last executing test programs: 17m33.411088562s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x404002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x20}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000003c0)=0x10, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x1, 0xfec00000, 0x2000, &(0x7f0000002000/0x2000)=nil}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./proc/net/rpc/use-gss-proxy\x00', 0x0, 0x81001, 0x0) mkdir(&(0x7f0000000200)='./proc/net/rpc/use-gss-proxy\x00', 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) write(r5, &(0x7f0000000380)='100000', 0x6) socket(0x1d, 0x4, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r6, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, 0x55}) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x14, 0x114, 0x2, {0x3, 0x9}}], 0x30}, 0x4000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17m30.001751915s ago: executing program 4 (id=11): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x97) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000b4bffc), 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000002c0)={0x7, 0x0, 0x6047ab3f86e3b34f, 0x7fff, 0x3, 0x0, [{0x5, 0x3, 0x0, '\x00', 0x502}, {0x4, 0x8, 0x40, '\x00', 0x9}, {0x4, 0x6, 0x6, '\x00', 0x408}]}) syz_open_procfs$userns(r0, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 17m28.794145734s ago: executing program 4 (id=14): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 17m25.153564922s ago: executing program 4 (id=20): timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) mkdir(0x0, 0x1fc) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x5}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000400)={0x0, 0x2710}, 0x10) mkdir(&(0x7f0000000180)='./cgroup/../file0/file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_genetlink_get_family_id$nl80211(0x0, r0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) 17m24.336804532s ago: executing program 4 (id=21): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0xe0002015}) vmsplice(r0, 0x0, 0xad, 0x8) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x2, 0x8000007) 17m8.71538868s ago: executing program 32 (id=21): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0xe0002015}) vmsplice(r0, 0x0, 0xad, 0x8) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x2, 0x8000007) 9m45.587282937s ago: executing program 2 (id=812): socket(0x10, 0x3, 0x0) mkdir(0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x0, 0xfdb7, 0x100000, 0x9, {}, {0x4, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x6, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9m40.803870425s ago: executing program 2 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0xc997405dd37fff69, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigsuspend(0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xe000, 0xcb, 0x401, 0x400, 0x0, [{0xfc, 0xad, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0xfe, 0x1, 0x3}, {0x8, 0x7, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0xf, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x3, 0xf, 0x8, '\x00', 0x9}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3, '\x00', 0x86}, {0x7, 0x71, 0x8, '\x00', 0x8}, {0x9, 0x3, 0x3, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0xa, 0xa, '\x00', 0x8}, {0x4b, 0x8, 0x1, '\x00', 0x7f}, {0x0, 0x13, 0x0, '\x00', 0x1}, {0x8c, 0xf8, 0xe, '\x00', 0x7e}, {0x3, 0x8, 0x73, '\x00', 0xff}, {0x4, 0xe8, 0x1, '\x00', 0x81}, {0x3, 0x8b, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xff, 0x2, 0x1, '\x00', 0x26}, {0x3, 0xd0, 0x0, '\x00', 0x1c}, {0x5, 0x8, 0x8, '\x00', 0xd}]}}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) 9m37.378935009s ago: executing program 2 (id=827): socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7, 0xc8, 0x9}}}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x9, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) modify_ldt$read(0x0, &(0x7f0000000140), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0xd79, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000ae054f04a3a9cf000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000000a060300000000000000000007000000280808800c00078008000940000000000c00078074ccd1b0c060c608000640"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0xc0) 9m35.399253997s ago: executing program 2 (id=831): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='#', 0x1}], 0x1) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0xc080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3f}, 0x4004814) syz_ublk_setup_queues(0xffffffffffffffff, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9m32.699221373s ago: executing program 2 (id=833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x45}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 9m31.301032088s ago: executing program 2 (id=836): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 9m15.723939149s ago: executing program 33 (id=836): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 1m47.044331489s ago: executing program 3 (id=1729): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf51, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [@fragment={0x3a, 0x0, 0x81, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x20000) 1m46.57900159s ago: executing program 3 (id=1732): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfc}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = dup(r1) write$FUSE_ENTRY(r2, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x3, 0x220, 0x79c, 0x10001, 0x8, 0x400007, {0x0, 0x7, 0x6, 0x0, 0x200000000006, 0x3, 0xfffb, 0x8, 0x4000000b, 0x2000, 0x9, 0x0, 0x0, 0x6, 0xff}}}, 0x90) 1m39.573733421s ago: executing program 3 (id=1741): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) 1m39.049769115s ago: executing program 3 (id=1744): timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) mkdir(0x0, 0x1fc) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x5}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000400)={0x0, 0x2710}, 0x10) mkdir(&(0x7f0000000180)='./cgroup/../file0/file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_genetlink_get_family_id$nl80211(0x0, r0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m38.526363237s ago: executing program 3 (id=1745): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENT(r1, 0x0, 0x198) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdca5, 0x6ed5cafd8ed59c07, 0x2000, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1ce, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x399d, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xac0, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m34.129664775s ago: executing program 3 (id=1756): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$RTC_AIE_ON(r0, 0x7001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x3, 0xa, 0xa, 0xfffffffffffffff4}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$netlink(0x10, 0x3, 0x5) 1m18.202251885s ago: executing program 34 (id=1756): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$RTC_AIE_ON(r0, 0x7001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x3, 0xa, 0xa, 0xfffffffffffffff4}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$netlink(0x10, 0x3, 0x5) 33.273474916s ago: executing program 1 (id=1869): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x889a, 0x20000003, 0x6, 0x10007, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x3, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) 32.305950569s ago: executing program 1 (id=1870): r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000440)) 31.690855204s ago: executing program 1 (id=1871): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x20e8086) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e) ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000540)=""/232, 0xe8}], 0x4, 0x6, 0xa) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x30, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x73b}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x24040810) 30.255700319s ago: executing program 1 (id=1875): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xffffffffffffff8e, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) write$P9_RSTATFS(r8, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(0x0, 0xb) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r11, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 28.518587792s ago: executing program 1 (id=1879): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x889a, 0x20000003, 0x6, 0x10007, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x3, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) 26.53062899s ago: executing program 1 (id=1883): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x51}, 0x28) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="23000000010006", 0x7) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 16.027110858s ago: executing program 6 (id=1902): socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r1, 0x0, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 13.957973259s ago: executing program 6 (id=1906): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r0, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x91, 0x8}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0xb) 12.883600855s ago: executing program 0 (id=1910): syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0xb2ec, 0x1, 0x2, "886e4d60e259b9c341b297050010128adac1b68b456a6d129d0c6c2db5d2e32b", 0x34324142}) 11.813591031s ago: executing program 0 (id=1911): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x20e8086) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e) ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000280)=""/182, 0xb6}, {0x0}, {&(0x7f0000000540)=""/232, 0xe8}], 0x5, 0x6, 0xa) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x30, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x73b}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x24040810) 10.747921827s ago: executing program 35 (id=1883): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x51}, 0x28) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="23000000010006", 0x7) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 10.717638008s ago: executing program 0 (id=1913): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1e7, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) add_key(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 10.716611048s ago: executing program 7 (id=1914): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xffffffffffffff8e, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) write$P9_RSTATFS(r8, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(0x0, 0xb) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r11, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10.599968741s ago: executing program 5 (id=1915): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x80001) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x40eb, 0x0, 0x0, 0x0, &(0x7f0000000080)) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x7ff}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0xe5cc, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffb, 0x6, 0x0, 0x1, 'syz1\x00'}, 0x6, 0x100, 0x4, r3, 0x0, 0x0, 'syz1\x00', 0x0}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc1}, "a4e28220d53b775a40a5b2eed9fd204d03160c99d54c55eeb3b75e69bf86418dad1d579020c1e7250ececc4161e443d663d79d67462f3294fade87cbd3360ed10e7c96b97e2360810b585b860d1a37b0729b015ae9090796eb5358d0fd256c8f1b804100de025ff6cccfd56b7628b10c278cc3a6db0f926c3a788eab8a830a631226c81f3896b1628446eb8cf2097ab2e4934efc85dc3366d30cd0a8b97fcab6d74356b4cdfa882d80384aa2b2f7ce8c2e47e416d161713bbc443ee13dfbd7f870"}, 0xc5) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) 8.873314153s ago: executing program 7 (id=1916): socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r1, 0x0, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.769677965s ago: executing program 5 (id=1917): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0xfffffffffa152167, 0x9a64, 0x8002, 0x200, 0xffeffffd, 0x0, 0x0, 0x10, 0x103}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.652884378s ago: executing program 0 (id=1918): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000400)={@initdev, @remote}, &(0x7f0000000440)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x0, 0xfffffff8, 0x403, 0xbbf, 0x6, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x9, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x3, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x0, 0x489, 0x7ff, 0x4, 0x4007b, 0x5, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x191, 0x1000, 0x2, 0x5], [0x2, 0xfffffffc, 0x9, 0xc, 0x6, 0x2e6bf783, 0xdc9e, 0x5, 0x40000005, 0x491, 0x5, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x7], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0xc, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x7ff, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0xfffffffd, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYBLOB="000002"]) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 8.245333378s ago: executing program 6 (id=1919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) 6.992783099s ago: executing program 5 (id=1920): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e52", 0xcc}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 6.938369551s ago: executing program 7 (id=1921): syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0xb2ec, 0x1, 0x2, "886e4d60e259b9c341b297050010128adac1b68b456a6d129d0c6c2db5d2e32b", 0x34324142}) 6.736368136s ago: executing program 6 (id=1922): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x20e8086) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e) ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000280)=""/182, 0xb6}, {0x0}, {&(0x7f0000000540)=""/232, 0xe8}], 0x5, 0x6, 0xa) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x30, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x73b}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x24040810) 