last executing test programs: 14m0.257532899s ago: executing program 4 (id=486): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) socket(0x2b, 0x1, 0x1) socket$inet6(0xa, 0x80002, 0x88) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 14m0.093511012s ago: executing program 4 (id=488): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfefffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0x4, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x9, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) (fail_nth: 5) 13m59.129814459s ago: executing program 4 (id=490): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r1, 0x0, 0x2f) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 13m59.004670596s ago: executing program 4 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a55414, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 13m57.997562369s ago: executing program 4 (id=493): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000002000)=0x1000004) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x103, 0x2080160c, 0x1fd, 0xf, "1c6b6f296261320000000200"}) 13m57.677924075s ago: executing program 4 (id=497): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x0, 0x4000007}) 13m57.39163151s ago: executing program 32 (id=497): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x0, 0x4000007}) 14.821379964s ago: executing program 0 (id=3904): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0) 14.75968321s ago: executing program 0 (id=3905): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4b, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 13.584658539s ago: executing program 3 (id=3910): accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x1000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) process_mrelease(0xffffffffffffffff, 0x2) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"/1071], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x949, 0x0, 0x1, 0x0, &(0x7f0000000080)="0f", 0x0}, 0x50) getdents64(0xffffffffffffffff, 0x0, 0x0) 13.002690031s ago: executing program 0 (id=3912): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10}, 0x94) 12.288874822s ago: executing program 3 (id=3916): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x4, 0xfffffffc) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x280001, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r4, 0xc0186e87, &(0x7f0000000240)={&(0x7f00000001c0)=[{0x100000001, 0x5, 0x7f, 0xf18, 0x77}], 0x1, 0x28, 0x55, 0xd82}) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @multicast1, @empty}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000044) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xc47d, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000003c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) close_range(0xffffffffffffffff, r3, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r6, 0x47f6, 0xfa, 0x4, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x129a00) 12.159611374s ago: executing program 5 (id=3918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r7, 0x40044591, 0x0) ioctl$VT_SETMODE(r6, 0x5602, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0xa, 0x5, {0x5, 0x10, "6f7595"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000500)={0x0, 0x3, 0xc, @string={0xc, 0x3, "ac361119e41d8c103ecc"}}, 0x0, 0x0}, 0x0) 11.964375657s ago: executing program 0 (id=3920): sysfs$3(0x3) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253ba5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde000000000000000000d4fd710a526223440f9df8d22bf9224e4b71b0757dbc8311a2ffbf680a2c09a893ffd79f0a645df3e2dce61e24c28750f50ccb9244fdb344773f79483ec0b6936fd853fda9ee154914a00831cf4bf6f9e6fe6cdfab5ab31de15450e6e703316d9597100d83d0444d511ec95edfc460461eef194209655b2a966078be83da84fe699fa66295c9995c869c18501c3d3bf6b17e5b2211c4903580dcdc7ea2bf9e3b202d7b01ea0b800868eb22cbb86e927b364c9c5642ea6188f53c36dffecbdeda61ceb3b1c1f4a7bc77e39a9ff7e547cef240c3cf78f61d3e000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x8d960f, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(&(0x7f0000000180)='.\\\x00', 0x2, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x38000000, 0x53f5}]}, 0xc, 0x2) r3 = socket$key(0xf, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000003240), 0x0, 0x8000) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, 0x0) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r3], 0x44}, 0x1, 0x0, 0x0, 0x40020891}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000000c0)=[{0x45, '\x00', @buffer={"08aa28fb236c1934e108f512b80034b920683e07edda7a112f685d4f3a155c71", 0x20}, 0x7}, {0x1f, '\x00', @st={0x4, [{0x2, @uvalue=0x7f}, {0x1, @svalue=0x3}, {0x1, @uvalue=0x9}, {0x1, @uvalue=0x2}]}, 0x6}, {0xa, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b55913355f933502c0a9975e7de66b90754f408ec", 0x20}, 0x6}, {0x3f, '\x00', @data=0x6, 0x8}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) 8.657420872s ago: executing program 5 (id=3923): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8.186347383s ago: executing program 1 (id=3925): socket$inet6(0xa, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x60040000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x18) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x0, 'lblcr\x00', 0xd, 0x38, 0x5d}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000040)={'netdevsim0\x00'}) 8.119389191s ago: executing program 2 (id=3926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 8.061854975s ago: executing program 3 (id=3927): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x340a) 8.040960982s ago: executing program 5 (id=3928): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d"], 0x10}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x28, r1, 0x8a3f81a2e8667f22, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040084}, 0x840) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.630059227s ago: executing program 1 (id=3929): r0 = gettid() r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.629021544s ago: executing program 2 (id=3930): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000000000002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061171400000000001d430000000000007a0a00fe0000001f6114100000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff6194732827a58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f37382000000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a2271d96c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b0200780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000005bae7859839f856e7a397913eec7977f6231c5f11849b3deabc60c5ccf240d16924eb760a969813be02a229c674045b88915518a17b683268f10358e1c0b20cfc2bd105e5e1db7fed951b8faf126267bb38b8d356f63d3433d3dee643503a8ba4968adf6673f720c474ecf324d989235f1b52aacfe52e4519af87b7e1594728d6d6fff1248e72d5b1b1b692b2b732f0f2ac0714079fd7bf97bf2b5687d1db91daa5210d09ebe66d00ff4f35143be01585e629d408f2d00a0a290db76adc5f57e160b2c188bb1ecc4e7d2948788e4f9c1bcaf91dac53a2f525f7385d5d82728b5217908748f4c22b6d797b5bbeb61411f88ee1554a783"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10}, 0x94) 6.587104932s ago: executing program 5 (id=3931): socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12, 0x80, 0xfffffff9, 0x5}}) sendto$inet6(r0, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x2001001000000000, 0xac141400}}, 0x1c) r4 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3000, 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fgetxattr(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='sec'], &(0x7f0000000300)=""/47, 0x2f) 5.681825678s ago: executing program 2 (id=3932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x1) 5.623490253s ago: executing program 1 (id=3933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r7, 0x40044591, 0x0) ioctl$VT_SETMODE(r6, 0x5602, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0xa, 0x5, {0x5, 0x10, "6f7595"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000500)={0x0, 0x3, 0xc, @string={0xc, 0x3, "ac361119e41d8c103ecc"}}, 0x0, 0x0}, 0x0) 5.535957874s ago: executing program 0 (id=3934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5.489919932s ago: executing program 5 (id=3935): socket$inet6(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000022c0)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYBLOB="440000000214020028bd7000fcdbdf250900020073797a300000000008000100020000000800010000000000080001000000000005005400810000000800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1) socket$nl_generic(0x10, 0x3, 0x10) 5.489667769s ago: executing program 2 (id=3936): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0xfe, 0x20, 0x2, 0x7, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x14) write$nci(r0, &(0x7f0000000e80)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x30, 0x1}, 0x5c) 5.464648524s ago: executing program 3 (id=3937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000280)=""/85, 0x55) 4.383166494s ago: executing program 3 (id=3938): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x4c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x32f6d000) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x6}, 0x10) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.369437613s ago: executing program 2 (id=3939): syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, r2, 0xf2ff}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x62}, {0xa, 0x4e21, 0xc, @empty, 0x8}, r2, 0x7fff}}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmmsg(r7, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x64f}], 0x1, 0x42, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) syz_open_dev$vbi(0x0, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001800010000000000fedbdf251d01000008000a00", @ANYRES32=r5, @ANYBLOB="086bbfb63c37000d00", @ANYRES32=r8, @ANYBLOB="15000400000000a008010000d1d7fa0450307043020000000c000b0001000000000000a0"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="031d3b52320f0896a83c521edfea7e2e5583a34aa91ba83eeb8dd518b5830602f89ca4380ff75fda5c1f3323", 0x2c, 0xfffffffffffffff9) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) pread64(r10, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 2.323451777s ago: executing program 1 (id=3940): socket$inet6(0xa, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) unshare(0x60040000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x18) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x0, 'lblcr\x00', 0xd, 0x38, 0x5d}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000040)={'netdevsim0\x00'}) 1.022095809s ago: executing program 3 (id=3941): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000019300)={0x7, 0x6, 0x4, 0x471ea901, 0x6, 0x0, [{0x80, 0x81, 0xffffffff, '\x00', 0x400}, {0xe4, 0x262bf3ef, 0x1, '\x00', 0x1000}, {0x8000, 0x8000000000000001, 0x2}, {0x6, 0x0, 0x4, '\x00', 0x3000}, {0x6, 0x44, 0x5}, {0x353, 0x8000000000000001, 0xb, '\x00', 0x109}]}) r0 = fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x100500, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x401}, &(0x7f00000001c0)=0x8) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x356, 0x258, 0x300, 0x3f, 0x32, 0x3, 0x10, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0xf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0xcd, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x14, 0xfffffffffffffffe, &(0x7f0000000000)) 991.809166ms ago: executing program 5 (id=3942): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00c298"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 932.12966ms ago: executing program 1 (id=3943): r0 = gettid() r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 885.933286ms ago: executing program 2 (id=3944): sysfs$3(0x3) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253ba5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde000000000000000000d4fd710a526223440f9df8d22bf9224e4b71b0757dbc8311a2ffbf680a2c09a893ffd79f0a645df3e2dce61e24c28750f50ccb9244fdb344773f79483ec0b6936fd853fda9ee154914a00831cf4bf6f9e6fe6cdfab5ab31de15450e6e703316d9597100d83d0444d511ec95edfc460461eef194209655b2a966078be83da84fe699fa66295c9995c869c18501c3d3bf6b17e5b2211c4903580dcdc7ea2bf9e3b202d7b01ea0b800868eb22cbb86e927b364c9c5642ea6188f53c36dffecbdeda61ceb3b1c1f4a7bc77e39a9ff7e547cef240c3cf78f61d3e000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x8d960f, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(&(0x7f0000000180)='.\\\x00', 0x2, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x38000000, 0x53f5}]}, 0xc, 0x2) r3 = socket$key(0xf, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000003240), 0x0, 0x8000) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, 0x0) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r3], 0x44}, 0x1, 0x0, 0x0, 0x40020891}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000000c0)=[{0x45, '\x00', @buffer={"08aa28fb236c1934e108f512b80034b920683e07edda7a112f685d4f3a155c71", 0x20}, 0x7}, {0x1f, '\x00', @st={0x4, [{0x2, @uvalue=0x7f}, {0x1, @svalue=0x3}, {0x1, @uvalue=0x9}, {0x1, @uvalue=0x2}]}, 0x6}, {0xa, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b55913355f933502c0a9975e7de66b90754f408ec", 0x20}, 0x6}, {0x3f, '\x00', @data=0x6, 0x8}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) 632.283523ms ago: executing program 0 (id=3945): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10}, 0x94) 0s ago: executing program 1 (id=3946): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/79, 0x4f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x3f, &(0x7f0000001f40)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08002000000032beb2aae310cd2065a433d0f54d38ac0000b7053d5af952ad1922a30017", @ANYRES32, @ANYBLOB="00000000f8ffffff1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff7f00008500000006", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa20000000000000702", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x4, 0x80c}, 0x10}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180200000000001d000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000002000000851000000100000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) kernel console output (not intermixed with test programs): ate underflow at hook 3 [ 717.715341][T14656] input: syz1 as /devices/virtual/input/input103 [ 719.452496][ T29] audit: type=1400 audit(1774274832.848:1012): avc: denied { read } for pid=14677 comm="syz.3.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 720.040367][ T29] audit: type=1400 audit(1774274833.438:1013): avc: denied { bind } for pid=14682 comm="syz.1.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 723.130523][ T29] audit: type=1400 audit(1774274836.518:1014): avc: denied { unmount } for pid=14245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 723.398955][T13301] bridge_slave_1: left allmulticast mode [ 723.415119][T13301] bridge_slave_1: left promiscuous mode [ 723.438691][T13301] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.520639][ T5891] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 723.686981][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.944999][T13301] bridge_slave_0: left allmulticast mode [ 723.971513][ T5891] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 723.974381][T13301] bridge_slave_0: left promiscuous mode [ 724.072345][T13301] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.074580][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.202870][ T5891] usb 3-1: config 0 descriptor?? [ 724.218313][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 724.622345][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 724.642589][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 724.650059][T13301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.650194][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 724.673149][T13301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.676900][ T5891] pwc: recv_control_msg error -32 req 04 val 1000 [ 724.704665][T13301] bond0 (unregistering): Released all slaves [ 724.724379][ T5891] pwc: recv_control_msg error -32 req 04 val 1300 [ 724.736662][T13301] bond1 (unregistering): Released all slaves [ 724.748078][ T5891] pwc: recv_control_msg error -32 req 04 val 1400 [ 724.773372][ T5891] pwc: recv_control_msg error -32 req 02 val 2000 [ 724.799505][ T5891] pwc: recv_control_msg error -32 req 02 val 2100 [ 724.800231][T13301] bond2 (unregistering): Released all slaves [ 724.819847][ T5891] pwc: recv_control_msg error -32 req 04 val 1500 [ 724.838624][ T5891] pwc: recv_control_msg error -32 req 02 val 2500 [ 724.858020][ T5891] pwc: recv_control_msg error -32 req 02 val 2400 [ 724.867824][T13301] bond3 (unregistering): Released all slaves [ 724.868343][ T5891] pwc: recv_control_msg error -32 req 02 val 2600 [ 724.894447][ T5891] pwc: recv_control_msg error -32 req 02 val 2900 [ 724.917540][T13301] bond4 (unregistering): Released all slaves [ 724.947557][T13301] bond5 (unregistering): Released all slaves [ 725.079412][T14727] syzkaller0: entered promiscuous mode [ 725.085754][T14727] syzkaller0: entered allmulticast mode [ 725.103181][ T5891] pwc: recv_control_msg error -71 req 04 val 1100 [ 725.116693][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 725.144561][ T5891] pwc: Registered as video103. [ 725.164750][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input104 [ 725.215293][ T5891] usb 3-1: USB disconnect, device number 62 [ 725.374601][ T29] audit: type=1400 audit(1774274838.778:1015): avc: denied { getopt } for pid=14752 comm="syz.3.