm="syz.3.14391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2335.622234][ T5810] Bluetooth: hci4: command tx timeout [ 2337.386217][ T8709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2337.435076][ T8709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2339.484252][ T8709] team0: Port device team_slave_0 added [ 2339.502138][ T8709] team0: Port device team_slave_1 added [ 2340.437790][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2340.437809][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2340.437840][ T8709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2340.498606][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2340.498626][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2340.498656][ T8709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2341.799835][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14457'. [ 2341.799864][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14457'. [ 2342.309370][ T8709] hsr_slave_0: entered promiscuous mode [ 2342.365681][ T8709] hsr_slave_1: entered promiscuous mode [ 2342.366733][ T8709] debugfs: 'hsr0' already exists in 'hsr' [ 2342.366760][ T8709] Cannot create hsr debugfs directory [ 2344.923224][ T7117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2344.929583][ T7117] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2344.962187][ T7117] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2344.997928][ T7117] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2344.998706][ T7117] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2345.842732][ T9007] lo speed is unknown, defaulting to 1000 [ 2346.118059][ T5810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2346.146540][ T5810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2346.161926][ T5810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2346.163267][ T5810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2346.202406][ T5810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2347.061964][ T7117] Bluetooth: hci6: command tx timeout [ 2347.890370][ T9050] devpts: Bad value for 'max' [ 2348.343027][ T7117] Bluetooth: hci7: command tx timeout [ 2348.745765][ T38] audit: type=1326 audit(1763808561.046:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.3.14490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2348.745829][ T38] audit: type=1326 audit(1763808561.056:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.3.14490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2349.141985][ T7117] Bluetooth: hci6: command tx timeout [ 2349.945767][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2350.421921][ T7117] Bluetooth: hci7: command tx timeout [ 2351.222051][ T7117] Bluetooth: hci6: command tx timeout [ 2352.029391][ T8709] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2352.029432][ T8709] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2352.029462][ T8709] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2352.501859][ T7117] Bluetooth: hci7: command tx timeout [ 2352.715476][ T9015] lo speed is unknown, defaulting to 1000 [ 2353.301882][ T7117] Bluetooth: hci6: command tx timeout [ 2354.526968][ T9182] ip6gre0: entered promiscuous mode [ 2354.582707][ T7117] Bluetooth: hci7: command tx timeout [ 2354.633499][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 2356.819457][ T9015] chnl_net:caif_netlink_parms(): no params data found [ 2359.559620][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 2359.559770][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2359.560060][ T9007] bridge_slave_0: entered allmulticast mode [ 2359.586261][ T9007] bridge_slave_0: entered promiscuous mode [ 2359.677448][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 2359.677572][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2359.677776][ T9007] bridge_slave_1: entered allmulticast mode [ 2359.680109][ T9007] bridge_slave_1: entered promiscuous mode [ 2364.131626][ T9007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2365.434514][ T9007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2365.435047][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 2365.466971][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 2365.467271][ T9015] bridge_slave_0: entered allmulticast mode [ 2365.470247][ T9015] bridge_slave_0: entered promiscuous mode [ 2368.194443][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 2368.194586][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 2368.194810][ T9015] bridge_slave_1: entered allmulticast mode [ 2368.201223][ T9015] bridge_slave_1: entered promiscuous mode [ 2370.193934][ T9007] team0: Port device team_slave_0 added [ 2371.328250][ T9007] team0: Port device team_slave_1 added [ 2371.347960][ T9015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2372.633074][ T5173] udevd[5173]: worker [7865] /devices/platform/dummy_hcd.7/usb8/8-1 is taking a long time [ 2373.711398][ T9015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2375.093499][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2375.093519][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2375.093551][ T9007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2375.704895][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2375.704925][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2375.704956][ T9007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2375.784452][ T9015] team0: Port device team_slave_0 added [ 2375.788777][ T9015] team0: Port device team_slave_1 added [ 2378.813903][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2378.813923][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2378.813953][ T9015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2379.161119][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2379.161140][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2379.161171][ T9015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2379.242973][ T9007] hsr_slave_0: entered promiscuous mode [ 2379.245311][ T9007] hsr_slave_1: entered promiscuous mode [ 2379.246480][ T9007] debugfs: 'hsr0' already exists in 'hsr' [ 2379.246509][ T9007] Cannot create hsr debugfs directory [ 2384.064373][ T9670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14777'. [ 2384.064406][ T9670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14777'. [ 2385.439095][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2385.476516][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2385.478815][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2385.481467][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2385.504309][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2386.215391][ T9015] hsr_slave_0: entered promiscuous mode [ 2386.220422][ T9015] hsr_slave_1: entered promiscuous mode [ 2386.221541][ T9015] debugfs: 'hsr0' already exists in 'hsr' [ 2386.221569][ T9015] Cannot create hsr debugfs directory [ 2387.703759][ T7117] Bluetooth: hci5: command tx timeout [ 2389.792669][ T7117] Bluetooth: hci5: command tx timeout [ 2389.935269][ T9714] lo speed is unknown, defaulting to 1000 [ 2391.862248][ T7117] Bluetooth: hci5: command tx timeout [ 2393.588368][ T9714] chnl_net:caif_netlink_parms(): no params data found [ 2393.942504][ T7117] Bluetooth: hci5: command tx timeout [ 2399.282719][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 2399.282983][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state [ 2399.283290][ T9714] bridge_slave_0: entered allmulticast mode [ 2399.316997][ T9714] bridge_slave_0: entered promiscuous mode [ 2399.321205][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 2399.336031][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state [ 2399.336359][ T9714] bridge_slave_1: entered allmulticast mode [ 2399.361442][ T9714] bridge_slave_1: entered promiscuous mode [ 2401.022350][T10003] macsec1: entered promiscuous mode [ 2401.022381][T10003] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 2401.022647][T10003] macsec1: entered allmulticast mode [ 2401.022667][T10003] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 2401.095095][ T9714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2401.131222][ T9714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2403.353843][ T5810] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2403.382436][ T5810] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2403.384726][ T5810] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2403.386209][ T5810] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2403.387040][ T5810] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2403.659537][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14959'. [ 2405.462033][ T7117] Bluetooth: hci8: command tx timeout [ 2405.529282][ T9714] team0: Port device team_slave_0 added [ 2405.573998][ T9714] team0: Port device team_slave_1 added [ 2406.131088][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2406.131108][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2406.131139][ T9714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2406.188272][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2406.188293][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2406.188324][ T9714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2406.258347][T10057] lo speed is unknown, defaulting to 1000 [ 2406.470353][ T5810] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2406.510042][ T5810] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2406.522405][ T5810] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2406.541151][ T5810] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2406.560332][ T5810] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2407.542069][ T5810] Bluetooth: hci8: command tx timeout [ 2408.344714][T10125] bridge_slave_1: entered allmulticast mode [ 2408.754998][ T5810] Bluetooth: hci9: command tx timeout [ 2409.622022][ T5810] Bluetooth: hci8: command tx timeout [ 2410.522119][ T9714] hsr_slave_0: entered promiscuous mode [ 2410.524020][ T9714] hsr_slave_1: entered promiscuous mode [ 2410.525233][ T9714] debugfs: 'hsr0' already exists in 'hsr' [ 2410.525262][ T9714] Cannot create hsr debugfs directory [ 2410.821863][ T5810] Bluetooth: hci9: command tx timeout [ 2410.988685][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.084426][T10083] lo speed is unknown, defaulting to 1000 [ 2411.701953][ T5810] Bluetooth: hci8: command tx timeout [ 2412.902003][ T5810] Bluetooth: hci9: command tx timeout [ 2413.156143][T10195] bond0: entered promiscuous mode [ 2413.156168][T10195] bond_slave_0: entered promiscuous mode [ 2413.156417][T10195] bond_slave_1: entered promiscuous mode [ 2413.156640][T10195] bridge_slave_1: entered promiscuous mode [ 2413.159285][T10195] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 2413.201484][T10195] macvlan1: entered promiscuous mode [ 2413.215047][T10195] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 2413.215076][T10195] hsr2: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network [ 2413.255930][T10195] hsr2: entered promiscuous mode [ 2413.255980][T10195] hsr2: entered allmulticast mode [ 2413.255995][T10195] bond0: entered allmulticast mode [ 2413.256010][T10195] bond_slave_0: entered allmulticast mode [ 2413.256031][T10195] bond_slave_1: entered allmulticast mode [ 2413.256056][T10195] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 2413.256086][T10195] macvlan1: entered allmulticast mode [ 2413.802076][T10057] chnl_net:caif_netlink_parms(): no params data found [ 2414.985386][ T5810] Bluetooth: hci9: command tx timeout [ 2417.349279][T10243] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2417.559710][T10083] chnl_net:caif_netlink_parms(): no params data found [ 2418.258189][T10323] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15077'. [ 2419.020045][T28266] usb 8-1: USB disconnect, device number 7 [ 2420.664676][T10057] bridge0: port 1(bridge_slave_0) entered blocking state [ 2420.664837][T10057] bridge0: port 1(bridge_slave_0) entered disabled state [ 2420.665174][T10057] bridge_slave_0: entered allmulticast mode [ 2420.668284][T10057] bridge_slave_0: entered promiscuous mode [ 2420.853837][T10057] bridge0: port 2(bridge_slave_1) entered blocking state [ 2420.853989][T10057] bridge0: port 2(bridge_slave_1) entered disabled state [ 2420.854315][T10057] bridge_slave_1: entered allmulticast mode [ 2420.892009][T10057] bridge_slave_1: entered promiscuous mode [ 2431.279337][T10057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2433.077725][T10057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2433.092894][T10083] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.093044][T10083] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.093407][T10083] bridge_slave_0: entered allmulticast mode [ 2433.145738][T10083] bridge_slave_0: entered promiscuous mode [ 2433.336951][T10083] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.337117][T10083] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.337406][T10083] bridge_slave_1: entered allmulticast mode [ 2433.340614][T10083] bridge_slave_1: entered promiscuous mode [ 2434.265530][T10688] overlayfs: failed to clone lowerpath [ 2435.812812][T10057] team0: Port device team_slave_0 added [ 2436.210260][T10057] team0: Port device team_slave_1 added [ 2436.241971][T10083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2437.264352][T10083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2440.592281][T10057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2440.592302][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2440.592335][T10057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2441.274959][T10057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2441.274980][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2441.275012][T10057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2441.289711][T10083] team0: Port device team_slave_0 added [ 2441.342270][T10083] team0: Port device team_slave_1 added [ 2443.585201][T10083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2443.585221][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2443.585250][T10083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2444.396181][T10083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2444.396206][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2444.396238][T10083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2445.330059][ T7117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2445.358328][ T7117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2445.360572][ T7117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2445.365168][ T7117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2445.366159][ T7117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2445.536923][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15363'. [ 2445.738614][T10057] hsr_slave_0: entered promiscuous mode [ 2445.740441][T10057] hsr_slave_1: entered promiscuous mode [ 2445.741549][T10057] debugfs: 'hsr0' already exists in 'hsr' [ 2445.741587][T10057] Cannot create hsr debugfs directory [ 2447.462435][ T5810] Bluetooth: hci0: command tx timeout [ 2449.319254][T10083] hsr_slave_0: entered promiscuous mode [ 2449.345829][T10083] hsr_slave_1: entered promiscuous mode [ 2449.347211][T10083] debugfs: 'hsr0' already exists in 'hsr' [ 2449.347240][T10083] Cannot create hsr debugfs directory [ 2449.542067][ T5810] Bluetooth: hci0: command tx timeout [ 2451.245430][T10917] lo speed is unknown, defaulting to 1000 [ 2451.622049][ T5810] Bluetooth: hci0: command tx timeout [ 2453.701970][ T5810] Bluetooth: hci0: command tx timeout [ 2454.022277][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 2458.166942][ T38] audit: type=1326 audit(1763808670.486:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11133 comm="syz.3.15466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2458.211986][ T38] audit: type=1326 audit(1763808670.486:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11133 comm="syz.3.15466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2458.212460][ T38] audit: type=1326 audit(1763808670.536:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11133 comm="syz.3.15466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2458.218097][ T38] audit: type=1326 audit(1763808670.536:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11133 comm="syz.3.15466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2458.291308][ T38] audit: type=1326 audit(1763808670.536:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11133 comm="syz.3.15466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2458.332465][ T38] audit: type=1326 audit(1763808670.656:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11133 comm="syz.3.15466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2458.366087][ T38] audit: type=1326 audit(1763808670.686:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11133 comm="syz.3.15466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7ffc0000 [ 2460.057114][T10917] chnl_net:caif_netlink_parms(): no params data found [ 2460.123797][T11172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2463.265302][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2463.293450][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2463.297133][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2463.307738][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2463.308649][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2465.250822][T10917] bridge0: port 1(bridge_slave_0) entered blocking state [ 2465.250991][T10917] bridge0: port 1(bridge_slave_0) entered disabled state [ 2465.251314][T10917] bridge_slave_0: entered allmulticast mode [ 2465.255114][T10917] bridge_slave_0: entered promiscuous mode [ 2465.279693][T10917] bridge0: port 2(bridge_slave_1) entered blocking state [ 2465.279813][T10917] bridge0: port 2(bridge_slave_1) entered disabled state [ 2465.280101][T10917] bridge_slave_1: entered allmulticast mode [ 2465.294893][T10917] bridge_slave_1: entered promiscuous mode [ 2465.387639][ T7117] Bluetooth: hci2: command tx timeout [ 2466.695468][ T7117] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2466.738240][ T7117] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2466.766934][ T7117] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2466.779564][ T7117] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2466.790235][ T7117] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2467.462062][T11298] Bluetooth: hci2: command tx timeout [ 2468.069222][T10917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2468.074784][T11214] lo speed is unknown, defaulting to 1000 [ 2468.213546][T10917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2468.902095][T11298] Bluetooth: hci10: command tx timeout [ 2469.398990][T11298] Bluetooth: hci6: command 0x0406 tx timeout [ 2469.399038][T11298] Bluetooth: hci7: command 0x0406 tx timeout [ 2469.541974][ T1189] Bluetooth: hci2: command tx timeout [ 2470.981916][ T5810] Bluetooth: hci10: command tx timeout [ 2471.267408][T11284] lo speed is unknown, defaulting to 1000 [ 2471.406486][T10917] team0: Port device team_slave_0 added [ 2471.498378][T10917] team0: Port device team_slave_1 added [ 2471.625716][ T7117] Bluetooth: hci2: command tx timeout [ 2472.429707][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2473.061991][ T7117] Bluetooth: hci10: command tx timeout [ 2474.473967][T10917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2474.473987][T10917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2474.474017][T10917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2474.628949][T10917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2474.628969][T10917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2474.629008][T10917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2475.143316][ T7117] Bluetooth: hci10: command tx timeout [ 2475.889883][T10917] hsr_slave_0: entered promiscuous mode [ 2475.891569][T10917] hsr_slave_1: entered promiscuous mode [ 2475.933110][T10917] debugfs: 'hsr0' already exists in 'hsr' [ 2475.933152][T10917] Cannot create hsr debugfs directory [ 2479.181025][T11214] chnl_net:caif_netlink_parms(): no params data found [ 2480.636864][T11284] chnl_net:caif_netlink_parms(): no params data found [ 