6.56467057s ago: executing program 5 (id=1923): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1a82, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 5.781045779s ago: executing program 0 (id=1924): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 5.713272371s ago: executing program 7 (id=1925): mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x149) read$FUSE(r0, &(0x7f0000007400)={0x2020}, 0x2020) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 5.582737914s ago: executing program 5 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x68}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) set_mempolicy(0x1, &(0x7f0000000040)=0x7, 0x7) 5.433575458s ago: executing program 7 (id=1927): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xe, &(0x7f00000014c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x44000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200100000000010902200001010080fa0904000002ff00000007058102000200070502020002"], 0x0) syz_usb_ep_read(r3, 0x2, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0xe, &(0x7f0000000200)="0e00300000000100000000020000") syz_usb_ep_read(r3, 0x2, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0xe, &(0x7f0000000400)="0e00310000000100000078563412") syz_usb_ep_write(r3, 0x81, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x7, &(0x7f0000001500)="08001006000000") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480c4) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 5.373968439s ago: executing program 0 (id=1928): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r0, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x91, 0x8}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0xb) 4.028473462s ago: executing program 5 (id=1929): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff05, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x10c062) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x10000) close(r5) write(r4, &(0x7f00000002c0)='snd_aloop.0', 0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) 1.077145004s ago: executing program 7 (id=1930): socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r1, 0x0, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 291.021623ms ago: executing program 6 (id=1931): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 0s ago: executing program 6 (id=1932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) kernel console output (not intermixed with test programs): 6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.271277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.312177][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.326934][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.401079][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.448422][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.456400][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.481815][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.526389][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.546187][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.571317][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.587958][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.595853][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.673712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.852751][ T4384] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.897183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.907291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 88.917191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 88.927188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 88.937187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 88.947172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 88.957176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 88.967171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 88.977181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.674054][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.693153][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.701676][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.226727][ T4389] can: request_module (can-proto-0) failed. [ 91.999573][ T14] cfg80211: failed to load regulatory.db [ 92.557667][ T4375] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.948185][ T14] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 94.062880][ T4423] lo speed is unknown, defaulting to 1000 [ 94.069458][ T4423] lo speed is unknown, defaulting to 1000 [ 94.081292][ T4423] lo speed is unknown, defaulting to 1000 [ 94.100018][ T4423] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.164304][ T4423] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 94.199518][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.342729][ T4423] lo speed is unknown, defaulting to 1000 [ 94.360834][ T4423] lo speed is unknown, defaulting to 1000 [ 94.371083][ T4423] lo speed is unknown, defaulting to 1000 [ 94.380908][ T4423] lo speed is unknown, defaulting to 1000 [ 94.391489][ T4423] lo speed is unknown, defaulting to 1000 [ 94.990494][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.007959][ T14] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 95.017693][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.025900][ T14] usb 5-1: SerialNumber: syz [ 95.041668][ T14] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 95.049083][ T14] usb-storage 5-1:1.0: USB Mass Storage device detected [ 95.198232][ T14] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 95.211834][ T14] scsi host1: usb-storage 5-1:1.0 [ 95.218085][ T4436] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 95.224886][ T4436] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.039440][ T4436] vhci_hcd vhci_hcd.0: Device attached [ 96.857209][ T4375] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 96.888200][ T4358] usb 5-1: USB disconnect, device number 2 [ 97.827505][ T14] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 98.430606][ T14] usb 2-1: device descriptor read/all, error -71 [ 98.445517][ T4438] vhci_hcd: connection reset by peer [ 98.456645][ T4331] vhci_hcd: stop threads [ 98.461784][ T4331] vhci_hcd: release socket [ 98.502698][ T4331] vhci_hcd: disconnect device [ 98.653956][ T4457] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 98.684184][ T4457] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 98.698604][ T4457] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 99.281900][ T4457] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 99.295505][ T4457] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 99.349697][ T4463] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 99.402197][ T4457] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 99.425569][ T4457] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 99.492450][ T4457] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 99.603142][ T4457] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 99.650966][ T4331] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 99.814961][ T4465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.970394][ T4482] netlink: 48 bytes leftover after parsing attributes in process `syz.0.27'. [ 101.987728][ T4375] vhci_hcd: vhci_device speed not set [ 103.289620][ T4499] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 103.303755][ T4499] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.331595][ T4512] rpcbind: server 127.0.0.1 not responding, timed out [ 109.804675][ T4531] futex_wake_op: syz.3.37 tries to shift op by 144; fix this program [ 109.987274][ T4461] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.873055][ T4461] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.897093][ T4461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.107937][ T4461] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.117809][ T4461] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.131630][ T4461] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 111.676858][ T4461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.769573][ T4550] zram0: detected capacity change from 0 to 8 [ 113.400095][ T4461] gud 2-1:1.0: Failed to get properties (error=-5) [ 113.407052][ T4461] gud: probe of 2-1:1.0 failed with error -5 [ 113.712399][ T14] usb 2-1: USB disconnect, device number 5 [ 116.153527][ T4275] Bluetooth: hci4: command 0x0405 tx timeout [ 120.954818][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.969747][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.982425][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.992500][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.004747][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 121.012404][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.395157][ T4512] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.532633][ T4512] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.630702][ T4512] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.883467][ T4512] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.599720][ T4611] chnl_net:caif_netlink_parms(): no params data found [ 122.990326][ T4611] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.028033][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 123.119414][ T4646] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 123.406681][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.558108][ T4611] device bridge_slave_0 entered promiscuous mode [ 124.898195][ T4611] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.905358][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.213868][ T4658] zram: Cannot change disksize for initialized device [ 125.228176][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 125.296293][ T4611] device bridge_slave_1 entered promiscuous mode [ 125.491564][ T4611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.523078][ T4611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.746175][ T4611] team0: Port device team_slave_0 added [ 125.820893][ T4611] team0: Port device team_slave_1 added [ 125.954040][ T4611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.966839][ T4611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.042735][ T4611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.242289][ T4611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.253584][ T4611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.343078][ T4611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.678194][ T4611] device hsr_slave_0 entered promiscuous mode [ 126.764000][ T4611] device hsr_slave_1 entered promiscuous mode [ 126.994155][ T4611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.040944][ T4611] Cannot create hsr debugfs directory [ 127.093132][ T4512] device hsr_slave_0 left promiscuous mode [ 127.118130][ T4512] device hsr_slave_1 left promiscuous mode [ 127.167512][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.175064][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.242910][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.260826][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.269738][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 127.366166][ T4512] device bridge_slave_1 left promiscuous mode [ 127.382891][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.597371][ T4512] device bridge_slave_0 left promiscuous mode [ 127.615484][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.805320][ T4512] device veth1_macvtap left promiscuous mode [ 127.881357][ T4512] device veth0_macvtap left promiscuous mode [ 127.946513][ T4512] device veth1_vlan left promiscuous mode [ 128.003106][ T4512] device veth0_vlan left promiscuous mode [ 128.360353][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.564004][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.585427][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.616664][ T22] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.647167][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 128.655320][ T22] usb 1-1: SerialNumber: syz [ 128.876878][ T22] usb 1-1: 0:2 : does not exist [ 129.092436][ T22] usb 1-1: USB disconnect, device number 2 [ 129.347473][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 129.435979][ T4439] udevd[4439]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.300699][ T4710] zram: Cannot change disksize for initialized device [ 132.719278][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742559][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.068940][ T4512] team0 (unregistering): Port device team_slave_1 removed [ 133.182808][ T4512] team0 (unregistering): Port device team_slave_0 removed [ 133.256391][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.375913][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.782411][ T4512] bond0 (unregistering): Released all slaves [ 133.941441][ T4705] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 136.166670][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 136.861216][ T4748] sched: RT throttling activated [ 137.354512][ T4755] zram: Cannot change disksize for initialized device [ 139.587871][ T4611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.642714][ T4611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.726102][ T4611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.756726][ T4611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.313208][ T4611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.588187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.606357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.323816][ T4611] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.396691][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.455269][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.470181][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.478314][ T4507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.617420][ T4784] siw: device registration error -23 [ 