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 725.445924][ T29] audit: type=1400 audit(1774274838.808:1016): avc: denied { accept } for pid=14752 comm="syz.3.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 728.800439][ T792] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 728.970526][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 728.977797][ T792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 728.992394][ T792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.002890][ T792] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 729.014129][ T792] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 729.024251][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.033073][ T792] usb 2-1: Product: syz [ 729.037354][ T792] usb 2-1: Manufacturer: syz [ 729.042630][ T792] usb 2-1: SerialNumber: syz [ 729.474886][ T792] usb 2-1: 0:2 : does not exist [ 729.527106][ T792] usb 2-1: USB disconnect, device number 9 [ 729.577243][T13301] tipc: Left network mode [ 729.607237][T13301] IPVS: stopping master sync thread 12595 ... [ 731.782606][T14801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.233520][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2478'. [ 732.242574][T14836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2478'. [ 732.261326][T14837] syz_tun: entered allmulticast mode [ 732.267979][T14822] syz_tun: left allmulticast mode [ 733.806938][T13301] hsr_slave_0: left promiscuous mode [ 733.842220][T13301] hsr_slave_1: left promiscuous mode [ 733.881275][T13301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.911195][T13301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.922586][ T29] audit: type=1400 audit(1774274847.328:1017): avc: denied { shutdown } for pid=14861 comm="syz.3.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 733.948483][T13301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.970583][T13301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.124379][T13301] veth1_macvtap: left allmulticast mode [ 734.161035][T13301] veth1_macvtap: left promiscuous mode [ 734.200524][T13301] veth0_macvtap: left promiscuous mode [ 734.218541][T13301] veth1_vlan: left promiscuous mode [ 734.240534][T13301] veth0_vlan: left promiscuous mode [ 734.549531][ T6959] smc: removing ib device sy [ 734.671345][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'. [ 734.681046][T14880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2490'. [ 734.694380][T13301] team0 (unregistering): Port device team_slave_1 removed [ 734.710264][T13301] team0 (unregistering): Port device team_slave_0 removed [ 737.093639][T14908] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 737.318204][T14869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 737.840448][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2503'. [ 737.886977][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2503'. [ 737.910608][ T29] audit: type=1800 audit(1774274851.258:1018): pid=14925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2500" name="bus" dev="tmpfs" ino=2599 res=0 errno=0 [ 737.923906][T14927] syz.3.2502 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 739.130674][T14945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2509'. [ 740.322783][T14955] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 740.755569][T13301] IPVS: stop unused estimator thread 0... [ 740.900715][T14969] No control pipe specified [ 741.693761][ T29] audit: type=1400 audit(1774274855.008:1019): avc: denied { append } for pid=14971 comm="syz.1.2519" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 742.170912][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.177318][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.235417][ T5891] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 743.512177][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.523386][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.533297][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 743.549874][ T5891] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 743.585728][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.611190][ T5891] usb 4-1: config 0 descriptor?? [ 743.950415][T15017] No control pipe specified [ 744.656577][ T5891] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 745.056343][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2536'. [ 745.119079][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2536'. [ 745.992614][ C1] plantronics 0003:047F:FFFF.0010: usb_submit_urb(ctrl) failed: -1 [ 746.140463][ T5864] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 746.796958][T15051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=15051 comm=syz.2.2532 [ 747.102306][ T792] usb 4-1: USB disconnect, device number 58 [ 747.140416][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 747.241220][T15063] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 747.303477][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 747.322499][ T24] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 747.333607][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.353415][ T24] usb 6-1: Product: syz [ 747.365386][ T24] usb 6-1: Manufacturer: syz [ 747.375856][ T24] usb 6-1: SerialNumber: syz [ 747.388894][ T24] usb 6-1: config 0 descriptor?? [ 747.446425][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'. [ 747.456135][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'. [ 747.712313][T15077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2553'. [ 747.831797][ T24] airspy 6-1:0.0: Board ID: 00 [ 747.836720][ T24] airspy 6-1:0.0: Firmware version: [ 748.089693][T15092] netlink: 'syz.1.2559': attribute type 29 has an invalid length. [ 748.099417][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2559'. [ 748.111931][T15092] netlink: 'syz.1.2559': attribute type 29 has an invalid length. [ 748.120453][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2559'. [ 748.167111][T15096] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 748.392394][T15104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=15104 comm=syz.1.2562 [ 748.748889][ T24] airspy 6-1:0.0: usb_control_msg() failed -71 request 0f [ 748.868534][ T24] airspy 6-1:0.0: Registered as swradio24 [ 748.939265][ T24] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 748.979748][ T24] usb 6-1: USB disconnect, device number 53 [ 748.980398][ T5925] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 749.840471][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 749.860761][T15118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2566'. [ 749.866465][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 749.898305][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 749.932900][ T5925] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 749.942186][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.950180][ T5925] usb 1-1: Product: syz [ 749.970722][ T5925] usb 1-1: Manufacturer: syz [ 749.975353][ T5925] usb 1-1: SerialNumber: syz [ 749.995998][ T5925] usb 1-1: config 0 descriptor?? [ 750.015272][ T5925] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 750.030678][ T5925] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 750.498935][T15147] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2575'. [ 750.649689][ T5925] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 751.323104][ T5925] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 752.280517][ T5864] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 752.470706][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 752.486658][ T5864] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 752.516493][ T5864] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 752.539239][ T5864] usb 6-1: config 6 has no interface number 0 [ 752.548741][ T5864] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 752.564407][ T5864] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 752.593543][ T5864] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 752.643803][ T5864] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 752.660827][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.673928][ T5925] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 752.679490][ T5864] usb 6-1: Product: syz [ 752.687776][ T5925] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 752.693445][ T5864] usb 6-1: Manufacturer: syz [ 752.705518][ T5864] usb 6-1: SerialNumber: syz [ 752.707122][ T5925] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 752.724533][ T5864] hso 6-1:6.2: Failed to find INT IN ep [ 752.733248][ T5925] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 752.752246][ T5925] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 752.760634][ T5925] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 752.829331][ T5925] usb 1-1: USB disconnect, device number 72 [ 752.893742][T15188] syz_tun: entered allmulticast mode [ 753.003968][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'. [ 753.018711][T11898] usb 6-1: USB disconnect, device number 54 [ 753.028702][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'. [ 754.073773][T15220] syzkaller0: entered promiscuous mode [ 754.079270][T15220] syzkaller0: entered allmulticast mode [ 754.170406][ T5864] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 754.342016][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.369881][ T5864] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 754.389598][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.424572][ T5864] usb 1-1: config 0 descriptor?? [ 754.445751][ T5864] pwc: Askey VC010 type 2 USB webcam detected. [ 754.492802][ T792] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 754.572797][T15235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2604'. [ 754.650472][ T792] usb 6-1: Using ep0 maxpacket: 32 [ 754.657315][ T792] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 754.671726][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.683781][ T792] usb 6-1: config 0 descriptor?? [ 754.692665][ T792] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 754.810426][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 754.836198][ T29] audit: type=1400 audit(1774274868.238:1020): avc: denied { shutdown } for pid=15242 comm="syz.2.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 754.857558][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00 [ 754.865467][ T5864] pwc: recv_control_msg error -32 req 02 val 2700 [ 754.873442][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00 [ 754.880625][ T5864] pwc: recv_control_msg error -32 req 04 val 1000 [ 754.891435][ T5864] pwc: recv_control_msg error -32 req 04 val 1300 [ 754.901389][ T5864] pwc: recv_control_msg error -32 req 04 val 1400 [ 754.910292][ T5864] pwc: recv_control_msg error -32 req 02 val 2000 [ 754.960373][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 755.114681][ T5925] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 755.120177][ T5864] pwc: recv_control_msg error -71 req 04 val 1500 [ 755.126338][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.139654][ T5925] usb 2-1: Product: syz [ 755.144733][ T5925] usb 2-1: Manufacturer: syz [ 755.149510][ T5925] usb 2-1: SerialNumber: syz [ 755.159679][ T5925] usb 2-1: config 0 descriptor?? [ 755.165181][ T5864] pwc: recv_control_msg error -71 req 02 val 2500 [ 755.165522][ T5864] pwc: recv_control_msg error -71 req 02 val 2400 [ 755.183090][ T5864] pwc: recv_control_msg error -71 req 02 val 2600 [ 755.193403][ T5864] pwc: recv_control_msg error -71 req 02 val 2900 [ 755.204383][ T5864] pwc: recv_control_msg error -71 req 02 val 2800 [ 755.215523][ T5864] pwc: recv_control_msg error -71 req 04 val 1100 [ 755.230173][ T5864] pwc: recv_control_msg error -71 req 04 val 1200 [ 755.244179][ T5864] pwc: Registered as video103. [ 755.279523][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input105 [ 755.344107][ T792] gspca_vc032x: reg_w err -71 [ 755.358710][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.364546][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.370971][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.380000][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.388877][ T5864] usb 1-1: USB disconnect, device number 73 [ 755.390414][ T5925] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 755.394902][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.418951][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.426639][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.443205][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.448606][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.464830][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.470244][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.476127][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.481867][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.487234][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.494647][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.500031][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.505858][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.513341][ T792] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.518810][ T792] gspca_vc032x: Unknown sensor... [ 755.524362][ T792] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 755.535914][ T792] usb 6-1: USB disconnect, device number 55 [ 756.857513][T15275] vlan3: entered promiscuous mode [ 756.872737][ T5132] Bluetooth: hci4: command 0x0405 tx timeout [ 756.880507][T15275] vlan3: entered allmulticast mode [ 756.886198][T15275] hsr_slave_1: entered allmulticast mode [ 756.919950][ T5925] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 757.349185][ T5925] usb 2-1: USB disconnect, device number 10 [ 757.367707][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2617'. [ 758.075060][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2625'. [ 758.174063][T15301] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2626'. [ 758.261696][T15303] syzkaller1: entered promiscuous mode [ 758.267212][T15303] syzkaller1: entered allmulticast mode [ 759.160905][T15325] netlink: 'syz.0.2635': attribute type 10 has an invalid length. [ 759.246287][T15325] team0: Device vxcan1 is of different type [ 759.253100][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 1, len 16 [ 761.120682][T15357] syzkaller1: entered promiscuous mode [ 761.153390][T15357] syzkaller1: entered allmulticast mode [ 763.346739][T15404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2663'. [ 763.375008][T15404] gtp0: entered promiscuous mode [ 764.645743][T15423] netlink: 'syz.5.2667': attribute type 4 has an invalid length. [ 765.184761][T15451] netlink: 'syz.1.2677': attribute type 1 has an invalid length. [ 765.192777][ T29] audit: type=1400 audit(1774274878.588:1021): avc: denied { ioctl } for pid=15448 comm="syz.1.2677" path="socket:[49933]" dev="sockfs" ino=49933 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 765.305524][ T29] audit: type=1400 audit(1774274878.708:1022): avc: denied { setopt } for pid=15456 comm="syz.5.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 767.450654][ T29] audit: type=1400 audit(1774274880.788:1023): avc: denied { setopt } for pid=15489 comm="syz.3.