2480.708063][T11530] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 2483.527105][T11561] netlink: 92 bytes leftover after parsing attributes in process `syz.3.15661'. [ 2484.027380][T11214] bridge0: port 1(bridge_slave_0) entered blocking state [ 2484.027530][T11214] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.027877][T11214] bridge_slave_0: entered allmulticast mode [ 2484.057933][T11214] bridge_slave_0: entered promiscuous mode [ 2484.116498][T11214] bridge0: port 2(bridge_slave_1) entered blocking state [ 2484.116745][T11214] bridge0: port 2(bridge_slave_1) entered disabled state [ 2484.117087][T11214] bridge_slave_1: entered allmulticast mode [ 2484.120238][T11214] bridge_slave_1: entered promiscuous mode [ 2489.802328][T11214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2490.537072][T11214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2490.538759][T11284] bridge0: port 1(bridge_slave_0) entered blocking state [ 2490.538964][T11284] bridge0: port 1(bridge_slave_0) entered disabled state [ 2490.539226][T11284] bridge_slave_0: entered allmulticast mode [ 2490.589930][T11284] bridge_slave_0: entered promiscuous mode [ 2492.793165][T11284] bridge0: port 2(bridge_slave_1) entered blocking state [ 2492.793432][T11284] bridge0: port 2(bridge_slave_1) entered disabled state [ 2492.793695][T11284] bridge_slave_1: entered allmulticast mode [ 2492.829322][T11284] bridge_slave_1: entered promiscuous mode [ 2494.625846][ T38] audit: type=1326 audit(1763808706.946:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.3.15769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6dbcf749 code=0x7fc00000 [ 2497.004917][T11214] team0: Port device team_slave_0 added [ 2498.199505][T11214] team0: Port device team_slave_1 added [ 2498.222757][T11284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2498.267560][T11284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2501.222199][ T39] INFO: task syz-executor:8709 blocked for more than 143 seconds. [ 2501.222229][ T39] Not tainted syzkaller #0 [ 2501.222241][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2501.222253][ T39] task:syz-executor state:D stack:17736 pid:8709 tgid:8709 ppid:1 task_flags:0x480140 flags:0x00080003 [ 2501.222325][ T39] Call Trace: [ 2501.222338][ T39] [ 2501.222356][ T39] __schedule+0x16f3/0x4c20 [ 2501.222718][ T39] ? __pfx___schedule+0x10/0x10 [ 2501.222772][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 2501.222838][ T39] rt_mutex_schedule+0x77/0xf0 [ 2501.222904][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 2501.222932][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 2501.222980][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 2501.223011][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 2501.223041][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2501.223065][ T39] ? __lock_acquire+0xab9/0xd20 [ 2501.223109][ T39] ? rcu_barrier+0x4c/0x570 [ 2501.223170][ T39] ? rcu_barrier+0x4c/0x570 [ 2501.223193][ T39] mutex_lock_nested+0x16a/0x1d0 [ 2501.223217][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2501.223250][ T39] rcu_barrier+0x4c/0x570 [ 2501.223287][ T39] netdev_run_todo+0x327/0xea0 [ 2501.223415][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 2501.223443][ T39] ? kasan_quarantine_put+0xdd/0x220 [ 2501.223503][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 2501.223565][ T39] ? nsim_destroy+0x38d/0x680 [ 2501.223655][ T39] ? kfree+0x197/0x950 [ 2501.223679][ T39] ? nsim_destroy+0x38d/0x680 [ 2501.223707][ T39] nsim_destroy+0x3ae/0x680 [ 2501.223739][ T39] __nsim_dev_port_del+0x14d/0x1b0 [ 2501.223772][ T39] nsim_dev_reload_destroy+0x288/0x490 [ 2501.223800][ T39] ? nsim_drv_remove+0x50/0x160 [ 2501.223831][ T39] nsim_drv_remove+0x58/0x160 [ 2501.223857][ T39] ? __pfx_nsim_bus_remove+0x10/0x10 [ 2501.223907][ T39] device_release_driver_internal+0x46f/0x800 [ 2501.224033][ T39] bus_remove_device+0x355/0x420 [ 2501.224068][ T39] device_del+0x515/0x8e0 [ 2501.224104][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2501.224143][ T39] ? __pfx_device_del+0x10/0x10 [ 2501.224187][ T39] device_unregister+0x20/0xc0 [ 2501.224220][ T39] del_device_store+0x2aa/0x360 [ 2501.224247][ T39] ? __pfx_del_device_store+0x10/0x10 [ 2501.224271][ T39] ? sysfs_file_kobj+0x1e4/0x230 [ 2501.224329][ T39] ? sysfs_kf_write+0x166/0x260 [ 2501.224355][ T39] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2501.224375][ T39] kernfs_fop_write_iter+0x3b0/0x540 [ 2501.224417][ T39] vfs_write+0x5d5/0xb40 [ 2501.224459][ T39] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2501.224494][ T39] ? __pfx_vfs_write+0x10/0x10 [ 2501.224535][ T39] ? do_sys_openat2+0x154/0x1c0 [ 2501.224570][ T39] ksys_write+0x14b/0x260 [ 2501.224610][ T39] ? __pfx_ksys_write+0x10/0x10 [ 2501.224644][ T39] ? do_syscall_64+0xbe/0xfa0 [ 2501.224681][ T39] do_syscall_64+0xfa/0xfa0 [ 2501.224713][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 2501.224747][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2501.224821][ T39] ? clear_bhb_loop+0x60/0xb0 [ 