141.641628][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.698022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.780218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.858379][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.865535][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.951265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.994045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.150704][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.160573][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.170235][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.416136][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.265329][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.301047][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.311236][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.324891][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.333748][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.345645][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.061440][ T4832] zram: Cannot change disksize for initialized device [ 147.641992][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.659975][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.692481][ T4611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.743291][ T4358] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.797716][ T4358] usb 4-1: Using ep0 maxpacket: 8 [ 148.805296][ T4358] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.826065][ T4358] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 148.838245][ T4358] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 148.918391][ T4358] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 149.001139][ T4358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.060039][ T4358] usb 4-1: Product: syz [ 149.064371][ T4358] usb 4-1: Manufacturer: syz [ 150.591702][ T4358] usb 4-1: SerialNumber: syz [ 150.711353][ T4358] usb 4-1: can't set config #1, error -71 [ 150.768315][ T4358] usb 4-1: USB disconnect, device number 2 [ 151.407444][ T4884] zram: Cannot change disksize for initialized device [ 154.721931][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.810980][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.985563][ T4905] lo speed is unknown, defaulting to 1000 [ 154.994010][ T4905] lo speed is unknown, defaulting to 1000 [ 155.002255][ T4905] lo speed is unknown, defaulting to 1000 [ 155.032739][ T4905] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 155.180924][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.214692][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.223548][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.231656][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.367289][ T4905] lo speed is unknown, defaulting to 1000 [ 155.375660][ T4611] device veth0_vlan entered promiscuous mode [ 155.405849][ T4905] lo speed is unknown, defaulting to 1000 [ 155.412337][ T4905] lo speed is unknown, defaulting to 1000 [ 155.434244][ T4611] device veth1_vlan entered promiscuous mode [ 155.458325][ T4905] lo speed is unknown, defaulting to 1000 [ 155.485208][ T4905] lo speed is unknown, defaulting to 1000 [ 155.570697][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.606109][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.648205][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.665137][ T4910] ======================================================= [ 155.665137][ T4910] WARNING: The mand mount option has been deprecated and [ 155.665137][ T4910] and is ignored by this kernel. Remove the mand [ 155.665137][ T4910] option from the mount to silence this warning. [ 155.665137][ T4910] ======================================================= [ 155.698439][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.741286][ T4611] device veth0_macvtap entered promiscuous mode [ 155.925411][ T4611] device veth1_macvtap entered promiscuous mode [ 156.765135][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.807454][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.841068][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.872296][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.117288][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.202951][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.253862][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.331647][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.410672][ T4611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.496310][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.552577][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.613925][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.675826][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.736991][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.787310][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.841764][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.906862][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.004574][ T4611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.333215][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.380079][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.399356][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.447626][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.477670][ T4611] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.486462][ T4611] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.639206][ T4611] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.682988][ T4611] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.587927][ T4523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.603238][ T4523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.673129][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.829693][ T4523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.916962][ T4523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.142028][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.405598][ T4962] siw: device registration error -23 [ 167.073644][ T4973] Bluetooth: MGMT ver 1.22 [ 168.790839][ T4973] Can't find ip_set type h [ 174.037303][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 174.361565][ T14] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.407466][ T14] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 174.497372][ T14] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 174.690120][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.808889][ T5021] tmpfs: Unknown parameter 'usrquota' [ 176.073383][ T14] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 176.113023][ T14] ttusb-dec: probe of 6-1:1.0 failed with error -2 [ 176.255716][ T14] usb 6-1: USB disconnect, device number 2 [ 181.157222][ T4358] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 182.158190][ T4358] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.216015][ T4358] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.258751][ T4358] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.456815][ T4358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 182.471922][ T4358] usb 2-1: SerialNumber: syz [ 182.736631][ T4358] usb 2-1: 0:2 : does not exist [ 182.793715][ T5090] libceph: secret too big 79 [ 182.805679][ T4358] usb 2-1: unit 5 not found! [ 183.169091][ T4358] usb 2-1: USB disconnect, device number 6 [ 183.479344][ T4439] udevd[4439]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.844032][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.067217][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 187.076609][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.173309][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.190330][ T5147] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 187.261102][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.308131][ T14] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.309640][ T5147] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.343869][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.382128][ T14] usb 2-1: config 0 descriptor?? [ 187.813479][ T14] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 187.857234][ T14] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 187.878254][ T14] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 188.081818][ T14] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 188.089695][ T14] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 188.096984][ T14] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0 [ 188.109579][ T14] microsoft 0003:045E:07DA.0001: implement() called with n (56) > 32! (kworker/0:1) [ 188.120866][ T14] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 188.148401][ T14] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 188.197296][ T14] microsoft 0003:045E:07DA.0001: no inputs found [ 188.203705][ T14] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 188.258857][ T14] usb 2-1: USB disconnect, device number 7 [ 188.472866][ T5166] siw: device registration error -23 [ 189.241951][ T5164] fido_id[5164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 189.371964][ T27] audit: type=1326 audit(1787604599.092:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafa959e0d9 code=0x0 [ 195.116465][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.122817][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.452599][ T5235] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 195.461035][ T5235] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 195.485093][ T5235] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 201.697384][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 201.806174][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 201.812484][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 201.817479][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 209.039676][ T5366] siw: device registration error -23 [ 210.460763][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.478758][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.487842][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.866345][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.883798][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.892099][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.432969][ T5433] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 218.360099][ T5440] siw: device registration error -23 [ 218.893550][ T4319] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 220.279186][ T4319] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.294594][ T4319] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.325352][ T4319] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 220.367426][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 220.375569][ T4319] usb 6-1: SerialNumber: syz [ 220.919042][ T4319] usb 6-1: 0:2 : does not exist [ 221.028475][ T4319] usb 6-1: USB disconnect, device number 3 [ 221.328959][ T4439] udevd[4439]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.103346][ T5560] siw: device registration error -23 [ 233.328709][ T5587] siw: device registration error -23 [ 233.379148][ T5587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.288939][ T5690] siw: device registration error -23 [ 245.503147][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.601771][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.684858][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.427429][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 248.909805][ T5720] ima: policy update failed [ 249.363353][ T27] audit: type=1802 audit(1787604658.632:3): pid=5720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.305" res=0 errno=0 [ 251.562438][ T5736] siw: device registration error -23 [ 254.564128][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.609727][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.657353][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.657348][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.671603][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.870098][ T5779] ima: policy update failed [ 257.280066][ T27] audit: type=1802 audit(1787604666.592:4): pid=5779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.319" res=0 errno=0 [ 257.593350][ T5787] process 'syz.3.318' launched '/dev/fd/3' with NULL argv: empty string added [ 259.387893][ T5802] siw: device registration error -23 [ 263.979928][ T5831] ima: policy update failed [ 264.361237][ T27] audit: type=1802 audit(1787604673.702:5): pid=5831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.330" res=0 errno=0 [ 265.833501][ T5852] syz.3.333 uses obsolete (PF_INET,SOCK_PACKET) [ 266.587435][ T5860] siw: device registration error -23 [ 268.167279][ T4358] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 268.830560][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.839374][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.846812][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.368923][ T4358] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.419732][ T4358] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 269.505191][ T4358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.616878][ T4358] usb 3-1: config 0 descriptor?? [ 269.663677][ T4358] pwc: Askey VC010 type 2 USB webcam detected. [ 270.629999][ T5889] ima: policy update failed [ 271.009041][ T27] audit: type=1802 audit(1787604680.352:6): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.342" res=0 errno=0 [ 271.217564][ T4358] pwc: send_video_command error -71 [ 271.222840][ T4358] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 271.231165][ T4358] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 271.255138][ T4358] usb 3-1: USB disconnect, device number 2 [ 271.346094][ T5897] zram: Cannot change disksize for initialized device [ 272.843128][ T5908] siw: device registration error -23 [ 278.817219][ T4358] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 278.895074][ T4375] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 279.023879][ T4358] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.054528][ T4358] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.098115][ T4375] usb 1-1: Dual-Role OTG device on HNP port [ 279.107227][ T4375] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 279.123261][ T4358] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 279.146950][ T4375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.155069][ T4358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 279.199071][ T4358] usb 2-1: SerialNumber: syz [ 279.207834][ T4375] gspca_main: spca501-2.14.0 probing 0000:0000 [ 279.228950][ T4375] gspca_spca501: reg write: error -32 [ 279.247116][ T4375] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 279.254060][ T4375] spca501: probe of 1-1:1.0 failed with error -22 [ 280.379665][ T5972] ima: policy update failed [ 280.769349][ T27] audit: type=1802 audit(1787604690.102:7): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.353" res=0 errno=0 [ 282.025594][ T4358] usb 2-1: 0:2 : does not exist [ 282.055269][ T4358] usb 2-1: USB disconnect, device number 8 [ 282.469388][ T5989] siw: device registration error -23 [ 282.567959][ T5989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.005947][ T4439] udevd[4439]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 288.079902][ T6021] ima: policy update failed [ 288.488805][ T27] audit: type=1802 audit(1787604697.802:8): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.373" res=0 errno=0 [ 292.576094][ T6053] siw: device registration error -23 [ 296.040034][ T6077] ima: policy update failed [ 296.440930][ T27] audit: type=1807 audit(1787604705.332:9): UNKNOWN=meas res=0 [ 296.597689][ T4341] rpcbind: server 127.0.0.1 not responding, timed out [ 296.637171][ T27] audit: type=1802 audit(1787604705.332:10): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.386" res=0 errno=0 [ 296.794116][ T27] audit: type=1802 audit(1787604705.762:11): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.386" res=0 errno=0 [ 297.421462][ T6091] zram: Cannot change disksize for initialized device [ 298.394445][ T6099] bond0: option slaves: interface -veth does not exist! [ 305.307310][ T5995] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 305.477240][ T5995] usb 3-1: device descriptor read/64, error -71 [ 305.795510][ T5995] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 307.195560][ T6145] ima: policy update failed [ 307.902815][ T27] audit: type=1807 audit(1787604716.682:12): UNKNOWN=meas res=0 [ 307.917620][ T27] audit: type=1802 audit(1787604716.682:13): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.397" res=0 errno=0 [ 307.966936][ T27] audit: type=1802 audit(1787604716.922:14): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.397" res=0 errno=0 [ 308.017112][ T5995] usb 3-1: device descriptor read/64, error -71 [ 308.178247][ T5995] usb usb3-port1: attempt power cycle [ 314.979943][ T6181] ima: policy update failed [ 315.394655][ T27] audit: type=1807 audit(1787604724.262:15): UNKNOWN=meas res=0 [ 315.487271][ T27] audit: type=1802 audit(1787604724.262:16): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.413" res=0 errno=0 [ 315.552693][ T27] audit: type=1802 audit(1787604724.702:17): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.413" res=0 errno=0 [ 316.437348][ T4461] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 316.627352][ T4461] usb 6-1: device descriptor read/64, error -71 [ 316.997240][ T4461] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 317.058438][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.118725][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.322115][ T4461] usb 6-1: device descriptor read/64, error -71 [ 317.380850][ T6207] futex_wake_op: syz.3.419 tries to shift op by 144; fix this program [ 317.447879][ T4461] usb usb6-port1: attempt power cycle [ 317.897108][ T4461] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 317.929009][ T4461] usb 6-1: device descriptor read/8, error -71 [ 319.502165][ T4461] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 319.845007][ T4461] usb 6-1: device descriptor read/8, error -71 [ 320.890100][ T6226] ima: policy update failed [ 321.308058][ T27] audit: type=1807 audit(1787604730.182:18): UNKNOWN=measur res=0 [ 321.315966][ T27] audit: type=1802 audit(1787604730.182:19): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.425" res=0 errno=0 [ 321.340455][ T4461] usb usb6-port1: unable to enumerate USB device [ 321.486073][ T6233] siw: device registration error -23 [ 321.524543][ T27] audit: type=1802 audit(1787604730.612:20): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.425" res=0 errno=0 [ 329.042956][ T6262] futex_wake_op: syz.1.434 tries to shift op by 144; fix this program [ 331.239770][ T6281] zram: Cannot change disksize for initialized device [ 332.036730][ T6288] siw: device registration error -23 [ 333.691445][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.715241][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.629945][ T6303] ima: policy update failed [ 337.028897][ T27] audit: type=1807 audit(1787604745.912:21): UNKNOWN=measur res=0 [ 337.047390][ T27] audit: type=1802 audit(1787604745.912:22): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.437" res=0 errno=0 [ 337.208546][ T27] audit: type=1802 audit(1787604746.352:23): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.437" res=0 errno=0 [ 337.548706][ T6318] futex_wake_op: syz.2.449 tries to shift op by 144; fix this program [ 339.740358][ T6333] zram: Cannot change disksize for initialized device [ 342.629694][ T6350] ima: policy update failed [ 342.989424][ T27] audit: type=1807 audit(1787604751.952:24): UNKNOWN=measur res=0 [ 342.997922][ T27] audit: type=1802 audit(1787604751.952:25): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.458" res=0 errno=0 [ 343.015429][ T27] audit: type=1802 audit(1787604752.352:26): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.458" res=0 errno=0 [ 343.337147][ T126] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 343.497161][ T126] usb 6-1: device descriptor read/64, error -71 [ 343.767205][ T126] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 343.942921][ T126] usb 6-1: device descriptor read/64, error -71 [ 344.077962][ T126] usb usb6-port1: attempt power cycle [ 344.517164][ T126] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 344.582648][ T126] usb 6-1: device descriptor read/8, error -71 [ 346.018357][ T6368] futex_wake_op: syz.5.463 tries to shift op by 144; fix this program [ 351.712458][ T6383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 351.725823][ T6383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.733755][ T6383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.307368][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 354.477325][ T126] usb 4-1: device descriptor read/64, error -71 [ 354.757392][ T126] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 354.937237][ T126] usb 4-1: device descriptor read/64, error -71 [ 355.097692][ T126] usb usb4-port1: attempt power cycle [ 355.517215][ T126] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 356.958886][ T126] usb 4-1: device descriptor read/8, error -71 [ 357.357149][ T126] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 357.948243][ T126] usb 4-1: device descriptor read/8, error -71 [ 358.067377][ T126] usb usb4-port1: unable to enumerate USB device [ 358.559348][ T6415] siw: device registration error -23 [ 359.920059][ T6438] futex_wake_op: syz.3.480 tries to shift op by 144; fix this program [ 360.613367][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 360.626578][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.634789][ T6440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.281897][ T6447] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 363.977402][ T4329] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 364.197295][ T4329] usb 3-1: Using ep0 maxpacket: 32 [ 364.209244][ T4329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.314007][ T4329] usb 3-1: config 0 has no interfaces? [ 364.390554][ T4329] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 364.479338][ T4329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.548438][ T4329] usb 3-1: Product: syz [ 364.591654][ T4329] usb 3-1: Manufacturer: syz [ 364.633430][ T4329] usb 3-1: SerialNumber: syz [ 364.752566][ T4329] usb 3-1: config 0 descriptor?? [ 367.505170][ T14] usb 3-1: USB disconnect, device number 6 [ 369.793063][ T6480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 369.806579][ T6480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.814624][ T6480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.338591][ T6482] futex_wake_op: syz.0.494 tries to shift op by 144; fix this program [ 370.921147][ T6485] siw: device registration error -23 [ 373.059694][ T4320] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 373.467154][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 373.473877][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.539153][ T4320] usb 2-1: config 0 has no interfaces? [ 373.558690][ T4320] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 373.598561][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.635551][ T4320] usb 2-1: Product: syz [ 373.654814][ T4320] usb 2-1: Manufacturer: syz [ 373.682527][ T4320] usb 2-1: SerialNumber: syz [ 373.837348][ T4320] usb 2-1: config 0 descriptor?? [ 375.292461][ T4320] usb 2-1: can't set config #0, error -71 [ 375.487127][ T4320] usb 2-1: USB disconnect, device number 9 [ 375.710454][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.729913][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.767055][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 376.202141][ T6536] futex_wake_op: syz.5.509 tries to shift op by 144; fix this program [ 378.470570][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.477118][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.107707][ T4461] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 381.307205][ T4461] usb 3-1: Using ep0 maxpacket: 32 [ 381.346417][ T4461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.914438][ T4461] usb 3-1: config 0 has no interfaces? [ 381.972595][ T4461] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 382.002675][ T4461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.027109][ T4461] usb 3-1: Product: syz [ 382.031977][ T4461] usb 3-1: Manufacturer: syz [ 382.046840][ T4461] usb 3-1: SerialNumber: syz [ 382.075280][ T4461] usb 3-1: config 0 descriptor?? [ 384.795270][ T4320] usb 3-1: USB disconnect, device number 7 [ 384.999480][ T6575] futex_wake_op: syz.5.520 tries to shift op by 144; fix this program [ 386.441144][ T6598] zram: Cannot change disksize for initialized device [ 387.033531][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 387.060818][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 387.070171][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 388.812984][ T6613] siw: device registration error -23 [ 391.447301][ T5988] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 391.667499][ T5988] usb 6-1: Using ep0 maxpacket: 32 [ 391.679635][ T5988] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.826083][ T5988] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 391.986261][ T5988] usb 6-1: config 0 interface 0 has no altsetting 0 [ 392.107264][ T5988] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 392.228442][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.330523][ T5988] usb 6-1: Product: syz [ 392.380678][ T5988] usb 6-1: Manufacturer: syz [ 392.447193][ T5988] usb 6-1: SerialNumber: syz [ 392.573075][ T5988] usb 6-1: config 0 descriptor?? [ 392.655449][ T5988] gs_usb 6-1:0.0: Required endpoints not found [ 394.633333][ T6628] futex_wake_op: syz.2.534 tries to shift op by 144; fix this program [ 395.637511][ T14] usb 6-1: USB disconnect, device number 12 [ 398.003619][ T6657] siw: device registration error -23 [ 398.077026][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.100437][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 398.108851][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.906603][ T6673] futex_wake_op: syz.3.546 tries to shift op by 144; fix this program [ 401.784206][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.829038][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.007575][ T6706] siw: device registration error -23 [ 407.017795][ T6719] futex_wake_op: syz.2.559 tries to shift op by 144; fix this program [ 409.756856][ T4374] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 410.167089][ T4374] usb 3-1: Using ep0 maxpacket: 32 [ 410.883645][ T4374] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.895206][ T4374] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 410.918060][ T4374] usb 3-1: config 0 interface 0 has no altsetting 0 [ 410.997919][ T4374] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 411.254032][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.357408][ T4374] usb 3-1: Product: syz [ 411.361680][ T4374] usb 3-1: Manufacturer: syz [ 411.392569][ T4374] usb 3-1: SerialNumber: syz [ 411.416857][ T4374] usb 3-1: config 0 descriptor?? [ 411.440892][ T4374] gs_usb 3-1:0.0: Required endpoints not found [ 412.911131][ T6761] siw: device registration error -23 [ 413.987937][ T126] usb 3-1: USB disconnect, device number 8 [ 414.246251][ T6771] futex_wake_op: syz.1.572 tries to shift op by 144; fix this program [ 419.698766][ T6803] siw: device registration error -23 [ 419.923601][ T6812] zram: Cannot change disksize for initialized device [ 423.937179][ T126] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 424.127100][ T126] usb 6-1: Using ep0 maxpacket: 32 [ 424.182067][ T126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.211550][ T126] usb 6-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 424.236415][ T6840] futex_wake_op: syz.1.587 tries to shift op by 144; fix this program [ 424.250430][ T126] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.282816][ T126] usb 6-1: config 0 interface 0 has no altsetting 0 [ 424.348371][ T126] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 424.386799][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.421337][ T126] usb 6-1: Product: syz [ 424.452018][ T126] usb 6-1: Manufacturer: syz [ 424.456875][ T126] usb 6-1: SerialNumber: syz [ 424.481598][ T126] usb 6-1: config 0 descriptor?? [ 424.505263][ T126] gs_usb 6-1:0.0: Required endpoints not found [ 427.078666][ T4317] usb 6-1: USB disconnect, device number 13 [ 432.077073][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 432.677347][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 432.688954][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.802351][ T6909] siw: device registration error -23 [ 432.912875][ T14] usb 2-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 433.616598][ T14] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.712892][ T14] usb 2-1: config 0 interface 0 has no altsetting 0 [ 433.751517][ T14] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 433.771084][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.783718][ T14] usb 2-1: Product: syz [ 433.788297][ T14] usb 2-1: Manufacturer: syz [ 433.804507][ T14] usb 2-1: SerialNumber: syz [ 433.828582][ T14] usb 2-1: config 0 descriptor?? [ 433.852573][ T14] gs_usb 2-1:0.0: Required endpoints not found [ 437.160155][ T6902] usb 2-1: USB disconnect, device number 10 [ 439.127235][ T6943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.178172][ T6943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.318689][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.326948][ T6946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.918924][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.925319][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.541250][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.549836][ T6946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.650047][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 449.658573][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.665999][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 451.615318][ T7021] netlink: 220 bytes leftover after parsing attributes in process `syz.3.630'. [ 458.060930][ T7075] netlink: 220 bytes leftover after parsing attributes in process `syz.5.647'. [ 466.578121][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.619690][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.631572][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 467.821378][ T7137] siw: device registration error -23 [ 480.937339][ T4461] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 481.152002][ T4461] usb 3-1: Using ep0 maxpacket: 32 [ 481.159910][ T4461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.193602][ T4461] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.227743][ T4461] usb 3-1: config 0 interface 0 has no altsetting 0 [ 481.236948][ T4461] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 481.262423][ T4461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.277556][ T4461] usb 3-1: Product: syz [ 481.292384][ T4461] usb 3-1: Manufacturer: syz [ 481.298094][ T4461] usb 3-1: SerialNumber: syz [ 481.426557][ T4461] usb 3-1: config 0 descriptor?? [ 481.477630][ T4461] gs_usb 3-1:0.0: Required endpoints not found [ 484.678662][ T4374] usb 3-1: USB disconnect, device number 9 [ 489.807777][ T4461] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 490.047237][ T4461] usb 4-1: Using ep0 maxpacket: 32 [ 490.097013][ T4461] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.260502][ T4461] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.412328][ T4461] usb 4-1: config 0 interface 0 has no altsetting 0 [ 490.452939][ T4461] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 490.554182][ T4461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.582830][ T4461] usb 4-1: Product: syz [ 491.964108][ T4461] usb 4-1: Manufacturer: syz [ 491.992059][ T4461] usb 4-1: SerialNumber: syz [ 492.009991][ T4461] usb 4-1: config 0 descriptor?? [ 492.031132][ T4461] gs_usb 4-1:0.0: Required endpoints not found [ 492.636320][ T4606] usb 4-1: USB disconnect, device number 7 [ 497.950853][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 497.970690][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.979337][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.021155][ T5995] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 501.217192][ T5995] usb 3-1: Using ep0 maxpacket: 32 [ 501.250035][ T5995] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.344118][ T7331] siw: device registration error -23 [ 501.360580][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.368977][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.403362][ T5995] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.457154][ T5995] usb 3-1: config 0 interface 0 has no altsetting 0 [ 501.480424][ T5995] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 501.520140][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.558050][ T5995] usb 3-1: Product: syz [ 501.572466][ T5995] usb 3-1: Manufacturer: syz [ 501.592697][ T5995] usb 3-1: SerialNumber: syz [ 501.616608][ T5995] usb 3-1: config 0 descriptor?? [ 501.643479][ T5995] gs_usb 3-1:0.0: Required endpoints not found [ 508.228035][ T7033] usb 3-1: USB disconnect, device number 10 [ 508.543623][ T7367] zram: Cannot change disksize for initialized device [ 509.265396][ T7373] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 509.274578][ T7373] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 509.285717][ T7373] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 510.573043][ T7376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 510.590105][ T7376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 510.598514][ T7376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.159543][ T7396] netlink: 220 bytes leftover after parsing attributes in process `syz.0.738'. [ 515.768217][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.776871][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.400569][ T7428] zram: Cannot change disksize for initialized device [ 522.552336][ T7477] netlink: 220 bytes leftover after parsing attributes in process `syz.5.753'. [ 523.276473][ T7474] siw: device registration error -23 [ 523.910122][ T7481] zram: Cannot change disksize for initialized device [ 526.000615][ T7500] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 526.009026][ T7500] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 526.017695][ T7500] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 530.081519][ T7528] netlink: 220 bytes leftover after parsing attributes in process `syz.5.768'. [ 531.887157][ T7033] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 532.647024][ T7033] usb 4-1: Using ep0 maxpacket: 32 [ 532.653986][ T7033] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.796510][ T7556] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 532.805260][ T7556] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 532.814563][ T7556] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 533.451651][ T7033] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.464795][ T7033] usb 4-1: config 0 interface 0 has no altsetting 0 [ 533.491084][ T7033] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 533.530957][ T7033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.544730][ T7033] usb 4-1: Product: syz [ 533.549026][ T7033] usb 4-1: Manufacturer: syz [ 533.553800][ T7033] usb 4-1: SerialNumber: syz [ 533.857643][ T7033] usb 4-1: config 0 descriptor?? [ 534.437663][ T7033] gs_usb 4-1:0.0: Required endpoints not found [ 538.052633][ T4329] usb 4-1: USB disconnect, device number 8 [ 538.287327][ T7575] siw: device registration error -23 [ 541.012392][ T7608] netlink: 220 bytes leftover after parsing attributes in process `syz.1.791'. [ 548.622902][ T7646] futex_wake_op: syz.5.801 tries to shift op by 144; fix this program [ 551.902321][ T7662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.933614][ T7662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.214339][ T7662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.222081][ T7662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.148285][ T7670] netlink: 'syz.0.807': attribute type 10 has an invalid length. [ 553.382671][ T7670] team0: Port device netdevsim0 added [ 553.472700][ T7675] netlink: 'syz.0.807': attribute type 10 has an invalid length. [ 553.814492][ T7675] team0: Port device netdevsim0 removed [ 554.489122][ T7675] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 558.610488][ T7704] futex_wake_op: syz.1.816 tries to shift op by 144; fix this program [ 563.267076][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.273440][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.707625][ T7761] futex_wake_op: syz.1.830 tries to shift op by 144; fix this program [ 571.339899][ T7785] zram: Cannot change disksize for initialized device [ 571.746795][ T7793] siw: device registration error -23 [ 574.497076][ T6902] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 576.146592][ T7810] netlink: 220 bytes leftover after parsing attributes in process `syz.3.839'. [ 579.582303][ T6902] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 581.445352][ T6902] usb 2-1: can't read configurations, error -71 [ 582.514132][ T7844] zram: Cannot change disksize for initialized device [ 583.095173][ T4320] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 583.330978][ T4320] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.372061][ T4320] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.429483][ T4320] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 584.262644][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 584.293337][ T4320] usb 3-1: SerialNumber: syz [ 584.604792][ T4320] usb 3-1: 0:2 : does not exist [ 584.701612][ T4320] usb 3-1: USB disconnect, device number 11 [ 585.008607][ T6387] udevd[6387]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 590.011420][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 590.020592][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 590.028668][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 590.036378][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 590.044840][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 590.065011][ T7910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 591.321891][ T7924] siw: device registration error -23 [ 592.165305][ T7910] Bluetooth: hci5: command 0x0409 tx timeout [ 593.358244][ T4522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.642094][ T7909] lo speed is unknown, defaulting to 1000 [ 593.804744][ T4522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.447466][ T7910] Bluetooth: hci5: command 0x041b tx timeout [ 596.467032][ T7910] Bluetooth: hci5: command 0x040f tx timeout [ 596.670887][ T4522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.797780][ T7959] siw: device registration error -23 [ 597.809706][ T4522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.147124][ T5988] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 598.357099][ T5988] usb 2-1: Using ep0 maxpacket: 8 [ 598.364229][ T5988] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 598.403292][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 598.458989][ T7909] chnl_net:caif_netlink_parms(): no params data found [ 598.475321][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 598.525904][ T5988] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.547026][ T7910] Bluetooth: hci5: command 0x0419 tx timeout [ 598.568187][ T5988] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 598.587011][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.612391][ T5988] usb 2-1: Product: syz [ 598.616766][ T5988] usb 2-1: Manufacturer: syz [ 598.621675][ T5988] usb 2-1: SerialNumber: syz [ 598.644591][ T5988] usb 2-1: config 0 descriptor?? [ 598.765457][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.774704][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.638150][ T7828] usb 2-1: USB disconnect, device number 13 [ 599.809077][ T7909] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.833046][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.862438][ T7909] device bridge_slave_0 entered promiscuous mode [ 600.811484][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.886693][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.922243][ T7909] device bridge_slave_1 entered promiscuous mode [ 601.955567][ T7909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.066808][ T7909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.222290][ T7909] team0: Port device team_slave_0 added [ 602.296432][ T7909] team0: Port device team_slave_1 added [ 602.371367][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.387010][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.436972][ T7909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.461635][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.583570][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.916505][ T7909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.960649][ T7909] device hsr_slave_0 entered promiscuous mode [ 605.010393][ T7909] device hsr_slave_1 entered promiscuous mode [ 605.036151][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 605.045805][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.053312][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.265852][ T8029] siw: device registration error -23 [ 605.771283][ T4522] device hsr_slave_0 left promiscuous mode [ 605.876587][ T4522] device hsr_slave_1 left promiscuous mode [ 605.952698][ T4522] device bridge_slave_1 left promiscuous mode [ 605.959116][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.977798][ T4522] device bridge_slave_0 left promiscuous mode [ 605.994269][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.204000][ T4522] device veth1_macvtap left promiscuous mode [ 606.214865][ T4522] device veth0_macvtap left promiscuous mode [ 606.249952][ T4522] device veth1_vlan left promiscuous mode [ 606.256185][ T4522] device veth0_vlan left promiscuous mode [ 612.087395][ T4321] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 612.106808][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 612.287219][ T4321] usb 2-1: Using ep0 maxpacket: 32 [ 612.294574][ T4321] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.315205][ T4321] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.342726][ T4321] usb 2-1: config 0 interface 0 has no altsetting 0 [ 612.363054][ T4321] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 612.377294][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.385440][ T4321] usb 2-1: Product: syz [ 612.390651][ T4321] usb 2-1: Manufacturer: syz [ 612.395582][ T4321] usb 2-1: SerialNumber: syz [ 612.408563][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 612.417750][ T4321] usb 2-1: config 0 descriptor?? [ 612.439994][ T4321] gs_usb 2-1:0.0: Required endpoints not found [ 612.553527][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.790865][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.624793][ T8077] siw: device registration error -23 [ 616.216636][ T4522] bond0 (unregistering): Released all slaves [ 616.439343][ T27] audit: type=1800 audit(1787605026.162:27): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.895" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 616.441117][ T8042] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 616.468871][ T8042] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 616.478795][ T8042] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 616.512949][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 616.521780][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 616.529244][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 617.187225][ T4606] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 617.221711][ T7909] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 617.289603][ T7909] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 617.387865][ T7909] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 617.397012][ T4606] usb 6-1: Using ep0 maxpacket: 16 [ 617.403936][ T4606] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.445758][ T4606] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 617.476130][ T4606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.496671][ T7909] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 617.516429][ T5995] usb 2-1: USB disconnect, device number 14 [ 617.555031][ T4606] usb 6-1: config 0 descriptor?? [ 617.967285][ T4606] rc_core: IR keymap rc-xbox-dvd not found [ 617.973164][ T4606] Registered IR keymap rc-empty [ 618.008312][ T4606] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 618.023515][ T7909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.066124][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 618.068185][ T4606] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 618.088181][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.138247][ T7909] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.173606][ T4606] xbox_remote 6-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 618.550561][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.574797][ T4606] input: failed to attach handler kbd to device input6, error: -5 [ 618.590259][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.602850][ T3623] xbox_remote 6-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 618.613565][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.620775][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.715233][ T4606] usb 6-1: USB disconnect, device number 14 [ 618.764491][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 618.783489][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 618.880654][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.915705][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.922935][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.015043][ T8101] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 619.083645][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 619.103778][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 619.267463][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 619.314748][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 619.357487][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 619.404016][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 619.444812][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 619.482414][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 619.513224][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 619.587671][ T7909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.663044][ T7909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.694027][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 619.730456][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 621.303954][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 621.316628][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 621.399340][ T7909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.300942][ T8142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 622.308871][ T8142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 624.110813][ T8153] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 624.230316][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.236634][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.535926][ T8166] siw: device registration error -23 [ 625.729741][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 625.902299][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.681575][ T7909] device veth0_vlan entered promiscuous mode [ 626.727359][ T7909] device veth1_vlan entered promiscuous mode [ 626.840129][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 626.874026][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.035972][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 627.206047][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 627.300430][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.497527][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.533058][ T7909] device veth0_macvtap entered promiscuous mode [ 627.640491][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 627.677979][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.703308][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 628.580786][ T7909] device veth1_macvtap entered promiscuous mode [ 628.730700][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 628.760208][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.796699][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.837128][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.862992][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.898120][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.942396][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.018211][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.025951][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 629.038780][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.055162][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.075194][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.106018][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.196951][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.235275][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.256253][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.284931][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.306144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 629.322630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.384244][ T7909] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.477719][ T7910] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 629.486768][ T7910] Bluetooth: hci1: Injecting HCI hardware error event [ 629.497835][ T4275] Bluetooth: hci1: hardware error 0x00 [ 629.523276][ T8213] siw: device registration error -23 [ 630.557154][ T7909] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.565995][ T7909] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.574898][ T7909] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.979457][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.013735][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.058439][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 631.132612][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.162169][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.189880][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 633.474520][ T4275] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 635.027110][ T4275] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 635.039128][ T4275] Bluetooth: hci3: Injecting HCI hardware error event [ 635.047776][ T7910] Bluetooth: hci3: hardware error 0x00 [ 635.643360][ T4275] Bluetooth: hci3: unexpected event for opcode 0x0011 [ 635.657924][ T8265] netlink: 76 bytes leftover after parsing attributes in process `syz.6.950'. [ 635.991614][ T8275] siw: device registration error -23 [ 637.215939][ T7910] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 640.623965][ T8305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 640.632804][ T8305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 640.640600][ T8305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.297373][ T8319] using random self ethernet address [ 641.303082][ T8319] using random host ethernet address [ 641.320690][ T27] audit: type=1800 audit(1787605051.042:28): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.966" name="idProduct" dev="configfs" ino=49048 res=0 errno=0 [ 643.400944][ T27] audit: type=1800 audit(1787605051.062:29): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.966" name="UDC" dev="configfs" ino=49049 res=0 errno=0 [ 644.924990][ T8345] autofs4:pid:8345:autofs_fill_super: called with bogus options [ 648.211332][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 648.220496][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.227957][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 654.660174][ T4606] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 654.982520][ T4606] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.066241][ T4606] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 655.161860][ T4606] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 655.216944][ T4606] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 655.276337][ T4606] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 655.341951][ T4606] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 655.384554][ T4606] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 655.425241][ T4606] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 655.448040][ T4606] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 655.487406][ T4606] usb 7-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 655.532253][ T4606] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 655.550374][ T4606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.569980][ T4606] usb 7-1: Product: syz [ 655.583702][ T4606] usb 7-1: Manufacturer: syz [ 655.609892][ T4606] usb 7-1: SerialNumber: syz [ 655.626726][ T8391] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 655.661568][ T8391] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 655.687235][ T8391] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 655.695358][ T8391] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 655.726211][ T8416] siw: device registration error -23 [ 655.802377][ T8391] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 656.025594][ T8391] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 656.210691][ T8391] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 656.337374][ T8391] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 656.469298][ T4606] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 656.558736][ T4606] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 656.652018][ T4606] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 656.858457][ T4606] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 5 [ 657.210972][ T4606] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 657.271084][ T4606] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3 [ 659.461936][ T8438] Bluetooth: MGMT ver 1.22 [ 659.973319][ T4606] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 659.993226][ T4606] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 660.152816][ T4606] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 660.168498][ T4606] usb 7-1: USB disconnect, device number 2 [ 660.329745][ T4606] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 660.789584][ T4606] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 660.856130][ T4606] keyspan 7-1:1.0: device disconnected [ 662.296977][ T4318] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 662.507072][ T4318] usb 6-1: Using ep0 maxpacket: 32 [ 664.934109][ T4318] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 664.957166][ T4318] usb 6-1: can't read configurations, error -71 [ 670.004117][ T8513] zram: Cannot change disksize for initialized device [ 672.427679][ T26] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 672.636978][ T26] usb 7-1: Using ep0 maxpacket: 32 [ 672.647610][ T26] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.675308][ T26] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 672.713855][ T26] usb 7-1: config 0 interface 0 has no altsetting 0 [ 672.737409][ T26] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 672.746624][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.806914][ T26] usb 7-1: Product: syz [ 672.817319][ T26] usb 7-1: Manufacturer: syz [ 672.829000][ T26] usb 7-1: SerialNumber: syz [ 672.868172][ T26] usb 7-1: config 0 descriptor?? [ 672.887694][ T26] gs_usb 7-1:0.0: Required endpoints not found [ 673.999602][ T8534] futex_wake_op: syz.1.1011 tries to shift op by 144; fix this program [ 675.167029][ T4320] usb 7-1: USB disconnect, device number 3 [ 678.033256][ T8586] siw: device registration error -23 [ 678.941417][ T8586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 680.413440][ T8599] ubi0: attaching mtd0 [ 680.427592][ T8599] ubi0: scanning is finished [ 680.432278][ T8599] ubi0: empty MTD device detected [ 681.024564][ T8599] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 681.190309][ T8600] futex_wake_op: syz.0.1024 tries to shift op by 144; fix this program [ 683.709875][ T8611] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1026'. [ 685.670566][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.676974][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.048283][ T8653] futex_wake_op: syz.1.1036 tries to shift op by 144; fix this program [ 688.582351][ T8658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 688.620481][ T8658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 688.641140][ T8658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 689.271156][ T8676] program syz.5.