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 768.039952][T15505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 768.305541][T15525] netlink: 'syz.2.2693': attribute type 4 has an invalid length. [ 769.610902][ T5949] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 769.784990][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.070661][ T5949] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 770.079786][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.103515][ T5949] usb 6-1: config 0 descriptor?? [ 770.113306][ T5949] pwc: Askey VC010 type 2 USB webcam detected. [ 770.406861][T15570] netlink: 'syz.2.2716': attribute type 1 has an invalid length. [ 770.447941][T15570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 770.522521][ T5949] pwc: recv_control_msg error -32 req 02 val 2b00 [ 770.539808][ T5949] pwc: recv_control_msg error -32 req 02 val 2700 [ 770.557817][ T5949] pwc: recv_control_msg error -32 req 02 val 2c00 [ 770.567255][ T5949] pwc: recv_control_msg error -32 req 04 val 1000 [ 770.574557][ T5949] pwc: recv_control_msg error -32 req 04 val 1300 [ 770.583519][ T5949] pwc: recv_control_msg error -32 req 04 val 1400 [ 770.591439][ T5949] pwc: recv_control_msg error -32 req 02 val 2000 [ 770.761355][T15570] veth3: entered promiscuous mode [ 771.089512][ T29] audit: type=1400 audit(1774274884.278:1024): avc: denied { create } for pid=15574 comm="syz.1.2718" name="#6d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 771.110767][ T5949] pwc: recv_control_msg error -71 req 04 val 1500 [ 771.129418][ T5949] pwc: recv_control_msg error -71 req 02 val 2500 [ 771.156842][T15570] bond3: (slave veth3): Enslaving as an active interface with a down link [ 771.168031][ T5949] pwc: recv_control_msg error -71 req 02 val 2400 [ 771.175853][ T5949] pwc: recv_control_msg error -71 req 02 val 2600 [ 771.183631][ T29] audit: type=1400 audit(1774274884.278:1025): avc: denied { link } for pid=15574 comm="syz.1.2718" name="#6d" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 771.210507][ T5949] pwc: recv_control_msg error -71 req 02 val 2900 [ 771.218724][ T5949] pwc: recv_control_msg error -71 req 02 val 2800 [ 771.226307][ T29] audit: type=1400 audit(1774274884.288:1026): avc: denied { rename } for pid=15574 comm="syz.1.2718" name="#6e" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 771.238470][T15577] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 771.248899][ T5949] pwc: recv_control_msg error -71 req 04 val 1100 [ 771.271378][ T5949] pwc: recv_control_msg error -71 req 04 val 1200 [ 771.282369][ T5949] pwc: Registered as video103. [ 771.289777][ T5949] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input106 [ 771.313187][ T5949] usb 6-1: USB disconnect, device number 56 [ 771.642696][ T5815] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 771.646685][T15587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.782659][T15587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.830596][ T29] audit: type=1400 audit(1774274885.198:1027): avc: denied { node_bind } for pid=15586 comm="syz.1.2721" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 772.785298][T15624] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2735'. [ 774.372575][T15665] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2749'. [ 776.173056][T15689] syzkaller0: entered promiscuous mode [ 776.203090][T15689] syzkaller0: entered allmulticast mode [ 776.264689][T15698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 778.383789][T15741] syz_tun: entered allmulticast mode [ 778.552045][T15739] syz_tun: left allmulticast mode [ 778.971053][T15750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 779.407618][T15781] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15781 comm=syz.1.2785 [ 780.268061][T15810] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 781.494208][T15837] tipc: Enabled bearer , priority 0 [ 781.503115][T15837] syzkaller0: entered promiscuous mode [ 781.517833][T15837] syzkaller0: entered allmulticast mode [ 781.941791][T15837] tipc: Resetting bearer [ 781.973236][T15836] tipc: Resetting bearer [ 782.621206][T15836] tipc: Disabling bearer [ 782.828572][ T5864] tipc: Node number set to 1156369120 [ 785.210729][T15893] netlink: 'syz.1.2822': attribute type 10 has an invalid length. [ 785.414459][T15893] team0: Device vxcan1 is of different type [ 785.790691][ T5925] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 785.974720][ T5925] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 785.997148][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.025724][ T5925] usb 2-1: Product: syz [ 786.029921][ T5925] usb 2-1: Manufacturer: syz [ 786.059372][ T5925] usb 2-1: SerialNumber: syz [ 786.221007][ T29] audit: type=1400 audit(1774274899.618:1028): avc: denied { write } for pid=15906 comm="syz.0.2829" lport=12246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 786.537876][ T5925] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 786.551279][ T5925] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 786.573727][ T5925] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 787.062082][ T5925] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 787.195728][ T5925] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 787.365698][ T5925] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 787.392280][ T5925] usb 2-1: USB disconnect, device number 11 [ 787.412293][T15927] syzkaller0: entered promiscuous mode [ 787.417792][T15927] syzkaller0: entered allmulticast mode [ 788.463349][T15938] bridge_slave_0: left allmulticast mode [ 788.469698][T15938] bridge_slave_0: left promiscuous mode [ 788.502298][T15938] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.548609][T15938] bridge_slave_1: left allmulticast mode [ 788.571121][T15938] bridge_slave_1: left promiscuous mode [ 788.576809][T15938] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.641211][T15938] bond0: (slave bond_slave_0): Releasing backup interface [ 788.701533][T15938] bond0: (slave bond_slave_1): Releasing backup interface [ 788.736120][T15938] team0: Port device team_slave_0 removed [ 788.744675][T15938] team0: Port device team_slave_1 removed [ 788.751051][T15938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.762818][T15938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.785308][T15938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.792974][T15938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.801726][T15938] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 788.818227][T11898] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 789.128804][T11898] usb 1-1: Using ep0 maxpacket: 8 [ 789.157697][T11898] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 789.167014][T11898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.187781][T11898] usb 1-1: Product: syz [ 789.192796][T11898] usb 1-1: Manufacturer: syz [ 789.213608][T11898] usb 1-1: SerialNumber: syz [ 789.225569][T15948] netlink: 'syz.3.2840': attribute type 11 has an invalid length. [ 789.232695][T11898] usb 1-1: config 0 descriptor?? [ 789.409917][T15953] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2841'. [ 789.464502][T11898] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 789.837524][T15973] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 791.351069][T16004] syz_tun: entered allmulticast mode [ 791.378238][T16006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2856'. [ 791.397164][T11898] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 791.441188][T11898] usb 1-1: USB disconnect, device number 74 [ 793.489672][ T29] audit: type=1400 audit(1774274906.888:1029): avc: denied { getopt } for pid=16031 comm="syz.1.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 793.681777][T16037] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 793.830456][T16040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.833723][ T29] audit: type=1400 audit(1774274907.238:1030): avc: denied { map } for pid=16043 comm="syz.1.2868" path="socket:[52958]" dev="sockfs" ino=52958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 794.002643][T16040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.046981][T16040] bond0 (unregistering): Released all slaves [ 794.419135][T16049] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 794.542425][T16054] netlink: 'syz.5.2870': attribute type 4 has an invalid length. [ 794.721686][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059bfe400: rx timeout, send abort [ 794.731735][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059bfc800: rx timeout, send abort [ 794.740270][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059bfe400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 794.756383][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059bfc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 794.849905][ T29] audit: type=1400 audit(1774274908.188:1031): avc: denied { read } for pid=5162 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 794.881007][ T29] audit: type=1400 audit(1774274908.188:1032): avc: denied { search } for pid=5162 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.326482][ T29] audit: type=1400 audit(1774274908.188:1033): avc: denied { search } for pid=5162 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.348330][ T29] audit: type=1400 audit(1774274908.188:1034): avc: denied { add_name } for pid=5162 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.369415][ T29] audit: type=1400 audit(1774274908.188:1035): avc: denied { create } for pid=5162 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 795.419518][ T29] audit: type=1400 audit(1774274908.188:1036): avc: denied { append open } for pid=5162 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 795.515861][ T29] audit: type=1400 audit(1774274908.188:1037): avc: denied { getattr } for pid=5162 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 795.672739][ T29] audit: type=1400 audit(1774274909.078:1038): avc: denied { read } for pid=16067 comm="syz.0.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 796.125424][T16074] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 796.468130][T16084] netlink: 'syz.0.2881': attribute type 11 has an invalid length. [ 798.750432][ T5891] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 799.815146][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 799.846961][ T5891] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 799.972188][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.023119][ T5891] usb 2-1: Product: syz [ 800.027562][ T5891] usb 2-1: Manufacturer: syz [ 800.034159][ T5891] usb 2-1: SerialNumber: syz [ 800.480666][ T5891] usb 2-1: config 0 descriptor?? [ 800.760847][ T5891] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 802.575052][ T5891] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 802.608230][ T5891] usb 2-1: USB disconnect, device number 12 [ 802.751448][ T29] audit: type=1400 audit(1774274916.128:1039): avc: denied { shutdown } for pid=16174 comm="syz.0.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 803.582802][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.600464][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.185992][T16202] syzkaller0: entered promiscuous mode [ 804.191666][T16202] syzkaller0: entered allmulticast mode [ 804.770936][T16223] netlink: 'syz.1.2927': attribute type 4 has an invalid length. [ 805.773340][ T29] audit: type=1400 audit(1774274919.168:1040): avc: denied { write } for pid=16237 comm="syz.0.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 806.117925][T16243] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 806.807479][T16275] netlink: 'syz.2.2944': attribute type 4 has an invalid length. [ 808.655027][T16302] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 809.064572][T16312] netlink: 'syz.1.2956': attribute type 4 has an invalid length. [ 809.422159][T16259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 809.597126][T16320] netlink: 'syz.3.2959': attribute type 11 has an invalid length. [ 809.650000][T16316] tipc: Started in network mode [ 809.671713][T16316] tipc: Node identity 2e0d15ccccae, cluster identity 4711 [ 809.727768][T16316] tipc: Enabled bearer , priority 0 [ 809.750931][T16321] syzkaller0: entered promiscuous mode [ 809.811193][T16321] syzkaller0: entered allmulticast mode [ 809.861175][T16316] tipc: Resetting bearer [ 809.897663][T16315] tipc: Resetting bearer [ 810.016417][T16315] tipc: Disabling bearer [ 810.087565][T16330] fuse: Bad value for 'fd' [ 810.583325][ T29] audit: type=1400 audit(1774274923.568:1041): avc: denied { shutdown } for pid=16327 comm="syz.2.2962" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 811.406262][T16344] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 811.460074][T16346] syzkaller0: entered promiscuous mode [ 811.477300][T16346] syzkaller0: entered allmulticast mode [ 812.377800][T16367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2974'. [ 812.380236][T16368] fuse: Bad value for 'fd' [ 813.680805][T16388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.702994][T16388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.848130][T13297] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.859486][T13297] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.901465][T13297] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.929389][T13297] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.095255][ T29] audit: type=1400 audit(1774274927.498:1042): avc: denied { read open } for pid=16402 comm="syz.2.2988" path="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 814.127761][T16409] netlink: 'syz.1.2987': attribute type 4 has an invalid length. [ 814.367628][ T5949] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 814.888573][ T5949] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 814.897125][ T5949] usb 4-1: config 0 has no interface number 0 [ 814.903627][ T5949] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 814.913893][ T5949] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 814.923440][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.943272][ T5949] usb 4-1: config 0 descriptor?? [ 814.963452][ T5949] ttusbir 4-1:0.83: cannot find expected altsetting [ 816.172638][T16457] [syz.2.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 816.208552][ T5891] usb 4-1: USB disconnect, device number 59 [ 816.387555][T16465] netlink: 'syz.1.3007': attribute type 10 has an invalid length. [ 816.397134][T16465] team0: Port device vxcan1 added [ 816.487207][T16467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3009'. [ 816.510466][ T792] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 816.559620][T16469] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 816.806283][ T792] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 816.815999][ T792] usb 6-1: config 0 has no interface number 0 [ 816.865741][ T792] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 816.914850][ T792] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 817.129788][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.170700][ T792] usb 6-1: config 0 descriptor?? [ 817.188880][ T792] ttusbir 6-1:0.83: cannot find expected altsetting [ 818.330810][T16487] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 818.395348][T16499] syzkaller0: entered promiscuous mode [ 818.400941][T16499] syzkaller0: entered allmulticast mode [ 818.491640][T16500] netlink: 'syz.2.3020': attribute type 10 has an invalid length. [ 818.662394][T16507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3023'. [ 819.504645][ T5949] usb 6-1: USB disconnect, device number 57 [ 819.830543][T16533] tipc: Enabled bearer , priority 0 [ 819.855328][T16533] syzkaller0: entered promiscuous mode [ 819.870406][T16533] syzkaller0: entered allmulticast mode [ 819.897182][T16533] tipc: Resetting bearer [ 819.949614][T16531] tipc: Resetting bearer [ 819.975983][T16531] tipc: Disabling bearer [ 820.010152][T16539] syzkaller0: entered promiscuous mode [ 820.028363][T16539] syzkaller0: entered allmulticast mode [ 820.412748][T16545] netlink: 'syz.2.3037': attribute type 10 has an invalid length. [ 822.230430][ T7103] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 822.829083][ T7103] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 822.842274][ T7103] usb 4-1: config 0 has no interface number 0 [ 822.848705][ T7103] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 822.852091][T16597] netlink: 'syz.2.3054': attribute type 10 has an invalid length. [ 822.859024][ T7103] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 822.888710][ T7103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.899263][ T7103] usb 4-1: config 0 descriptor?? [ 822.926434][ T7103] ttusbir 4-1:0.83: cannot find expected altsetting [ 823.019272][T16605] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3059'. [ 823.395403][T16611] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 826.687477][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3071'. [ 826.781452][ T5949] usb 4-1: USB disconnect, device number 60 [ 828.394326][T16667] netlink: 'syz.1.3067': attribute type 10 has an invalid length. [ 829.061025][T16685] syzkaller0: entered promiscuous mode [ 829.076787][T16685] syzkaller0: entered allmulticast mode [ 829.429106][T16694] fuse: Bad value for 'fd' [ 830.393865][T16714] tipc: Enabled bearer , priority 0 [ 830.878218][T16714] syzkaller0: entered promiscuous mode [ 830.884549][T16714] syzkaller0: entered allmulticast mode [ 830.964015][T16713] tipc: Resetting bearer [ 831.007025][T16713] tipc: Disabling bearer [ 831.266086][T16726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16726 comm=syz.0.3101 [ 831.663662][T16732] syzkaller0: entered promiscuous mode [ 831.669140][T16732] syzkaller0: entered allmulticast mode [ 831.748843][T16736] syzkaller0: entered promiscuous mode [ 831.796677][T16736] syzkaller0: entered allmulticast mode [ 832.021156][T16749] fuse: Unknown parameter 'grou00000000000000000000' [ 835.804159][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 835.816295][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 835.861477][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 835.942805][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 836.020489][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3128'. [ 836.032449][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 836.540499][ T5132] Bluetooth: hci4: command 0x0405 tx timeout [ 837.243929][T16808] syzkaller0: entered promiscuous mode [ 837.249426][T16808] syzkaller0: entered allmulticast mode [ 837.378795][ T5132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 837.388649][ T5132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 837.397079][ T5132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 837.405904][ T5132] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 837.414093][ T5132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 837.679307][T16821] fuse: Bad value for 'group_id' [ 