2501.224849][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2501.224872][ T39] RIP: 0033:0x7f422d81e1ff [ 2501.224893][ T39] RSP: 002b:00007ffe608053e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2501.224919][ T39] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f422d81e1ff [ 2501.224936][ T39] RDX: 0000000000000001 RSI: 00007ffe60805430 RDI: 0000000000000005 [ 2501.224951][ T39] RBP: 00007f422d8a52cb R08: 0000000000000000 R09: 00007ffe60805237 [ 2501.224967][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2501.224982][ T39] R13: 00007ffe60805430 R14: 00007f422e5a4620 R15: 0000000000000003 [ 2501.225021][ T39] [ 2501.225072][ T39] [ 2501.225072][ T39] Showing all locks held in the system: [ 2501.225088][ T39] 3 locks held by rcuc/0/20: [ 2501.225105][ T39] 1 lock held by khungtaskd/39: [ 2501.225117][ T39] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2501.225222][ T39] 2 locks held by getty/5562: [ 2501.225235][ T39] #0: ffff88823bf720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2501.225375][ T39] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 2501.225463][ T39] 3 locks held by kworker/u8:53/6352: [ 2501.225476][ T39] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2501.225552][ T39] #1: ffffc900046efba0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2501.225617][ T39] #2: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2501.225673][ T39] 10 locks held by syz-executor/9664: [ 2501.225691][ T39] 3 locks held by kworker/0:5/27913: [ 2501.225710][ T39] 1 lock held by syz.1.14219/8473: [ 2501.225724][ T39] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2501.225777][ T39] 7 locks held by syz-executor/8709: [ 2501.225791][ T39] #0: ffff888033c5c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2501.225852][ T39] #1: ffff888023592878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2501.225913][ T39] #2: ffff888144be52d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2501.225979][ T39] #3: ffffffff8e0f44b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2501.226031][ T39] #4: ffff8880390c60d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 2501.226095][ T39] #5: ffff8880390c5300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 2501.226157][ T39] #6: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2501.226210][ T39] 1 lock held by syz.2.14328/8711: [ 2501.226223][ T39] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2501.226276][ T39] 1 lock held by syz.7.14333/8722: [ 2501.226289][ T39] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2501.226344][ T39] 4 locks held by syz-executor/9007: [ 2501.226356][ T39] #0: ffff888033c5c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2501.226416][ T39] #1: ffff88802d491c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2501.226477][ T39] #2: ffff888144be52d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2501.226564][ T39] #3: ffffffff8e0f44b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2501.226624][ T39] 4 locks held by syz-executor/9015: [ 2501.226638][ T39] #0: ffff888033c5c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2501.226698][ T39] #1: ffff88805ff3d078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2501.226759][ T39] #2: ffff888144be52d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2501.226824][ T39] #3: ffffffff8e0f44b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2501.226877][ T39] 4 locks held by syz-executor/9714: [ 2501.226891][ T39] #0: ffff888033c5c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2501.226952][ T39] #1: ffff8880317ae078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2501.227012][ T39] #2: ffff888144be52d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2501.227077][ T39] #3: ffffffff8e0f44b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2501.227130][ T39] 4 locks held by syz-executor/10057: [ 2501.227143][ T39] #0: ffff888033c5c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2501.227203][ T39] #1: ffff888028482878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2501.227262][ T39] #2: ffff888144be52d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2501.227329][ T39] #3: ffffffff8e0f44b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2501.227381][ T39] 4 locks held by syz-executor/10083: [ 2501.227394][ T39] #0: ffff888033c5c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2501.227454][ T39] #1: ffff88814dc74478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2501.227514][ T39] #2: ffff888144be52d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2501.227587][ T39] #3: ffffffff8e0f44b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2501.227642][ T39] 3 locks held by kworker/u8:13/10868: [ 2501.227656][ T39] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2501.227719][ T39] #1: ffffc9000d727ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2501.227776][ T39] #2: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2501.227868][ T39] 4 locks held by syz-executor/10917: [ 2501.227883][ T39] #0: ffff888033c5c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2501.227943][ T39] #1: ffff888025da2078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2501.228005][ T39] #2: ffff888144be52d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2501.228070][ T39] #3: ffffffff8e0f44b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2501.228123][ T39] 2 locks held by syz-executor/11214: [ 2501.228137][ T39] #0: ffffffff8dfed780 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2501.228197][ T39] #1: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2501.228248][ T39] 2 locks held by syz-executor/11284: [ 2501.228262][ T39] #0: ffffffff8dfed780 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2501.228320][ T39] #1: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2501.228374][ T39] 2 locks held by syz.3.15838/11927: [ 2501.228387][ T39] #0: ffffffff8e8ca120 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2501.228494][ T39] #1: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 2501.228618][ T39] [ 2501.228625][ T39] ============================================= [ 2501.228625][ T39] [ 2501.228635][ T39] NMI backtrace for cpu 1 [ 2501.228659][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2501.228682][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2501.228695][ T39] Call Trace: [ 2501.228704][ T39] [ 2501.228715][ T39] dump_stack_lvl+0x189/0x250 [ 2501.228753][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2501.228788][ T39] ? __pfx__printk+0x10/0x10 [ 2501.228830][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 2501.228912][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2501.228942][ T39] ? __pfx__printk+0x10/0x10 [ 2501.228975][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2501.229021][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2501.229051][ T39] watchdog+0xf60/0xfa0 [ 2501.229101][ T39] ? watchdog+0x1e2/0xfa0 [ 2501.229144][ T39] kthread+0x711/0x8a0 [ 2501.229182][ T39] ? __pfx_watchdog+0x10/0x10 [ 2501.229213][ T39] ? __pfx_kthread+0x10/0x10 [ 2501.229243][ T39] ? rt_spin_unlock+0x150/0x200 [ 2501.229274][ T39] ? rt_spin_unlock+0x161/0x200 [ 2501.229299][ T39] ? __pfx_kthread+0x10/0x10 [ 2501.229333][ T39] ret_from_fork+0x4bc/0x870 [ 2501.229372][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 2501.229408][ T39] ? __switch_to_asm+0x39/0x70 [ 2501.229429][ T39] ? __switch_to_asm+0x33/0x70 [ 2501.229450][ T39] ? __pfx_kthread+0x10/0x10 [ 2501.229484][ T39] ret_from_fork_asm+0x1a/0x30 [ 2501.229528][ T39] [ 2501.229562][ T39] Sending NMI from CPU 1 to CPUs 0: [ 2501.229595][ C0] NMI backtrace for cpu 0 [ 2501.229612][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2501.229633][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2501.229645][ C0] RIP: 0010:__asan_memset+0x2f/0x50 [ 2501.229669][ C0] Code: 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 7e e4 ff ff 84 c0 74 11 4c 89 f7 89 ee 48 89 da 5b <41> 5e 5d e9 29 57 a0 08 31 c0 5b 41 5e 5d c3 cc cc cc cc cc 66 66 [ 2501.229686][ C0] RSP: 0018:ffffc90000196650 EFLAGS: 00000202 [ 2501.229703][ C0] RAX: ffff88801b685a01 RBX: ffffc900001966c8 RCX: ffffffff817393f6 [ 2501.229718][ C0] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc900001966c8 [ 2501.229732][ C0] RBP: 0000000000000000 R08: ffffc90000196727 R09: 1ffff92000032ce4 [ 2501.229745][ C0] R10: dffffc0000000000 R11: fffff52000032ce5 R12: 0000000000000000 [ 2501.229758][ C0] R13: ffff88801b685a00 R14: ffffc900001966c8 R15: 0000000000000000 [ 2501.229773][ C0] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 2501.229788][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2501.229802][ C0] CR2: 00007f9884547dac CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 2501.229819][ C0] Call Trace: [ 2501.229826][ C0] [ 2501.229840][ C0] __unwind_start+0x36/0x760 [ 2501.229867][ C0] ? __lock_acquire+0xab9/0xd20 [ 2501.229893][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2501.229915][ C0] arch_stack_walk+0xe4/0x150 [ 2501.229947][ C0] stack_trace_save+0x9c/0xe0 [ 2501.229967][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2501.229986][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2501.230017][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2501.230044][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2501.230073][ C0] kasan_save_track+0x3e/0x80 [ 2501.230125][ C0] ? __slab_alloc+0xc6/0x1f0 [ 2501.230143][ C0] __kasan_slab_alloc+0x6c/0x80 [ 2501.230168][ C0] kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 2501.230192][ C0] ? kmalloc_reserve+0xbd/0x290 [ 2501.230283][ C0] ? __alloc_skb+0x112/0x2d0 [ 2501.230301][ C0] ? rcu_is_watching+0x15/0xb0 [ 2501.230320][ C0] kmalloc_reserve+0xbd/0x290 [ 2501.230342][ C0] __alloc_skb+0x142/0x2d0 [ 2501.230364][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 2501.230441][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 2501.230463][ C0] ? nft_jhash_init+0x5d0/0x660 [ 2501.230520][ C0] ? synproxy_pernet+0x45/0x270 [ 2501.230570][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 2501.230603][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 2501.230632][ C0] ? nf_ip_checksum+0x13c/0x510 [ 2501.230697][ C0] nft_synproxy_do_eval+0x345/0x570 [ 2501.230725][ C0] ? skb_orphan+0xaf/0xd0 [ 2501.230774][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2501.230812][ C0] nft_do_chain+0x40c/0x1920 [ 2501.230844][ C0] ? __pfx_ip_list_rcv+0x10/0x10 [ 2501.230868][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 2501.230898][ C0] ? __lock_acquire+0xab9/0xd20 [ 2501.230939][ C0] nft_do_chain_inet+0x25d/0x340 [ 2501.231000][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2501.231026][ C0] ? __lock_acquire+0xab9/0xd20 [ 2501.231057][ C0] ? NF_HOOK+0x9a/0x3a0 [ 2501.231075][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2501.231102][ C0] nf_hook_slow+0xc5/0x220 [ 2501.231126][ C0] NF_HOOK+0x206/0x3a0 [ 2501.231145][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2501.231164][ C0] ? NF_HOOK+0x9a/0x3a0 [ 2501.231182][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2501.231198][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 2501.231219][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2501.231239][ C0] ? skb_dst+0x4f/0xd0 [ 2501.231258][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 2501.231278][ C0] NF_HOOK+0x30c/0x3a0 [ 2501.231297][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2501.231315][ C0] ? NF_HOOK+0x9a/0x3a0 [ 2501.231332][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2501.231351][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2501.231376][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 2501.231393][ C0] __netif_receive_skb+0x143/0x380 [ 2501.231425][ C0] ? process_backlog+0x27b/0x900 [ 2501.231442][ C0] process_backlog+0x31e/0x900 [ 2501.231467][ C0] __napi_poll+0xb6/0x540 [ 2501.231497][ C0] net_rx_action+0x5f7/0xda0 [ 2501.231523][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2501.231544][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 2501.231575][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2501.231597][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 2501.231627][ C0] handle_softirqs+0x22f/0x710 [ 2501.231658][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2501.231688][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 2501.231713][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2501.231742][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2501.231770][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2501.231797][ C0] rcu_cpu_kthread+0xc3d/0x1b50 [ 2501.231835][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2501.231869][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 2501.231897][ C0] ? __lock_acquire+0xab9/0xd20 [ 2501.231921][ C0] ? __pfx___schedule+0x10/0x10 [ 2501.231956][ C0] ? schedule+0x91/0x360 [ 2501.231985][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2501.232007][ C0] smpboot_thread_fn+0x542/0xa60 [ 2501.232031][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2501.232060][ C0] kthread+0x711/0x8a0 [ 2501.232089][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2501.232112][ C0] ? __pfx_kthread+0x10/0x10 [ 2501.232138][ C0] ? rt_spin_unlock+0x150/0x200 [ 2501.232163][ C0] ? rt_spin_unlock+0x161/0x200 [ 2501.232183][ C0] ? __pfx_kthread+0x10/0x10 [ 2501.232210][ C0] ret_from_fork+0x4bc/0x870 [ 2501.232233][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2501.232260][ C0] ? __switch_to_asm+0x39/0x70 [ 2501.232278][ C0] ? __switch_to_asm+0x33/0x70 [ 2501.232295][ C0] ? __pfx_kthread+0x10/0x10 [ 2501.232323][ C0] ret_from_fork_asm+0x1a/0x30 [ 2501.232352][ C0] [ 2503.633718][T11214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2503.633737][T11214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2503.633770][T11214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2503.692078][T11214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2503.692098][T11214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2503.692131][T11214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2503.701005][T11284] team0: Port device team_slave_0 added [ 2503.803013][T11284] team0: Port device team_slave_1 added [ 2504.682422][T11284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2504.682442][T11284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2504.682474][T11284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2505.126817][T11284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2505.126838][T11284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2505.126869][T11284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2505.223346][T11214] hsr_slave_0: entered promiscuous mode [ 2505.225257][T11214] hsr_slave_1: entered promiscuous mode [ 2505.226552][T11214] debugfs: 'hsr0' already exists in 'hsr' [ 2505.226580][T11214] Cannot create hsr debugfs directory [ 2506.116749][T11284] hsr_slave_0: entered promiscuous mode [ 2506.118748][T11284] hsr_slave_1: entered promiscuous mode [ 2506.120073][T11284] debugfs: 'hsr0' already exists in 'hsr' [ 2506.120101][T11284] Cannot create hsr debugfs directory [ 2510.354156][ T7117] Bluetooth: hci5: command 0x0406 tx timeout