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 689.671685][ T8680] Unknown options in mask b7f2 [ 693.049228][ T7910] Bluetooth: Wrong link type (-22) [ 694.999969][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 695.008759][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 695.016499][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 695.314740][ T8727] futex_wake_op: syz.1.1053 tries to shift op by 144; fix this program [ 697.567331][ T8745] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1059'. [ 701.454516][ T8769] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1062'. [ 701.687070][ T8772] mmap: syz.1.1065 (8772) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 703.678028][ T8792] futex_wake_op: syz.6.1068 tries to shift op by 144; fix this program [ 706.758673][ T8812] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1074'. [ 707.768017][ T8812] team0 (unregistering): Port device team_slave_0 removed [ 708.753246][ T8812] team0 (unregistering): Port device team_slave_1 removed [ 708.867098][ T4320] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 709.087066][ T4320] usb 7-1: Using ep0 maxpacket: 8 [ 709.094070][ T4320] usb 7-1: device descriptor read/all, error -71 [ 709.228365][ T8836] binder: 8835:8836 ioctl 4018620d 0 returned -22 [ 711.923859][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 711.935937][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 711.943925][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 713.916969][ T7910] Bluetooth: hci5: command 0x0406 tx timeout [ 713.946485][ T8886] binder: 8885:8886 ioctl 4018620d 0 returned -22 [ 714.209838][ T7828] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 714.838048][ T8900] overlayfs: failed to resolve './file1': -2 [ 715.699052][ T7828] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.732866][ T7828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 715.812365][ T7828] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 715.835014][ T7828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.859698][ T7828] usb 4-1: Product: syz [ 715.863951][ T7828] usb 4-1: Manufacturer: syz [ 715.889755][ T7828] usb 4-1: SerialNumber: syz [ 716.025945][ T7828] usb 4-1: cannot find UAC_HEADER [ 716.264148][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.490815][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.872534][ T7828] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 718.129889][ T7828] usb 4-1: USB disconnect, device number 9 [ 719.765227][ T6387] udevd[6387]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 722.085294][ T8949] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1104'. [ 725.948278][ T8966] autofs4:pid:8966:autofs_fill_super: called with bogus options [ 734.170815][ T9066] comedi comedi1: No hardware detected at I/O base 0x3c4 [ 735.298150][ T4275] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 737.052877][ T9084] autofs4:pid:9084:autofs_fill_super: called with bogus options [ 742.073336][ T4275] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 747.121099][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.135296][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.123782][ T9231] siw: device registration error -23 [ 753.642117][ T9244] device syzkaller0 entered promiscuous mode [ 753.793934][ T9244] tipc: Started in network mode [ 753.807017][ T9244] tipc: Node identity 12b9adf63c7b, cluster identity 4711 [ 754.595952][ T9244] tipc: Enabled bearer , priority 0 [ 754.777874][ T9244] tipc: Resetting bearer [ 754.809677][ T9242] tipc: Resetting bearer [ 756.436200][ T9242] tipc: Disabling bearer [ 756.547808][ T4321] tipc: Node number set to 784510454 [ 757.046926][ T4321] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 757.267287][ T4321] usb 2-1: Using ep0 maxpacket: 32 [ 757.301251][ T4321] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 757.356794][ T4321] usb 2-1: config 0 has no interface number 0 [ 757.431696][ T4321] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 757.482722][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.526493][ T4321] usb 2-1: Product: syz [ 757.575082][ T4321] usb 2-1: Manufacturer: syz [ 757.602269][ T4321] usb 2-1: SerialNumber: syz [ 757.652252][ T4321] usb 2-1: config 0 descriptor?? [ 757.713597][ T4321] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 758.581941][ T4321] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 758.706827][ T4321] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 758.780959][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 759.317199][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 759.336609][ T4321] usb 2-1: USB disconnect, device number 15 [ 759.364515][ T4321] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 760.898565][ T4321] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 760.964843][ T4321] quatech2 2-1:0.51: device disconnected [ 762.978086][ T9311] device syzkaller0 entered promiscuous mode [ 764.201537][ T9320] binder: 9319:9320 ioctl c0306201 0 returned -14 [ 764.238307][ T9320] binder: BINDER_SET_CONTEXT_MGR already set [ 764.244752][ T9320] binder: 9319:9320 ioctl 4018620d 200000004a80 returned -16 [ 764.640178][ T9324] futex_wake_op: syz.3.1189 tries to shift op by 144; fix this program [ 768.313948][ T9345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.861525][ T9345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.848685][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1208'. [ 778.314177][ T9408] siw: device registration error -23 [ 778.397143][ T9408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 778.428931][ T9415] device syzkaller0 entered promiscuous mode [ 778.473198][ T9415] tipc: Started in network mode [ 778.511412][ T9415] tipc: Node identity 1aa9b16cb6e4, cluster identity 4711 [ 778.540157][ T9415] tipc: Enabled bearer , priority 0 [ 778.577099][ T9414] tipc: Resetting bearer [ 778.678013][ T9414] tipc: Disabling bearer [ 784.261821][ T9473] tipc: Enabling of bearer rejected, failed to enable media [ 785.808471][ T9471] siw: device registration error -23 [ 786.188404][ T9488] capability: warning: `syz.5.1242' uses deprecated v2 capabilities in a way that may be insecure [ 789.200236][ T9499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.585568][ T9527] siw: device registration error -23 [ 800.598149][ T9606] siw: device registration error -23 [ 804.268216][ T9626] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1277'. [ 805.043893][ T9634] binder: BINDER_SET_CONTEXT_MGR already set [ 805.066494][ T9634] binder: 9633:9634 ioctl 4018620d 200000004a80 returned -16 [ 805.959072][ T4261] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 806.146998][ T4261] usb 2-1: Using ep0 maxpacket: 32 [ 806.196796][ T4261] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.412818][ T4261] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.707008][ T4261] usb 2-1: config 0 interface 0 has no altsetting 0 [ 806.736262][ T4261] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 806.916276][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.924708][ T4261] usb 2-1: Product: syz [ 806.929145][ T4261] usb 2-1: Manufacturer: syz [ 806.933779][ T4261] usb 2-1: SerialNumber: syz [ 807.918878][ T4261] usb 2-1: config 0 descriptor?? [ 807.989169][ T4261] gs_usb 2-1:0.0: Required endpoints not found [ 808.042630][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 808.054912][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 808.065029][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 809.818019][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.827629][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.334321][ T9681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1290'. [ 810.689532][ T4261] usb 2-1: USB disconnect, device number 16 [ 812.949925][ T9707] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 812.958543][ T9707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 812.965931][ T9707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 815.347709][ T9728] device syzkaller0 entered promiscuous mode [ 823.381084][ T9793] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1326'. [ 826.012825][ T9815] program syz.1.1333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 826.933486][ T9819] Unknown options in mask b7f2 [ 830.765512][ T9836] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1337'. [ 831.801025][ T9842] device syzkaller0 entered promiscuous mode [ 831.967114][ T9847] comedi comedi1: No hardware detected at I/O base 0x3c4 [ 838.509218][ T9896] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1349'. [ 839.798054][ T9889] tipc: Enabling of bearer rejected, failed to enable media [ 839.906037][ T9899] Invalid ELF header type: 3 != 1 [ 846.031800][ T9937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1361'. [ 846.657984][ T9939] futex_wake_op: syz.5.1362 tries to shift op by 144; fix this program [ 849.497476][ T9961] device syzkaller0 entered promiscuous mode [ 854.688861][ T9992] binder: 9991:9992 ioctl 4018620d 0 returned -22 [ 854.976916][ T7828] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 856.853191][ T7828] usb 4-1: Using ep0 maxpacket: 16 [ 856.970597][ T7828] usb 4-1: unable to get BOS descriptor or descriptor too short [ 857.018699][ T7828] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 857.043153][ T7828] usb 4-1: config 9 has no interface number 0 [ 857.078082][ T7828] usb 4-1: config 9 interface 57 has no altsetting 0 [ 857.104400][ T7828] usb 4-1: string descriptor 0 read error: -22 [ 857.121022][ T7828] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 857.156887][ T7828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.172732][ T7828] video4linux radio48: keene_cmd_set failed (-110) [ 859.689524][ T7828] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 860.654468][ T4320] usb 4-1: USB disconnect, device number 10 [ 861.455484][T10039] tmpfs: Unknown parameter 'usrquota' [ 862.474897][T10049] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1393'. [ 867.453863][T10070] comedi comedi1: No hardware detected at I/O base 0x3c4 [ 867.670989][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 869.989872][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.996210][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.128793][T10079] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 870.549980][T10100] siw: device registration error -23 [ 875.859833][T10127] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1413'. [ 876.064117][T10130] comedi comedi1: No hardware detected at I/O base 0x3c4 [ 877.955617][T10151] overlayfs: failed to resolve './file1': -2 [ 878.797218][T10157] siw: device registration error -23 [ 879.836357][T10157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 880.983784][T10177] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1430'. [ 881.695327][T10178] ubi0: attaching mtd0 [ 881.700119][T10178] ubi0: scanning is finished [ 881.736932][T10178] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 881.744447][T10178] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 881.752182][T10178] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 881.759167][T10178] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 881.766539][T10178] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 881.773332][T10178] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 881.781338][T10178] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2176592719 [ 881.791842][T10178] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 881.804469][T10180] ubi0: background thread "ubi_bgt0d" started, PID 10180 [ 882.641439][T10170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 882.698088][T10170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 882.787055][T10170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 885.049837][T10200] futex_wake_op: syz.1.1435 tries to shift op by 144; fix this program [ 887.838650][T10218] device syzkaller0 entered promiscuous mode [ 887.919518][T10218] tipc: Enabled bearer , priority 0 [ 887.987291][T10217] tipc: Resetting bearer [ 888.268229][T10217] tipc: Disabling bearer [ 888.727469][T10227] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1442'. [ 889.470341][T10234] ubi: mtd0 is already attached to ubi0 [ 890.512780][T10254] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1448'. [ 894.191374][T10274] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1456'. [ 895.424917][ T4319] nvmet: connect request for invalid subsystem t! [ 895.437293][T10275] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 898.556747][T10309] futex_wake_op: syz.6.1465 tries to shift op by 144; fix this program [ 901.766249][T10328] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1463'. [ 901.977077][ T4358] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 