837.750822][T16821] fuse: Bad value for 'group_id' [ 837.872021][T16813] chnl_net:caif_netlink_parms(): no params data found [ 838.002133][T16813] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.010455][T16813] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.017736][T16813] bridge_slave_0: entered allmulticast mode [ 838.025628][T16813] bridge_slave_0: entered promiscuous mode [ 838.114790][T16813] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.127174][T16813] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.134542][T16813] bridge_slave_1: entered allmulticast mode [ 838.142280][T16813] bridge_slave_1: entered promiscuous mode [ 838.306156][T16813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.318436][T16813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.418913][T16813] team0: Port device team_slave_0 added [ 838.422417][T16847] overlayfs: failed to clone upperpath [ 838.469109][T16813] team0: Port device team_slave_1 added [ 838.539009][T16813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.559474][T16813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.591492][T16813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.715969][T16813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.741741][T16813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.933471][T16813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.303969][T16860] fuse: Bad value for 'group_id' [ 839.317124][T16860] fuse: Bad value for 'group_id' [ 839.501790][ T5815] Bluetooth: hci5: command tx timeout [ 839.522525][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.704380][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.826161][T16813] hsr_slave_0: entered promiscuous mode [ 839.835183][T16813] hsr_slave_1: entered promiscuous mode [ 839.843359][T16813] debugfs: 'hsr0' already exists in 'hsr' [ 839.849213][T16813] Cannot create hsr debugfs directory [ 839.949819][T16875] netlink: 'syz.3.3153': attribute type 4 has an invalid length. [ 839.965667][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.387083][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.169823][ T58] bridge_slave_1: left allmulticast mode [ 841.195495][ T58] bridge_slave_1: left promiscuous mode [ 841.230987][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.382149][ T58] bridge_slave_0: left allmulticast mode [ 841.391564][ T29] audit: type=1400 audit(1774274954.798:1043): avc: denied { read open } for pid=16904 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.397082][ T58] bridge_slave_0: left promiscuous mode [ 841.566626][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.575750][ T29] audit: type=1400 audit(1774274954.798:1044): avc: denied { getattr } for pid=16904 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.601381][ T5815] Bluetooth: hci5: command tx timeout [ 841.795014][ T58] erspan0: left allmulticast mode [ 841.847259][ T58] erspan0: left promiscuous mode [ 841.870355][ T5949] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 841.898420][ T58] bridge2: port 1(erspan0) entered disabled state [ 841.966635][ T29] audit: type=1400 audit(1774274955.368:1045): avc: denied { add_name } for pid=16903 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.030425][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 842.043514][ T5949] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 842.054858][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.088143][ T29] audit: type=1400 audit(1774274955.368:1046): avc: denied { create } for pid=16903 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 842.120334][ T5949] usb 2-1: Product: syz [ 842.124664][ T5949] usb 2-1: Manufacturer: syz [ 842.129296][ T5949] usb 2-1: SerialNumber: syz [ 842.147543][ T5949] usb 2-1: config 0 descriptor?? [ 842.153600][ T29] audit: type=1400 audit(1774274955.368:1047): avc: denied { write } for pid=16903 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=10798 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 842.191306][ T29] audit: type=1400 audit(1774274955.368:1048): avc: denied { append } for pid=16903 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=10798 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 842.376253][ T29] audit: type=1400 audit(1774274955.778:1049): avc: denied { remove_name } for pid=16919 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=10798 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.820732][ T5949] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 842.832288][ T29] audit: type=1400 audit(1774274955.778:1050): avc: denied { unlink } for pid=16919 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=10798 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 843.667989][ T5815] Bluetooth: hci5: command tx timeout [ 843.824402][ T5949] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 843.945677][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.955652][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.965279][ T58] bond0 (unregistering): Released all slaves [ 843.974052][ T58] bond1 (unregistering): Released all slaves [ 843.986789][ T58] bond2 (unregistering): Released all slaves [ 843.998149][ T58] bond3 (unregistering): (slave veth3): Releasing active interface [ 844.007529][ T58] bond3 (unregistering): Released all slaves [ 844.042652][T16927] tipc: Enabling of bearer rejected, failed to enable media [ 844.069502][ T58] tipc: Left network mode [ 844.116950][T16948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3168'. [ 844.178668][T16949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=16949 comm=syz.0.3168 [ 844.191783][T16949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3168'. [ 844.887759][ T5891] usb 2-1: USB disconnect, device number 13 [ 844.894723][T16966] 9p: Unknown Cache mode or invalid value fscŠöQ‡ ÿÿ [ 844.907475][T16966] 9p: Unknown Cache mode or invalid value ☇ÿô´’~ÿÿ [ 845.106572][ T58] hsr_slave_0: left promiscuous mode [ 845.143269][ T58] hsr_slave_1: left promiscuous mode [ 845.185679][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.193543][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.208267][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.216176][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.229518][ T58] veth1_macvtap: left promiscuous mode [ 845.235830][ T58] veth0_macvtap: left promiscuous mode [ 845.241636][ T58] ÿÿÿÿ: left promiscuous mode [ 845.246940][ T58] veth0_vlan: left promiscuous mode [ 845.429978][T16983] overlayfs: failed to clone upperpath [ 845.745710][ T5815] Bluetooth: hci5: command tx timeout [ 846.256006][T17003] netlink: 'syz.5.3176': attribute type 10 has an invalid length. [ 848.079590][T17003] team0: Device vxcan1 is of different type [ 848.152258][T16813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 848.227318][T16813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 848.539061][T16813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 848.595577][T16813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 849.025913][T16813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.094761][T16813] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.424083][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.431242][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.475378][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3190'. [ 849.522472][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.529557][ T6975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.583537][ T58] IPVS: stop unused estimator thread 0... [ 850.002158][T17069] netlink: 'syz.5.3195': attribute type 10 has an invalid length. [ 850.047830][T17069] team0: Device vxcan1 is of different type [ 850.250874][T16813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.361739][T17080] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3197'. [ 850.393555][T16813] veth0_vlan: entered promiscuous mode [ 850.471267][T16813] veth1_vlan: entered promiscuous mode [ 850.595480][T16813] veth0_macvtap: entered promiscuous mode [ 850.642522][T16813] veth1_macvtap: entered promiscuous mode [ 850.696734][T16813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.732258][T16813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.766986][ T6975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.795128][ T6975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.825788][ T6975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.858409][ T6975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.032579][ T6975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.047206][ T6975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.093281][ T6975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.103434][ T6975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.461080][T17113] tmpfs: Bad value for 'nr_blocks' [ 851.571571][T17122] netlink: 'syz.0.3205': attribute type 4 has an invalid length. [ 853.180031][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 853.190067][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 853.231339][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 853.239355][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 853.251090][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 853.513945][ T5813] syz_tun (unregistering): left allmulticast mode [ 853.694302][T17142] chnl_net:caif_netlink_parms(): no params data found [ 854.252082][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 854.342100][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 854.358887][T17142] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.403358][T17174] fuse: Bad value for 'fd' [ 854.409156][T17142] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.422272][T17142] bridge_slave_0: entered allmulticast mode [ 854.437327][T17142] bridge_slave_0: entered promiscuous mode [ 854.447581][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 854.462761][T17176] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3224'. [ 854.487276][T17142] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.508612][T17142] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.520074][T17142] bridge_slave_1: entered allmulticast mode [ 854.536589][T17142] bridge_slave_1: entered promiscuous mode [ 854.907473][T17142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.919660][T17142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.952861][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 854.991348][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 855.078776][T17142] team0: Port device team_slave_0 added [ 855.092631][T17142] team0: Port device team_slave_1 added [ 855.166793][T17142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.174068][T17187] fuse: Unknown parameter 'grou00000000000000000000' [ 855.174161][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.219293][T17189] tmpfs: Bad value for 'nr_blocks' [ 855.226263][T17142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.265000][T17142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.272823][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.299517][T17193] netlink: 'syz.1.3229': attribute type 4 has an invalid length. [ 855.307814][T17142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.348044][ T5815] Bluetooth: hci0: command tx timeout [ 855.369546][T17142] hsr_slave_0: entered promiscuous mode [ 855.376903][T17142] hsr_slave_1: entered promiscuous mode [ 855.520565][T17201] fuse: Bad value for 'fd' [ 855.661641][T17142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.736945][T17142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.144557][T17142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.185342][ T5949] IPVS: starting estimator thread 0... [ 856.280397][T17209] IPVS: using max 40 ests per chain, 96000 per kthread [ 856.389665][T17142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.175114][T17142] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 857.203981][T17142] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 857.235966][T17142] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 857.263107][T17142] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 857.439916][ T5815] Bluetooth: hci0: command tx timeout [ 857.953350][T17142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.994973][T17142] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.221938][T13305] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.229010][T13305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.239021][T13305] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.246109][T13305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.333320][T17257] syzkaller0: entered promiscuous mode [ 858.342193][T17257] syzkaller0: entered allmulticast mode [ 859.406808][T17142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.500604][ T5815] Bluetooth: hci0: command tx timeout [ 859.748136][T17142] veth0_vlan: entered promiscuous mode [ 859.765796][T17142] veth1_vlan: entered promiscuous mode [ 860.514228][T17142] veth0_macvtap: entered promiscuous mode [ 860.530739][T17142] veth1_macvtap: entered promiscuous mode [ 860.567588][T17142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.624914][T17142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.704624][ T6975] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.741508][ T6975] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.114519][ T6975] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.140213][ T6975] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.259275][ T6975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.282339][ T6975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.477054][T13301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.492090][T13301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.620419][ T5815] Bluetooth: hci0: command tx timeout [ 861.719196][T17301] netlink: 'syz.5.3266': attribute type 10 has an invalid length. [ 861.731794][T17301] team0: Device vxcan1 is of different type [ 862.609171][T17311] syzkaller0: entered promiscuous mode [ 862.638657][T17311] syzkaller0: entered allmulticast mode [ 862.703562][T17315] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3269'. [ 863.652176][T17335] netlink: 'syz.5.3274': attribute type 11 has an invalid length. [ 865.022760][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.042539][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.687451][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 865.696368][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 865.706964][ T5132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 865.715585][ T5132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 865.723808][T17359] syzkaller0: entered promiscuous mode [ 865.739517][T17359] syzkaller0: entered allmulticast mode [ 865.755178][T17361] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3282'. [ 865.780821][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 866.216667][T17366] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3285'. [ 867.821678][ T5815] Bluetooth: hci1: command tx timeout [ 868.250022][T17355] chnl_net:caif_netlink_parms(): no params data found [ 868.621933][T13301] bridge_slave_1: left allmulticast mode [ 868.627786][T13301] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.760144][T13301] bridge_slave_0: left allmulticast mode [ 868.761604][T17395] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3293'. [ 868.781410][T13301] bridge_slave_0: left promiscuous mode [ 868.787632][T13301] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.300625][ T5815] Bluetooth: hci1: command tx timeout [ 870.550737][T13301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.631867][T13301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.747295][T13301] bond0 (unregistering): Released all slaves [ 870.771188][T13301] bond1 (unregistering): Released all slaves [ 870.828410][T13301] bond2 (unregistering): Released all slaves [ 870.879396][T13301] bond3 (unregistering): Released all slaves [ 870.906723][T13301] bond4 (unregistering): Released all slaves [ 871.065936][T13301] tipc: Left network mode [ 872.081816][T17426] 9p: Unknown Cache mode or invalid value fscŠöQ‡ ÿÿ [ 872.101161][T17426] 9p: Unknown Cache mode or invalid value ☇ÿô´’~ÿÿ [ 872.258083][T17355] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.272805][T17355] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.280121][T17355] bridge_slave_0: entered allmulticast mode [ 872.291860][T17355] bridge_slave_0: entered promiscuous mode [ 872.309242][T17355] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.360469][T17355] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.368541][T17355] bridge_slave_1: entered allmulticast mode [ 872.382994][ T5815] Bluetooth: hci1: command tx timeout [ 872.431727][T17355] bridge_slave_1: entered promiscuous mode [ 873.127509][T17355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.200039][T17355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.428230][T17355] team0: Port device team_slave_0 added [ 873.566432][T17355] team0: Port device team_slave_1 added [ 874.143783][T13301] hsr_slave_0: left promiscuous mode [ 874.155531][T13301] hsr_slave_1: left promiscuous mode [ 874.161690][T13301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.190946][T13301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.210383][ T5815] Bluetooth: hci1: command tx timeout [ 875.382167][T17469] netlink: 'syz.2.3304': attribute type 10 has an invalid length. [ 875.695138][T13301] team0 (unregistering): Port device team_slave_1 removed [ 875.728825][T13301] team0 (unregistering): Port device team_slave_0 removed [ 876.079065][T17469] team0: Device vxcan1 is of different type [ 876.088344][T17355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.110338][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.844205][T17355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.891191][T17355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.899088][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.320702][T17355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.477495][T17355] hsr_slave_0: entered promiscuous mode [ 877.511251][T17355] hsr_slave_1: entered promiscuous mode [ 877.517516][T17355] debugfs: 'hsr0' already exists in 'hsr' [ 878.025975][T17355] Cannot create hsr debugfs directory [ 878.170999][T13301] IPVS: stop unused estimator thread 0... [ 878.547317][T17494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 878.862558][ T5132] Bluetooth: hci1: command 0x0405 tx timeout [ 880.236205][T17518] netlink: 'syz.3.3316': attribute type 10 has an invalid length. [ 881.012534][T17518] team0: Device vxcan1 is of different type [ 882.281349][T17355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 882.319480][T17355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 882.404269][T17355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 882.499400][T17355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 883.190669][T17355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.206644][T17355] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.327359][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.334463][ T6959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.358258][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.365429][ T6959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.383847][T17569] netlink: 'syz.2.3325': attribute type 10 has an invalid length. [ 883.392808][T17569] team0: Device vxcan1 is of different type [ 884.385025][T17355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.466319][T17355] veth0_vlan: entered promiscuous mode [ 884.499980][T17355] veth1_vlan: entered promiscuous mode [ 884.595980][T17355] veth0_macvtap: entered promiscuous mode [ 884.630641][T17355] veth1_macvtap: entered promiscuous mode [ 885.534964][T17355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.769279][T17355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.892568][ T6959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.903559][ T6959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.943109][ T6959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.969178][ T6959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.210335][T13301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.248747][T13301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.732604][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.751752][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.015676][T17722] input: syz1 as /devices/virtual/input/input110 [ 893.551821][ T792] IPVS: starting estimator thread 0... [ 893.640549][T17748] IPVS: using max 36 ests per chain, 86400 per kthread [ 895.447598][T17787] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 896.279895][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3379'. [ 896.291495][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3379'. [ 896.301269][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3379'. [ 896.329561][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3379'. [ 896.613288][T17810] input: syz1 as /devices/virtual/input/input111 [ 900.927502][T17885] fuse: Bad value for 'fd' [ 901.825075][T17896] input: syz1 as /devices/virtual/input/input112 [ 902.770891][ T5949] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 902.833767][ T792] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 902.973801][ T5949] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.302447][ T792] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 903.317576][ T5949] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 903.326628][ T792] usb 2-1: config 0 has no interface number 0 [ 903.337823][ T792] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 903.371143][ T792] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 903.389526][ T5949] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 903.419174][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.429196][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.470719][ T5949] usb 1-1: Product: syz [ 903.481172][ T792] usb 2-1: config 0 descriptor?? [ 903.487051][ T5949] usb 1-1: Manufacturer: syz [ 903.507284][ T5949] usb 1-1: SerialNumber: syz [ 903.513705][ T792] ttusbir 2-1:0.83: cannot find expected altsetting [ 903.770662][T17918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3421'. [ 903.837774][ T5949] usb 1-1: 0:2 : does not exist [ 903.980077][ T5949] hub 1-1:1.1: Invalid hub with more than one config or interface [ 904.145957][T17932] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 904.220594][ T5949] hub 1-1:1.1: probe with driver hub failed with error -22 [ 904.290006][ T5949] usb 1-1: USB disconnect, device number 75 [ 904.399799][T13494] udevd[13494]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.513768][ T7102] usb 2-1: USB disconnect, device number 14 [ 905.700424][ T5949] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 905.861933][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 905.904443][ T5949] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 905.913752][ T5949] usb 1-1: config 6 has no interface number 0 [ 905.919819][ T5949] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 906.117021][ T5949] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 906.138818][ T5949] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 906.784409][ T5949] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 906.848633][ T5949] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 906.867396][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.893320][ T5949] usb 1-1: Product: syz [ 906.918528][ T5949] usb 1-1: Manufacturer: syz [ 906.928769][ T5949] usb 1-1: SerialNumber: syz [ 906.951314][ T5949] hso 1-1:6.2: Failed to find BULK IN ep [ 907.161066][ T7102] usb 1-1: USB disconnect, device number 76 [ 907.279433][T17972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3434'. [ 909.121635][ T7103] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 909.333101][ T7103] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 909.345330][ T7103] usb 4-1: config 0 has no interface number 0 [ 909.368604][ T7103] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 909.399099][ T7103] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 909.429810][ T7103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.459821][ T7103] usb 4-1: config 0 descriptor?? [ 909.507948][ T7103] ttusbir 4-1:0.83: cannot find expected altsetting [ 910.171773][T18015] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 912.450527][T18037] tipc: Enabling of bearer rejected, failed to enable media [ 914.462272][ T5949] usb 4-1: USB disconnect, device number 61 [ 916.897534][ T5878] IPVS: starting estimator thread 0... [ 916.911442][T18111] IPVS: sh: FWM 3 0x00000003 - no destination available [ 916.918441][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 917.050378][T18115] IPVS: using max 76 ests per chain, 182400 per kthread [ 917.330396][ T7103] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 917.521862][ T7103] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.579805][ T7103] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 917.610389][ T7103] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 917.643710][ T7103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.671052][ T7103] usb 1-1: config 0 descriptor?? [ 917.713233][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3481'. [ 917.832186][T18133] overlayfs: missing 'lowerdir' [ 920.335923][ T5878] usb 1-1: USB disconnect, device number 77 [ 920.458096][T18179] overlayfs: missing 'lowerdir' [ 921.832701][T18195] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 922.381375][T18195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 922.486615][T18212] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3502'. [ 923.910760][T18232] overlayfs: missing 'lowerdir' [ 924.186004][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 924.198231][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 924.294864][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 924.308358][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 925.453668][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 925.466784][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 925.486394][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 925.906580][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 926.505688][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.519142][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.653265][T18281] netlink: 'syz.5.3520': attribute type 1 has an invalid length. [ 926.848994][T18281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.000595][T18289] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3522'. [ 927.284112][T18295] overlayfs: missing 'lowerdir' [ 930.343760][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3532'. [ 932.891753][T18380] tipc: Enabling of bearer rejected, failed to enable media [ 933.765566][T18400] fuse: Bad value for 'group_id' [ 933.838961][T18400] fuse: Bad value for 'group_id' [ 934.804706][T18409] orangefs_mount: mount request failed with -4 [ 934.965678][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3557'. [ 935.365503][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3557'. [ 935.432070][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3557'. [ 935.640859][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3557'. [ 935.831504][T18442] tipc: Enabling of bearer rejected, failed to enable media [ 936.311305][T18459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3566'. [ 936.332081][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3566'. [ 937.294749][T18466] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 937.350707][T18466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 937.940549][ T7102] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 938.102915][ T7102] usb 2-1: Using ep0 maxpacket: 8 [ 938.140855][ T7102] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 938.148878][ T7102] usb 2-1: config 6 has no interface number 0 [ 938.155457][ T7102] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 938.165334][ T7102] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 938.177078][ T7102] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 938.188212][ T7102] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 938.200167][ T7102] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 938.213821][ T7102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.223120][ T7102] usb 2-1: Product: syz [ 938.254212][ T7102] usb 2-1: Manufacturer: syz [ 938.262195][ T7102] usb 2-1: SerialNumber: syz [ 938.298333][ T7102] hso 2-1:6.2: Failed to find BULK IN ep [ 938.528089][T18483] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3572'. [ 938.564654][ T7102] usb 2-1: USB disconnect, device number 15 [ 939.051280][T18489] syzkaller0: entered promiscuous mode [ 939.067341][T18489] syzkaller0: entered allmulticast mode [ 940.872797][T18500] tipc: Enabling of bearer rejected, failed to enable media [ 940.883264][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3579'. [ 941.510395][ T5878] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 941.750425][ T792] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 941.908718][ T5878] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 941.922876][ T5878] usb 4-1: config 0 has no interface number 0 [ 941.929019][ T5878] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 941.945835][T18540] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3587'. [ 942.079915][ T5878] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 942.089334][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.101357][ T5878] usb 4-1: config 0 descriptor?? [ 942.110643][ T5878] ttusbir 4-1:0.83: cannot find expected altsetting [ 942.280528][ T792] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 942.288764][ T792] usb 6-1: config 0 has no interface number 0 [ 942.299236][ T792] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 942.315108][ T792] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 942.331139][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.372986][ T792] usb 6-1: config 0 descriptor?? [ 942.390221][ T792] ttusbir 6-1:0.83: cannot find expected altsetting [ 942.482156][ T7103] usb 4-1: USB disconnect, device number 62 [ 942.705875][T18551] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 944.477242][T18570] netlink: 'syz.3.3594': attribute type 11 has an invalid length. [ 944.609540][ T5878] usb 6-1: USB disconnect, device number 58 [ 945.254934][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'. [ 945.296521][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'. [ 945.314242][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'. [ 945.325258][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'. [ 945.570487][T18585] netlink: 'syz.2.3601': attribute type 1 has an invalid length. [ 945.756853][T18585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 946.073925][T18594] syzkaller0: entered promiscuous mode [ 946.079399][T18594] syzkaller0: entered allmulticast mode [ 946.170916][ T5132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 946.287029][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 946.309940][ T5132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 946.317827][ T5132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 946.325376][ T5132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 946.462668][T15244] Bluetooth: hci1: command 0x0405 tx timeout [ 946.690367][ T5878] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 946.773783][ T792] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 946.788745][T18599] chnl_net:caif_netlink_parms(): no params data found [ 946.868560][ T5878] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 946.877598][ T1107] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.890490][ T5878] usb 1-1: config 0 has no interface number 0 [ 947.107541][ T792] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.126735][ T5878] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 947.146258][ T792] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 947.176332][ T5878] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 947.198389][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.213491][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.224228][ T792] usb 4-1: config 0 descriptor?? [ 947.264847][ T792] pwc: Askey VC010 type 2 USB webcam detected. [ 947.272178][ T5878] usb 1-1: config 0 descriptor?? [ 947.360745][ T5878] ttusbir 1-1:0.83: cannot find expected altsetting [ 947.432822][ T1107] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.484624][T18599] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.500951][T18599] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.520879][T18599] bridge_slave_0: entered allmulticast mode [ 947.536210][T18599] bridge_slave_0: entered promiscuous mode [ 947.645136][ T792] pwc: recv_control_msg error -32 req 02 val 2b00 [ 947.658951][ T1107] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.672157][ T792] pwc: recv_control_msg error -32 req 02 val 2700 [ 947.679419][ T792] pwc: recv_control_msg error -32 req 02 val 2c00 [ 947.690090][ T792] pwc: recv_control_msg error -32 req 04 val 1000 [ 947.702179][T18599] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.716137][ T792] pwc: recv_control_msg error -32 req 04 val 1300 [ 947.723782][T18599] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.735432][ T792] pwc: recv_control_msg error -32 req 04 val 1400 [ 947.749952][T18599] bridge_slave_1: entered allmulticast mode [ 947.756532][ T792] pwc: recv_control_msg error -32 req 02 val 2000 [ 947.768120][ T792] pwc: recv_control_msg error -32 req 02 val 2100 [ 947.779556][T18599] bridge_slave_1: entered promiscuous mode [ 947.791690][ T792] pwc: recv_control_msg error -32 req 04 val 1500 [ 947.805732][T18625] netlink: 'syz.1.3609': attribute type 11 has an invalid length. [ 947.818026][ T792] pwc: recv_control_msg error -71 req 02 val 2500 [ 947.825423][ T792] pwc: recv_control_msg error -71 req 02 val 2400 [ 947.832813][ T792] pwc: recv_control_msg error -71 req 02 val 2600 [ 947.849156][ T792] pwc: recv_control_msg error -71 req 02 val 2900 [ 947.863988][ T792] pwc: recv_control_msg error -71 req 02 val 2800 [ 947.871538][ T792] pwc: recv_control_msg error -71 req 04 val 1100 [ 947.878297][ T792] pwc: recv_control_msg error -71 req 04 val 1200 [ 947.889748][ T792] pwc: Registered as video103. [ 947.902331][ T792] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input118 [ 947.932172][ T5878] usb 1-1: USB disconnect, device number 78 [ 947.965304][ T792] usb 4-1: USB disconnect, device number 63 [ 947.978078][ T1107] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.033369][T18599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.047134][T18599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.109970][T18599] team0: Port device team_slave_0 added [ 948.123179][T18599] team0: Port device team_slave_1 added [ 948.252311][T18599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.260431][T18599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.287186][T18599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.369696][T18599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.380854][T15244] Bluetooth: hci3: command tx timeout [ 948.401505][T18599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.441638][T18599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.020430][T15244] Bluetooth: hci4: command 0x0405 tx timeout [ 949.215486][T18599] hsr_slave_0: entered promiscuous mode [ 949.227406][T18599] hsr_slave_1: entered promiscuous mode [ 949.240378][T18599] debugfs: 'hsr0' already exists in 'hsr' [ 949.250066][T18599] Cannot create hsr debugfs directory [ 949.257348][T18645] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3615'. [ 949.552675][T18651] openvswitch: netlink: Flow actions attr not present in new flow. [ 949.764905][ T1107] bridge_slave_1: left allmulticast mode [ 949.774534][ T1107] bridge_slave_1: left promiscuous mode [ 949.780313][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.860431][ T5949] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 949.886065][ T1107] bridge_slave_0: left allmulticast mode [ 949.933344][ T1107] bridge_slave_0: left promiscuous mode [ 949.945914][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.059594][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 950.073736][ T5949] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 950.082315][ T5949] usb 4-1: config 6 has no interface number 0 [ 950.089159][ T5949] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 950.129162][ T5949] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 950.176589][ T5949] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 950.212076][ T5949] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 950.259731][ T5949] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 950.287251][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.315187][ T1107] bond1 (unregistering): Released all slaves [ 950.325672][ T5949] usb 4-1: Product: syz [ 950.335455][ T5949] usb 4-1: Manufacturer: syz [ 950.352972][ T5949] usb 4-1: SerialNumber: syz [ 950.364079][ T1107] bond2 (unregistering): Released all slaves [ 950.400175][ T5949] hso 4-1:6.2: Failed to find BULK IN ep [ 950.412391][ T1107] bond3 (unregistering): Released all slaves [ 950.460411][ T5815] Bluetooth: hci3: command tx timeout [ 950.468490][ T1107] bond0 (unregistering): Released all slaves [ 950.621526][ T5891] usb 4-1: USB disconnect, device number 64 [ 951.708131][ T1107] hsr_slave_0: left promiscuous mode [ 951.730380][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.750949][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.062268][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.069949][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.133479][ T1107] veth1_macvtap: left promiscuous mode [ 952.226163][ T1107] veth0_macvtap: left promiscuous mode [ 952.451470][ T1107] veth1_vlan: left promiscuous mode [ 952.496672][ T1107] veth0_vlan: left promiscuous mode [ 952.550823][ T5815] Bluetooth: hci3: command tx timeout [ 952.797228][T18701] fuse: Bad value for 'fd' [ 952.873462][ T5949] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 953.503592][ T5949] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 953.515283][ T5949] usb 2-1: config 0 has no interface number 0 [ 953.530210][ T5949] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 953.556780][ T5949] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 953.638631][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.663777][ T5949] usb 2-1: config 0 descriptor?? [ 953.686593][ T5949] ttusbir 2-1:0.83: cannot find expected altsetting [ 954.647496][ T5815] Bluetooth: hci3: command tx timeout [ 954.665991][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 954.729290][T18724] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3635'. [ 954.743794][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 956.035680][ T7102] usb 2-1: USB disconnect, device number 16 [ 956.182608][T18599] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 956.206332][T18743] fuse: Invalid rootmode [ 956.221685][T18599] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 956.496749][T18599] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 956.578231][T18599] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 956.615380][ T1107] IPVS: stop unused estimator thread 0... [ 957.367793][T18772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3645'. [ 957.652827][ T7103] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 957.711077][T18599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.191887][ T7103] usb 3-1: Using ep0 maxpacket: 8 [ 958.209192][T18599] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.227425][ T7103] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 958.240151][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.240281][ T7103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.247314][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.257531][ T7103] usb 3-1: Product: syz [ 958.266763][ T7103] usb 3-1: Manufacturer: syz [ 958.271946][ T7103] usb 3-1: SerialNumber: syz [ 958.288047][ T7103] usb 3-1: config 0 descriptor?? [ 958.318432][ T7103] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 958.327615][ T7103] pctv452e: pctv452e_power_ctrl: 1 [ 958.327615][ T7103] [ 958.331449][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.336093][ T7103] usb 3-1: selecting invalid altsetting 3 [ 958.342066][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.408399][ T7103] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 958.408399][ T7103] [ 958.420556][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 958.433134][ T7103] dvb-usb: bulk message failed: -22 (5/0) [ 958.439755][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 958.463744][ T7103] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 958.477034][ T7103] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 958.497938][ T7103] usb 3-1: media controller created [ 958.515130][ T7103] dvb-usb: bulk message failed: -22 (8/0) [ 958.537227][ T7103] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 958.563064][ T7103] dvb-usb: MAC address reading failed. [ 958.707678][ T7103] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 959.072279][ T7103] DVB: Unable to find symbol stb0899_attach() [ 959.145418][ T7103] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 959.171979][T18599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.553480][ T7103] rc_core: IR keymap rc-tt-1500 not found [ 959.570422][ T7103] Registered IR keymap rc-empty [ 959.576193][ T7103] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 959.621011][T18806] fuse: Invalid rootmode [ 959.628914][ T7103] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input120 [ 959.685825][ T7103] dvb-usb: schedule remote query interval to 100 msecs. [ 959.990766][ T7103] pctv452e: pctv452e_power_ctrl: 0 [ 959.990766][ T7103] [ 959.998091][ T7103] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 960.046733][ T7103] usb 3-1: USB disconnect, device number 63 [ 960.295940][ T7103] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 960.409590][T18599] veth0_vlan: entered promiscuous mode [ 960.444602][T18599] veth1_vlan: entered promiscuous mode [ 960.513931][T18599] veth0_macvtap: entered promiscuous mode [ 960.525207][T18599] veth1_macvtap: entered promiscuous mode [ 960.548703][T18599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.564155][T18599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.778086][T13305] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.805672][T13305] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.832200][T13305] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.146122][T13305] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.267668][T13305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.312881][T13305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.378710][ T6959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.392043][ T6959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.706071][T18842] input: syz1 as /devices/virtual/input/input121 [ 962.094028][T18848] xt_ecn: cannot match TCP bits for non-tcp packets [ 962.491919][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3665'. [ 962.520005][T18857] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 962.560458][T18857] ALSA: mixer_oss: invalid index 1374389 [ 963.700462][ T5925] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 963.901542][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 963.921852][ T5925] usb 4-1: config index 0 descriptor too short (expected 53252, got 18) [ 963.938231][ T5925] usb 4-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 963.949853][ T5925] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 963.962143][ T5925] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 964.001641][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.023469][ T5925] usb 4-1: Product: syz [ 964.209458][ T5925] usb 4-1: Manufacturer: syz [ 964.229257][ T5925] usb 4-1: SerialNumber: syz [ 964.245878][ T5925] usb 4-1: config 0 descriptor?? [ 964.251094][ T7103] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 964.423093][ T5815] Bluetooth: hci5: command 0x0406 tx timeout [ 964.451989][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3676'. [ 964.486812][ T7103] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 964.590277][ T7103] usb 6-1: config 0 has no interface number 0 [ 964.606554][ T7103] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 964.651108][ T7103] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 964.711569][ T7103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.755923][ T7103] usb 6-1: config 0 descriptor?? [ 964.811507][ T7103] ttusbir 6-1:0.83: cannot find expected altsetting [ 965.350335][ T792] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 965.478708][T18900] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 965.719620][ T5878] usb 4-1: USB disconnect, device number 65 [ 965.800438][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 965.808579][ T792] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 965.828113][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.848132][ T792] usb 2-1: Product: syz [ 965.858773][ T792] usb 2-1: Manufacturer: syz [ 965.870889][ T792] usb 2-1: SerialNumber: syz [ 965.888291][ T792] usb 2-1: config 0 descriptor?? [ 965.905145][ T792] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 965.965781][ T792] pctv452e: pctv452e_power_ctrl: 1 [ 965.965781][ T792] [ 966.034778][ T792] usb 2-1: selecting invalid altsetting 3 [ 966.073810][ T792] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 966.073810][ T792] [ 966.353197][ T792] dvb-usb: bulk message failed: -22 (5/0) [ 966.543801][ T792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 966.568012][ T792] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 966.680125][ T5925] usb 6-1: USB disconnect, device number 59 [ 966.707428][ T792] usb 2-1: media controller created [ 966.735790][ T792] dvb-usb: bulk message failed: -22 (8/0) [ 966.755030][ T792] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 966.775392][ T792] dvb-usb: MAC address reading failed. [ 966.781906][T18909] overlayfs: missing 'workdir' [ 967.096758][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 967.273236][ T792] DVB: Unable to find symbol stb0899_attach() [ 967.281084][ T792] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 967.304213][T18919] xt_ecn: cannot match TCP bits for non-tcp packets [ 967.442171][ T792] rc_core: IR keymap rc-tt-1500 not found [ 967.854812][ T792] Registered IR keymap rc-empty [ 967.878959][ T792] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 967.915148][ T792] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input123 [ 967.951682][ T792] dvb-usb: schedule remote query interval to 100 msecs. [ 967.996081][ T792] pctv452e: pctv452e_power_ctrl: 0 [ 967.996081][ T792] [ 968.029071][ T792] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 968.178582][ T5878] dvb-usb: bulk message failed: -22 (4/0) [ 968.186661][ T792] usb 2-1: USB disconnect, device number 17 [ 968.211258][ T5878] dvb-usb: error -22 while querying for an remote control event. [ 968.360518][ T792] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 968.397316][T18937] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 968.911675][T18950] overlayfs: failed lookup in lower (newroot/99, name='file1', err=-40): overlapping layers [ 968.954878][T18950] overlayfs: failed lookup in lower (newroot/99, name='file1', err=-40): overlapping layers [ 969.202983][T18951] xt_ecn: cannot match TCP bits for non-tcp packets [ 970.135620][T18976] 9p: Unknown Cache mode or invalid value fscŠöQ‡ ÿÿ [ 970.184996][T18978] 9p: Unknown Cache mode or invalid value ☇ÿô´’~ÿÿ [ 970.340476][T18980] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3703'. [ 970.634400][T18961] orangefs_mount: mount request failed with -4 [ 970.768535][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 970.769250][T18990] input: syz1 as /devices/virtual/input/input124 [ 970.855798][T18992] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 970.873679][T18992] ALSA: mixer_oss: invalid index 1374389 [ 971.690371][ T7103] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 971.886282][ T7103] usb 4-1: Using ep0 maxpacket: 8 [ 971.903317][T19013] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 971.918521][ T7103] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 971.943918][ T7103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.976893][ T7103] usb 4-1: Product: syz [ 972.000515][ T7103] usb 4-1: Manufacturer: syz [ 972.014542][ T7103] usb 4-1: SerialNumber: syz [ 972.031880][T19020] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3715'. [ 972.066480][ T7103] usb 4-1: config 0 descriptor?? [ 972.078674][ T7103] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 972.094497][T19023] openvswitch: netlink: Flow actions attr not present in new flow. [ 972.135243][ T7103] pctv452e: pctv452e_power_ctrl: 1 [ 972.135243][ T7103] [ 972.148888][T19025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3719'. [ 972.158747][ T7103] usb 4-1: selecting invalid altsetting 3 [ 972.178294][ T7103] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 972.178294][ T7103] [ 972.191015][T19027] 9p: Unknown Cache mode or invalid value fscŠöQ‡ ÿÿ [ 972.198790][T19021] 9p: Unknown Cache mode or invalid value ☇ÿô´’~ÿÿ [ 972.215199][ T7103] dvb-usb: bulk message failed: -22 (5/0) [ 972.239309][ T7103] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 972.277473][ T7103] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 972.296252][ T7103] usb 4-1: media controller created [ 972.301840][T19029] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3720'. [ 972.313015][ T7103] dvb-usb: bulk message failed: -22 (8/0) [ 972.325419][ T7103] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 972.347188][ T7103] dvb-usb: MAC address reading failed. [ 972.401037][ T7103] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 972.486895][ T7103] DVB: Unable to find symbol stb0899_attach() [ 972.505531][ T7103] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 972.812266][ T7103] rc_core: IR keymap rc-tt-1500 not found [ 972.818144][ T7103] Registered IR keymap rc-empty [ 972.831793][ T7103] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 972.846415][ T7103] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input125 [ 972.866953][ T7103] dvb-usb: schedule remote query interval to 100 msecs. [ 972.876116][ T7103] pctv452e: pctv452e_power_ctrl: 0 [ 972.876116][ T7103] [ 972.884378][ T7103] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 972.914170][ T7103] usb 4-1: USB disconnect, device number 66 [ 973.003658][ T7103] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 973.163633][T19040] input: syz1 as /devices/virtual/input/input126 [ 973.690352][ T792] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 973.840345][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 973.847781][ T792] usb 3-1: config index 0 descriptor too short (expected 53252, got 18) [ 973.878791][ T792] usb 3-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 973.879689][T19037] orangefs_mount: mount request failed with -4 [ 973.926665][T19054] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 973.939481][ T792] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 973.953443][ T792] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 974.131106][T19057] xt_ecn: cannot match TCP bits for non-tcp packets [ 974.493228][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.532570][ T792] usb 3-1: Product: syz [ 974.536764][ T792] usb 3-1: Manufacturer: syz [ 974.541447][ T792] usb 3-1: SerialNumber: syz [ 974.556576][ T792] usb 3-1: config 0 descriptor?? [ 974.796893][T19067] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3730'. [ 975.407588][T19073] syzkaller0: entered promiscuous mode [ 975.415410][T19073] syzkaller0: entered allmulticast mode [ 975.527560][T19078] 9p: Unknown Cache mode or invalid value fscŠöQ‡ ÿÿ [ 975.670375][T19080] 9p: Unknown Cache mode or invalid value ☇ÿô´’~ÿÿ [ 975.832655][T19085] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3734'. [ 976.715426][T19089] xt_ecn: cannot match TCP bits for non-tcp packets [ 977.213225][T19095] input: syz1 as /devices/virtual/input/input127 [ 977.510518][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3740'. [ 977.750945][ T5878] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 977.766514][ T5891] usb 3-1: USB disconnect, device number 64 [ 977.890816][T19109] xt_ecn: cannot match TCP bits for non-tcp packets [ 978.016874][ T5878] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 978.127176][ T5878] usb 4-1: config 0 has no interface number 0 [ 978.160960][ T5878] usb 4-1: config 0 interface 11 altsetting 245 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 978.173044][ T5878] usb 4-1: config 0 interface 11 altsetting 245 has an invalid descriptor for endpoint zero, skipping [ 978.184226][ T5878] usb 4-1: config 0 interface 11 has no altsetting 0 [ 978.191033][ T5878] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 978.200197][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.210589][ T5878] usb 4-1: config 0 descriptor?? [ 978.217930][ T5878] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 978.312915][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 87 [ 978.334140][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 978.342414][T19114] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3744'. [ 978.360402][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 978.392670][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 978.432268][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 978.457639][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 978.587088][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 978.721034][ T5878] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 978.739166][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 978.773848][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 978.807395][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 978.829538][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 978.850514][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 978.858306][ T5878] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 978.892586][ T5878] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 978.897478][T19122] 9p: Unknown Cache mode or invalid value fscŠöQ‡ ÿÿ [ 978.935612][ T5878] usb 4-1: USB disconnect, device number 67 [ 978.951685][ T5878] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 979.069089][ T5878] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 979.099742][ T5878] keyspan 4-1:0.11: device disconnected [ 979.110951][T19122] 9p: Unknown Cache mode or invalid value ☇ÿô´’~ÿÿ [ 979.509481][ T7103] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 979.731798][ T7103] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 979.740131][ T7103] usb 1-1: config 0 has no interface number 0 [ 979.746564][T15244] Bluetooth: hci0: command 0x0406 tx timeout [ 979.759935][ T7103] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 979.788644][ T7103] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 979.797799][ T7103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.811085][ T7103] usb 1-1: config 0 descriptor?? [ 979.820454][ T7103] ttusbir 1-1:0.83: cannot find expected altsetting [ 979.921619][T19135] input: syz1 as /devices/virtual/input/input129 [ 980.673816][T19138] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 980.842535][T19141] 9p: Unknown Cache mode or invalid value fscŠöQ‡ ÿÿ [ 980.926433][T19141] 9p: Unknown Cache mode or invalid value ☇ÿô´’~ÿÿ [ 981.684791][T19151] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 982.989647][ T5864] usb 1-1: USB disconnect, device number 79 [ 983.646161][T19174] 9p: Unknown Cache mode or invalid value fscŠöQ‡ ÿÿ [ 983.801253][T19177] 9p: Unknown Cache mode or invalid value ☇ÿô´’~ÿÿ [ 985.609301][T19196] Bluetooth: MGMT ver 1.23 [ 985.847361][T19208] fuse: Unknown parameter 'group_id00000000000000000000' [ 986.024176][T19217] xt_ecn: cannot match TCP bits for non-tcp packets [ 986.110398][ T5878] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 986.282713][ T5878] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 986.294172][ T5878] usb 1-1: config 0 has no interface number 0 [ 986.300693][ T5878] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 986.310903][ T5878] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 986.320013][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.333799][ T5878] usb 1-1: config 0 descriptor?? [ 986.348783][ T5878] ttusbir 1-1:0.83: cannot find expected altsetting [ 986.377545][T19219] 9p: Unknown Cache mode or invalid value fscŠöQ‡ ÿÿ [ 986.409999][T19219] 9p: Unknown Cache mode or invalid value ☇ÿô´’~ÿÿ [ 986.450661][T19222] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 986.573903][T19224] syzkaller0: entered promiscuous mode [ 986.615581][T19225] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 986.629705][T19224] syzkaller0: entered allmulticast mode [ 987.905402][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.912187][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.953996][ T6972] bridge_slave_1: left allmulticast mode [ 987.963872][T19245] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3783'. [ 987.978720][ T6972] bridge_slave_1: left promiscuous mode [ 987.992651][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.004081][T19233] orangefs_mount: mount request failed with -4 [ 988.015696][ T6972] bridge_slave_0: left allmulticast mode [ 988.047496][ T6972] bridge_slave_0: left promiscuous mode [ 988.092795][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.955926][ T792] usb 1-1: USB disconnect, device number 80 [ 989.980388][T15244] Bluetooth: hci1: command 0x0405 tx timeout [ 990.078505][ T6972] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 990.181316][T19273] fuse: Unknown parameter 'group_id00000000000000000000' [ 990.188646][ T6972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.201804][ T6972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.212626][ T6972] bond0 (unregistering): Released all slaves [ 990.224479][ T6972] bond1 (unregistering): Released all slaves [ 990.244582][ T6972] bond2 (unregistering): Released all slaves [ 990.264500][ T6972] bond3 (unregistering): Released all slaves [ 990.371617][ T6972] tipc: Left network mode [ 990.404742][ T6972] IPVS: stopping master sync thread 11806 ... [ 990.803779][T19283] input: syz1 as /devices/virtual/input/input131 [ 991.222298][ T6972] hsr_slave_0: left promiscuous mode [ 991.246370][ T6972] hsr_slave_1: left promiscuous mode [ 991.272825][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.300360][ T6972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.447570][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.976552][ T6972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.332540][ T6972] veth1_macvtap: left promiscuous mode [ 992.362345][ T6972] veth0_macvtap: left promiscuous mode [ 992.382892][ T6972] veth1_vlan: left promiscuous mode [ 992.388194][ T6972] veth0_vlan: left promiscuous mode [ 993.991773][ T6972] team0 (unregistering): Port device team_slave_1 removed [ 994.061067][ T6972] team0 (unregistering): Port device team_slave_0 removed [ 994.413112][T19352] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 994.537932][T19338] syzkaller0: entered promiscuous mode [ 994.543727][T19338] syzkaller0: entered allmulticast mode [ 995.797967][ T6972] IPVS: stop unused estimator thread 0... [ 996.313611][T19374] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3813'. [ 996.897077][T19381] xt_ecn: cannot match TCP bits for non-tcp packets [ 996.914522][ T792] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 997.270482][ T792] usb 1-1: Using ep0 maxpacket: 32 [ 997.277452][ T792] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 997.287586][ T792] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 997.299960][ T792] usb 1-1: config 0 interface 0 has no altsetting 0 [ 997.330276][ T792] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 997.339579][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.350210][ T792] usb 1-1: Product: syz [ 997.360572][ T792] usb 1-1: Manufacturer: syz [ 997.367552][ T792] usb 1-1: SerialNumber: syz [ 997.419131][ T792] usb 1-1: config 0 descriptor?? [ 997.828948][ T792] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 997.836184][ T792] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 997.848932][T19397] input: syz1 as /devices/virtual/input/input132 [ 998.042128][ T5878] usb 1-1: USB disconnect, device number 81 [ 998.971235][T19413] netlink: 'syz.5.3824': attribute type 72 has an invalid length. [ 998.979564][T19413] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3824'. [ 999.103678][T19416] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 999.281567][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3827'. [ 999.292303][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3827'. [ 999.302045][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3827'. [ 999.320890][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3827'. [ 999.771304][T19428] xt_ecn: cannot match TCP bits for non-tcp packets [ 1001.388019][T19443] input: syz1 as /devices/virtual/input/input133 [ 1001.517177][T19452] 9p: Unknown Cache mode or invalid value fscŠöQ‡ ÿÿ [ 1001.533507][T19452] 9p: Unknown Cache mode or invalid value ☇ÿô´’~ÿÿ [ 1001.954737][T19455] netlink: 'syz.3.3836': attribute type 72 has an invalid length. [ 1002.011238][T19455] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3836'. [ 1003.912622][T19478] syz_tun: entered allmulticast mode [ 1003.956284][T19477] syz_tun: left allmulticast mode [ 1005.410514][T19492] autofs: Bad value for 'fd' [ 1006.763991][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1006.863226][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1006.885907][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1007.282230][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1007.348318][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3854'. [ 1007.401280][T19515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3854'. [ 1007.423050][T19515] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1007.430716][T19515] ALSA: mixer_oss: invalid index 1374389 [ 1008.521289][T19519] fuse: Bad value for 'fd' [ 1011.304059][T19557] syz_tun: entered allmulticast mode [ 1011.315098][T19556] syz_tun: left allmulticast mode [ 1011.689911][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1011.730988][T19564] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1011.766235][T19564] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1011.780621][T19564] ALSA: mixer_oss: invalid index 1374389 [ 1011.988781][T19571] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3871'. [ 1012.374044][T19583] xt_ecn: cannot match TCP bits for non-tcp packets [ 1013.312892][ T5949] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1013.524891][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1013.683612][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 1013.695883][ T5949] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 1013.804609][ T5949] usb 2-1: config 6 has no interface number 0 [ 1013.817948][T19598] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1013.829854][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1013.838932][ T5949] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1014.000351][ T5949] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1014.051299][ T5949] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1014.083247][ T5949] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1014.154598][ T5949] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1014.204528][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.219635][ T5949] usb 2-1: Product: syz [ 1014.234855][ T5949] usb 2-1: Manufacturer: syz [ 1014.244249][ T5949] usb 2-1: SerialNumber: syz [ 1014.288255][ T5949] hso 2-1:6.2: Failed to find BULK IN ep [ 1014.313617][T19605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1014.351859][T19605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1014.409900][T19605] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1014.433874][T19605] ALSA: mixer_oss: invalid index 1374389 [ 1014.484938][ T7102] usb 2-1: USB disconnect, device number 18 [ 1015.238520][T19616] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3885'. [ 1015.802721][T19631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3890'. [ 1015.880375][ T5949] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1016.180689][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 1016.191736][ T5949] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1016.202043][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.216138][ T5949] usb 4-1: Product: syz [ 1016.235433][ T5949] usb 4-1: Manufacturer: syz [ 1016.251834][ T5949] usb 4-1: SerialNumber: syz [ 1016.305598][ T5949] usb 4-1: config 0 descriptor?? [ 1016.370162][T19638] fuse: Unknown parameter '0x0000000000000004' [ 1016.466154][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1016.492687][T19642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1016.512555][T19642] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1016.522576][T19642] ALSA: mixer_oss: invalid index 1374389 [ 1016.578332][ T5949] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1016.620413][ T5878] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1016.793864][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.810285][ T5878] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1016.829624][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.841667][ T5878] usb 2-1: config 0 descriptor?? [ 1016.850649][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 1016.932320][T19650] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3896'. [ 1017.334759][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1017.360281][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 1017.379587][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1017.748532][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 1017.800927][ T5878] pwc: recv_control_msg error -32 req 04 val 1300 [ 1017.808370][ T5878] pwc: recv_control_msg error -32 req 04 val 1400 [ 1017.815674][ T5878] pwc: recv_control_msg error -32 req 02 val 2000 [ 1017.823111][ T5878] pwc: recv_control_msg error -32 req 02 val 2100 [ 1018.037165][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 1018.134287][T19662] netlink: 'syz.0.3899': attribute type 4 has an invalid length. [ 1018.144290][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 1018.211157][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 1018.256683][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 1018.274392][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 1018.297413][ T5949] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1018.312251][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 1018.323675][ T5949] usb 4-1: USB disconnect, device number 68 [ 1018.338441][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 1018.355407][ T5878] pwc: Registered as video103. [ 1018.377139][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input134 [ 1018.442774][ T5878] usb 2-1: USB disconnect, device number 19 [ 1018.908453][T13301] nci: nci_rx_work: unknown MT 0x7 [ 1019.033172][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'. [ 1019.243498][T19684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3906'. [ 1019.256150][T19684] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1019.263784][T19684] ALSA: mixer_oss: invalid index 1374389 [ 1021.522524][T19722] netlink: 'syz.3.3916': attribute type 1 has an invalid length. [ 1023.483380][T19722] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1023.630427][ T7103] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1024.382099][ T7103] usb 6-1: Using ep0 maxpacket: 16 [ 1024.458348][ T7103] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1024.476602][ T7103] usb 6-1: config 0 has no interface number 0 [ 1024.483006][ T7103] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.501525][ T5949] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1025.015869][ T7103] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.026502][ T7103] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1025.035827][ T7103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.054555][ T7103] usb 6-1: config 0 descriptor?? [ 1025.060004][ T7103] usb 6-1: can't set config #0, error -71 [ 1025.077953][ T7103] usb 6-1: USB disconnect, device number 60 [ 1025.180441][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 1025.183791][T19748] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1025.236766][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1025.268384][ T7102] IPVS: starting estimator thread 0... [ 1025.370469][T19749] IPVS: using max 42 ests per chain, 100800 per kthread [ 1025.466997][ T5949] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1025.488553][ T5949] usb 1-1: config 6 has no interface number 0 [ 1025.494863][ T5949] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1025.504890][ T5949] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1025.540542][ T5949] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1025.585776][ T5949] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1025.621073][ T5949] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1025.633425][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.817461][ T5949] usb 1-1: Product: syz [ 1025.824524][ T5949] usb 1-1: Manufacturer: syz [ 1025.829269][ T5949] usb 1-1: SerialNumber: syz [ 1027.070077][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1027.090499][ T5949] usb 1-1: can't set config #6, error -32 [ 1027.241674][ T5949] usb 1-1: USB disconnect, device number 82 [ 1030.510429][ T7103] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1031.073399][ T7103] usb 2-1: Using ep0 maxpacket: 16 [ 1031.212399][ T7103] usb 2-1: device descriptor read/all, error -71 [ 1033.270527][ T5949] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1033.762566][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.811844][T19823] orangefs_mount: mount request failed with -4 [ 1033.856722][ T5949] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1033.871799][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.895919][ T5949] usb 6-1: config 0 descriptor?? [ 1033.921889][ T5949] pwc: Askey VC010 type 2 USB webcam detected. [ 1033.980284][ C1] ------------[ cut here ]------------ [ 1033.986494][ C1] ODEBUG: free active (active state 0) object: ffff888033a0a090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1033.999365][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.0.3945/19839 [ 1034.009525][ C1] Modules linked in: [ 1034.013878][ C1] CPU: 1 UID: 0 PID: 19839 Comm: syz.0.3945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1034.024804][ C1] Tainted: [L]=SOFTLOCKUP [ 1034.029110][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1034.039173][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1034.044973][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 52 7b e5 0b 41 56 48 8b 14 dd e0 18 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 cc 3a db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1034.064576][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 1034.070633][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1034.078588][ C1] RDX: ffffffff8c1b1820 RSI: ffffffff8c1b1440 RDI: ffffffff90e40580 [ 1034.086551][ C1] RBP: 0000000000000001 R08: ffff888033a0a090 R09: ffffffff8bb2ba00 [ 1034.094506][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b1440 [ 1034.102467][ C1] R13: ffffffff8bb2ba40 R14: ffffffff8a7be280 R15: ffffc90000a08b38 [ 1034.110428][ C1] FS: 0000000000000000(0000) GS:ffff888124442000(0000) knlGS:0000000000000000 [ 1034.119347][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1034.125917][ C1] CR2: 0000200000025000 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1034.133875][ C1] Call Trace: [ 1034.137130][ C1] [ 1034.139958][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1034.145583][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1034.151378][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1034.156916][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1034.162975][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1034.167893][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1034.173005][ C1] kfree+0x38f/0x6b0 [ 1034.176880][ C1] rose_timer_expiry+0x53f/0x630 [ 1034.181815][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1034.187255][ C1] call_timer_fn+0x19a/0x670 [ 1034.191858][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1034.196963][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1034.202431][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1034.207874][ C1] __run_timers+0x757/0xb30 [ 1034.212389][ C1] ? __pfx___run_timers+0x10/0x10 [ 1034.217402][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1034.222414][ C1] run_timer_base+0x114/0x190 [ 1034.227070][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1034.232259][ C1] run_timer_softirq+0x1a/0x50 [ 1034.237001][ C1] handle_softirqs+0x1eb/0x9e0 [ 1034.241753][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1034.247031][ C1] __irq_exit_rcu+0xef/0x150 [ 1034.251627][ C1] irq_exit_rcu+0x9/0x30 [ 1034.255866][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1034.261508][ C1] [ 1034.264433][ C1] [ 1034.267339][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1034.273308][ C1] RIP: 0010:free_unref_folios+0xa53/0x1790 [ 1034.279099][ C1] Code: 74 08 4c 89 f7 e8 1d 52 0e 00 49 63 45 34 49 8d 7d 38 48 89 fa 48 09 c3 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff df 80 3c 02 00 <0f> 85 a0 0b 00 00 48 89 ea 49 0b 5d 38 48 b8 00 00 00 00 00 fc ff [ 1034.298695][ C1] RSP: 0018:ffffc900049e71f0 EFLAGS: 00000246 [ 1034.304747][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8266fdc5 [ 1034.312704][ C1] RDX: 1ffffd40005c25af RSI: 0000000000000004 RDI: ffffea0002e12d78 [ 1034.320660][ C1] RBP: ffffea0002e12d48 R08: 0000000000000000 R09: fffff940005c25ae [ 1034.328607][ C1] R10: ffffea0002e12d77 R11: 0000000000000000 R12: 0000000000000000 [ 1034.336563][ C1] R13: ffffea0002e12d40 R14: ffffea0002e12d74 R15: dffffc0000000000 [ 1034.344523][ C1] ? free_unref_folios+0xa05/0x1790 [ 1034.349709][ C1] ? rcu_is_watching+0x12/0xc0 [ 1034.354461][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1034.360264][ C1] folios_put_refs+0x53c/0x840 [ 1034.365030][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1034.370321][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1034.376626][ C1] shmem_undo_range+0x5e5/0x1570 [ 1034.381569][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1034.386938][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1034.391869][ C1] ? find_held_lock+0x2b/0x80 [ 1034.396525][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 1034.401711][ C1] ? percpu_counter_add_batch+0xb9/0x230 [ 1034.407334][ C1] shmem_evict_inode+0x39e/0xbd0 [ 1034.412260][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 1034.417958][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1034.423414][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1034.429462][ C1] ? find_held_lock+0x2b/0x80 [ 1034.434123][ C1] ? evict+0x37e/0xad0 [ 1034.438176][ C1] ? evict+0x37e/0xad0 [ 1034.442236][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1034.447673][ C1] evict+0x3c2/0xad0 [ 1034.451556][ C1] ? find_held_lock+0x2b/0x80 [ 1034.456218][ C1] ? __pfx_evict+0x10/0x10 [ 1034.460622][ C1] ? iput.part.0+0x5fd/0xf50 [ 1034.465202][ C1] iput.part.0+0x605/0xf50 [ 1034.469619][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 1034.474904][ C1] iput+0x35/0x40 [ 1034.478525][ C1] dentry_unlink_inode+0x2a1/0x490 [ 1034.483624][ C1] __dentry_kill+0x1d0/0x600 [ 1034.488191][ C1] finish_dput+0x76/0x480 [ 1034.492508][ C1] dput.part.0+0x456/0x570 [ 1034.496929][ C1] dput+0x1f/0x30 [ 1034.500550][ C1] __fput+0x519/0xb40 [ 1034.504511][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1034.509700][ C1] task_work_run+0x150/0x240 [ 1034.514278][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1034.519364][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1034.524561][ C1] do_exit+0x8b8/0x2b60 [ 1034.528700][ C1] ? __pfx_do_exit+0x10/0x10 [ 1034.533288][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1034.538287][ C1] ? find_held_lock+0x2b/0x80 [ 1034.542960][ C1] ? get_signal+0x7e0/0x21e0 [ 1034.547535][ C1] do_group_exit+0xd5/0x2a0 [ 1034.552028][ C1] get_signal+0x1ec7/0x21e0 [ 1034.556515][ C1] ? __pfx_get_signal+0x10/0x10 [ 1034.561355][ C1] ? do_futex+0x192/0x350 [ 1034.565660][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 1034.571197][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1034.577358][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1034.582650][ C1] exit_to_user_mode_loop+0x86/0x4a0 [ 1034.587911][ C1] do_syscall_64+0x67c/0xf80 [ 1034.592488][ C1] ? clear_bhb_loop+0x40/0x90 [ 1034.597141][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.603019][ C1] RIP: 0033:0x7f168459c799 [ 1034.607409][ C1] Code: Unable to access opcode bytes at 0x7f168459c76f. [ 1034.614403][ C1] RSP: 002b:00007f16854630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1034.622798][ C1] RAX: fffffffffffffe00 RBX: 00007f1684816188 RCX: 00007f168459c799 [ 1034.630754][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1684816188 [ 1034.638698][ C1] RBP: 00007f1684816180 R08: 0000000000000000 R09: 0000000000000000 [ 1034.646651][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.654607][ C1] R13: 00007f1684816218 R14: 00007ffc1e8670a0 R15: 00007ffc1e867188 [ 1034.662567][ C1] [ 1034.665563][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1034.672817][ C1] CPU: 1 UID: 0 PID: 19839 Comm: syz.0.3945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1034.683723][ C1] Tainted: [L]=SOFTLOCKUP [ 1034.688016][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1034.698042][ C1] Call Trace: [ 1034.701315][ C1] [ 1034.704148][ C1] dump_stack_lvl+0x100/0x190 [ 1034.708810][ C1] vpanic+0x552/0x970 [ 1034.712765][ C1] ? __pfx_vpanic+0x10/0x10 [ 1034.717252][ C1] panic+0xd1/0xe0 [ 1034.720944][ C1] ? __pfx_panic+0x10/0x10 [ 1034.725338][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1034.730428][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1034.735790][ C1] ? debug_print_object+0x18e/0x2a0 [ 1034.740977][ C1] __warn.cold+0x191/0x348 [ 1034.745374][ C1] __report_bug+0x296/0x3d0 [ 1034.749864][ C1] ? debug_print_object+0x18e/0x2a0 [ 1034.755040][ C1] ? __pfx___report_bug+0x10/0x10 [ 1034.760039][ C1] ? arch_stack_walk+0x94/0xf0 [ 1034.764792][ C1] report_bug_entry+0xe1/0x290 [ 1034.769550][ C1] ? debug_print_object+0x19b/0x2a0 [ 1034.774751][ C1] handle_bug+0x1cd/0x2a0 [ 1034.779085][ C1] exc_invalid_op+0x17/0x50 [ 1034.783582][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1034.788419][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1034.794221][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 52 7b e5 0b 41 56 48 8b 14 dd e0 18 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 cc 3a db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1034.813810][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 1034.819878][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1034.827825][ C1] RDX: ffffffff8c1b1820 RSI: ffffffff8c1b1440 RDI: ffffffff90e40580 [ 1034.835769][ C1] RBP: 0000000000000001 R08: ffff888033a0a090 R09: ffffffff8bb2ba00 [ 1034.843715][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b1440 [ 1034.851659][ C1] R13: ffffffff8bb2ba40 R14: ffffffff8a7be280 R15: ffffc90000a08b38 [ 1034.859606][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1034.865229][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1034.870838][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1034.876625][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1034.882177][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1034.888225][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1034.893142][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1034.898227][ C1] kfree+0x38f/0x6b0 [ 1034.902116][ C1] rose_timer_expiry+0x53f/0x630 [ 1034.907027][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1034.912470][ C1] call_timer_fn+0x19a/0x670 [ 1034.917037][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1034.922124][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1034.927559][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1034.932989][ C1] __run_timers+0x757/0xb30 [ 1034.937472][ C1] ? __pfx___run_timers+0x10/0x10 [ 1034.942479][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1034.947481][ C1] run_timer_base+0x114/0x190 [ 1034.952137][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1034.957318][ C1] run_timer_softirq+0x1a/0x50 [ 1034.962061][ C1] handle_softirqs+0x1eb/0x9e0 [ 1034.966812][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1034.972081][ C1] __irq_exit_rcu+0xef/0x150 [ 1034.976652][ C1] irq_exit_rcu+0x9/0x30 [ 1034.980879][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1034.986490][ C1] [ 1034.989396][ C1] [ 1034.992301][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1034.998257][ C1] RIP: 0010:free_unref_folios+0xa53/0x1790 [ 1035.004040][ C1] Code: 74 08 4c 89 f7 e8 1d 52 0e 00 49 63 45 34 49 8d 7d 38 48 89 fa 48 09 c3 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff df 80 3c 02 00 <0f> 85 a0 0b 00 00 48 89 ea 49 0b 5d 38 48 b8 00 00 00 00 00 fc ff [ 1035.023631][ C1] RSP: 0018:ffffc900049e71f0 EFLAGS: 00000246 [ 1035.029673][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8266fdc5 [ 1035.037617][ C1] RDX: 1ffffd40005c25af RSI: 0000000000000004 RDI: ffffea0002e12d78 [ 1035.045559][ C1] RBP: ffffea0002e12d48 R08: 0000000000000000 R09: fffff940005c25ae [ 1035.053503][ C1] R10: ffffea0002e12d77 R11: 0000000000000000 R12: 0000000000000000 [ 1035.061445][ C1] R13: ffffea0002e12d40 R14: ffffea0002e12d74 R15: dffffc0000000000 [ 1035.069394][ C1] ? free_unref_folios+0xa05/0x1790 [ 1035.074576][ C1] ? rcu_is_watching+0x12/0xc0 [ 1035.079315][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1035.085099][ C1] folios_put_refs+0x53c/0x840 [ 1035.089853][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1035.095119][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1035.101421][ C1] shmem_undo_range+0x5e5/0x1570 [ 1035.106354][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1035.111716][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1035.116636][ C1] ? find_held_lock+0x2b/0x80 [ 1035.121287][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 1035.126461][ C1] ? percpu_counter_add_batch+0xb9/0x230 [ 1035.132075][ C1] shmem_evict_inode+0x39e/0xbd0 [ 1035.136994][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 1035.142702][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1035.148142][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1035.154189][ C1] ? find_held_lock+0x2b/0x80 [ 1035.158841][ C1] ? evict+0x37e/0xad0 [ 1035.162883][ C1] ? evict+0x37e/0xad0 [ 1035.166939][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1035.172380][ C1] evict+0x3c2/0xad0 [ 1035.176250][ C1] ? find_held_lock+0x2b/0x80 [ 1035.180904][ C1] ? __pfx_evict+0x10/0x10 [ 1035.185301][ C1] ? iput.part.0+0x5fd/0xf50 [ 1035.189887][ C1] iput.part.0+0x605/0xf50 [ 1035.194295][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 1035.199555][ C1] iput+0x35/0x40 [ 1035.203167][ C1] dentry_unlink_inode+0x2a1/0x490 [ 1035.208258][ C1] __dentry_kill+0x1d0/0x600 [ 1035.212838][ C1] finish_dput+0x76/0x480 [ 1035.217167][ C1] dput.part.0+0x456/0x570 [ 1035.221588][ C1] dput+0x1f/0x30 [ 1035.225203][ C1] __fput+0x519/0xb40 [ 1035.229162][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1035.234337][ C1] task_work_run+0x150/0x240 [ 1035.238904][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1035.244007][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1035.249185][ C1] do_exit+0x8b8/0x2b60 [ 1035.253321][ C1] ? __pfx_do_exit+0x10/0x10 [ 1035.257889][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1035.262889][ C1] ? find_held_lock+0x2b/0x80 [ 1035.267541][ C1] ? get_signal+0x7e0/0x21e0 [ 1035.272115][ C1] do_group_exit+0xd5/0x2a0 [ 1035.276598][ C1] get_signal+0x1ec7/0x21e0 [ 1035.281081][ C1] ? __pfx_get_signal+0x10/0x10 [ 1035.285912][ C1] ? do_futex+0x192/0x350 [ 1035.290224][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 1035.295778][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1035.301926][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1035.307188][ C1] exit_to_user_mode_loop+0x86/0x4a0 [ 1035.312447][ C1] do_syscall_64+0x67c/0xf80 [ 1035.317013][ C1] ? clear_bhb_loop+0x40/0x90 [ 1035.321679][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.327546][ C1] RIP: 0033:0x7f168459c799 [ 1035.331932][ C1] Code: Unable to access opcode bytes at 0x7f168459c76f. [ 1035.338918][ C1] RSP: 002b:00007f16854630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1035.347308][ C1] RAX: fffffffffffffe00 RBX: 00007f1684816188 RCX: 00007f168459c799 [ 1035.355257][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1684816188 [ 1035.363203][ C1] RBP: 00007f1684816180 R08: 0000000000000000 R09: 0000000000000000 [ 1035.371146][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.379090][ C1] R13: 00007f1684816218 R14: 00007ffc1e8670a0 R15: 00007ffc1e867188 [ 1035.387072][ C1] [ 1035.390291][ C1] Kernel Offset: disabled [ 1035.394593][ C1] Rebooting in 86400 seconds..