903.676896][ T4358] usb 6-1: Using ep0 maxpacket: 32 [ 903.766228][ T4358] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 903.806080][ T4358] usb 6-1: config 0 has no interface number 0 [ 903.822262][ T4358] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 903.868035][ T4358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.900552][ T4358] usb 6-1: Product: syz [ 903.919833][ T4358] usb 6-1: Manufacturer: syz [ 903.950197][ T4358] usb 6-1: SerialNumber: syz [ 903.980476][ T4358] usb 6-1: config 0 descriptor?? [ 904.003614][ T4358] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 904.204802][ T4358] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 904.272722][ T4358] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 904.311129][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 904.358665][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 904.367457][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 904.418660][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 904.619190][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 904.628515][ T4358] usb 6-1: USB disconnect, device number 17 [ 904.725403][ T4358] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 905.416473][ T4358] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 905.461330][ T4358] quatech2 6-1:0.51: device disconnected [ 907.041935][T10353] overlayfs: failed to resolve './file0': -2 [ 907.880097][T10357] device syzkaller0 entered promiscuous mode [ 907.909193][T10357] tipc: Enabled bearer , priority 0 [ 908.017697][T10350] tipc: Resetting bearer [ 908.188569][T10350] tipc: Disabling bearer [ 908.363898][T10362] siw: device registration error -23 [ 911.748024][T10374] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1482'. [ 916.170540][T10395] futex_wake_op: syz.3.1477 tries to shift op by 144; fix this program [ 919.886607][T10416] siw: device registration error -23 [ 921.233981][T10425] overlayfs: failed to resolve './file0': -2 [ 923.371530][T10446] zram: Cannot change disksize for initialized device [ 925.355498][T10460] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1504'. [ 931.429527][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.435892][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.730336][T10545] ubi: mtd0 is already attached to ubi0 [ 938.372262][T10572] tipc: Enabled bearer , priority 0 [ 940.091920][T10571] tipc: Disabling bearer [ 940.346223][ T4461] tipc: Node number set to 2890772844 [ 940.430219][T10585] ubi: mtd0 is already attached to ubi0 [ 946.623877][T10609] siw: device registration error -23 [ 947.781687][T10620] ubi: mtd0 is already attached to ubi0 [ 947.973814][T10615] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1553'. [ 954.955740][ T4374] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 955.627036][ T4374] usb 7-1: Using ep0 maxpacket: 32 [ 955.635764][ T4374] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 955.676627][ T4374] usb 7-1: config 0 has no interface number 0 [ 955.916954][ T4374] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 955.926095][ T4374] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.298565][T10671] ubi: mtd0 is already attached to ubi0 [ 956.332663][ T4374] usb 7-1: Product: syz [ 956.347091][ T4374] usb 7-1: Manufacturer: syz [ 956.358134][ T4374] usb 7-1: SerialNumber: syz [ 956.373983][ T4374] usb 7-1: config 0 descriptor?? [ 956.771517][ T4374] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 957.443134][T10679] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1569'. [ 957.605899][ T4374] usb 7-1: qt2_attach - failed to power on unit: -71 [ 957.613116][ T4374] quatech2: probe of 7-1:0.51 failed with error -71 [ 957.628931][ T4374] usb 7-1: USB disconnect, device number 6 [ 974.687640][T10779] binder: 10776:10779 ioctl c0306201 0 returned -14 [ 977.342668][T10797] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1601'. [ 977.473651][T10797] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1601'. [ 979.185135][T10829] comedi comedi1: No hardware detected at I/O base 0x3c4 [ 986.366821][ T26] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 988.184229][ T26] usb 7-1: device descriptor read/all, error -71 [ 993.769183][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.775649][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.135835][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 994.264472][T10936] Cannot find add_set index 0 as target [ 995.445328][T10942] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1002.979059][T10990] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1005.059780][T11005] Cannot find set identified by id 0 to match [ 1010.622921][T11047] comedi comedi0: comedi_config --init_data is deprecated [ 1022.951107][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.003257][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.787762][T11138] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1699'. [ 1027.709812][T11174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.728592][T11174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.407730][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.508666][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.001748][T11190] ubi: mtd0 is already attached to ubi0 [ 1035.370504][T11238] ubi: mtd0 is already attached to ubi0 [ 1039.047610][T11252] comedi comedi1: No hardware detected at I/O base 0x3c4 [ 1042.778526][T11272] ubi: mtd0 is already attached to ubi0 [ 1046.959153][T11315] ubi: mtd0 is already attached to ubi0 [ 1047.428888][T11319] comedi comedi1: No hardware detected at I/O base 0x3c4 [ 1048.769281][T11337] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 1051.928278][T11358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1051.964663][T11358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1051.973546][T11358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1052.729455][T11366] ubi: mtd0 is already attached to ubi0 [ 1054.309305][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.315800][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.873593][T11378] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 1058.870140][T11386] syz.0.1760 (11386) used greatest stack depth: 17808 bytes left [ 1061.423218][T11401] comedi comedi1: No hardware detected at I/O base 0x3c4 [ 1062.403031][T11404] ubi: mtd0 is already attached to ubi0 [ 1067.585120][T11442] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1067.595674][T11442] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1067.603975][T11442] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1067.611755][T11442] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1067.619512][T11442] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1067.626760][T11442] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1067.732004][T11448] comedi comedi1: No hardware detected at I/O base 0x3c4 [ 1068.516488][T11441] lo speed is unknown, defaulting to 1000 [ 1068.792000][ T4523] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.816817][T11442] Bluetooth: hci1: command 0x0409 tx timeout [ 1070.024217][T11450] ubi: mtd0 is already attached to ubi0 [ 1070.338275][ T4523] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.748913][ T4523] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.767697][T11465] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 1071.723381][ T4523] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.826776][T11442] Bluetooth: hci1: command 0x041b tx timeout [ 1072.010363][T11441] chnl_net:caif_netlink_parms(): no params data found [ 1072.530775][ T4523] tipc: Left network mode [ 1072.538670][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.571388][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.596407][T11441] device bridge_slave_0 entered promiscuous mode [ 1072.647173][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.678592][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.721806][T11441] device bridge_slave_1 entered promiscuous mode [ 1073.224083][T11441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.258984][T11441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.622665][T11441] team0: Port device team_slave_0 added [ 1073.906814][T11442] Bluetooth: hci1: command 0x040f tx timeout [ 1074.259459][T11441] team0: Port device team_slave_1 added [ 1074.571993][T11441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.583537][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.660660][T11441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.740875][T11441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.768258][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.865328][T11441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.665678][T11508] device syzkaller0 entered promiscuous mode [ 1075.785453][T11529] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 1076.067158][T11442] Bluetooth: hci1: command 0x0419 tx timeout [ 1078.239621][T11559] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 1083.169911][T11598] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 1085.060258][T11441] device hsr_slave_0 entered promiscuous mode [ 1085.074075][T11441] device hsr_slave_1 entered promiscuous mode [ 1085.085432][T11441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1085.107698][T11441] Cannot create hsr debugfs directory [ 1088.758509][ T4523] device hsr_slave_0 left promiscuous mode [ 1088.861804][T11646] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 1088.892263][ T4523] device hsr_slave_1 left promiscuous mode [ 1088.936299][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.073688][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.146317][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.191799][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.252890][ T4523] device bridge_slave_1 left promiscuous mode [ 1089.276432][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.321154][ T4523] device bridge_slave_0 left promiscuous mode [ 1089.356449][ T4523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.615665][ T4523] device veth1_macvtap left promiscuous mode [ 1089.627118][ T4523] device veth0_macvtap left promiscuous mode [ 1090.263195][ T4523] device veth1_vlan left promiscuous mode [ 1090.287745][ T4523] device veth0_vlan left promiscuous mode [ 1092.609677][ T4523] team0 (unregistering): Port device team_slave_1 removed [ 1092.654723][ T4523] team0 (unregistering): Port device team_slave_0 removed [ 1092.918912][ T4523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.246554][ T4523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.009110][ T4523] bond0 (unregistering): Released all slaves [ 1095.520835][T11713] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 1095.555380][T11441] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1095.774264][T11441] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1095.866241][T11441] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1096.042581][T11441] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1096.632913][T11441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.465063][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1097.496180][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1097.628816][T11735] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1098.044030][T11441] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.071739][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1098.099116][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1098.126542][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.133753][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.170471][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1098.200017][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1098.224702][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1098.538924][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.546100][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.191159][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1099.308035][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1099.396077][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1099.436022][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1099.448081][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1099.489163][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1099.522371][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1099.587169][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1099.667166][T11441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1099.707945][T11441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1099.738561][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1099.761015][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1099.807159][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1102.138677][ T4329] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1102.268440][T11769] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 1102.356775][ T4329] usb 2-1: Using ep0 maxpacket: 32 [ 1102.364981][ T4329] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1102.405616][ T4329] usb 2-1: config 0 has no interface number 0 [ 1102.439036][ T4329] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1102.478899][ T4329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.504194][ T4329] usb 2-1: Product: syz [ 1102.536776][ T4329] usb 2-1: Manufacturer: syz [ 1102.552175][T10454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1102.562938][ T4329] usb 2-1: SerialNumber: syz [ 1102.568358][T10454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1102.598589][ T4329] usb 2-1: config 0 descriptor?? [ 1102.621980][T11441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.632262][ T4329] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1102.838160][ T4329] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1102.914198][ T4329] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1103.735982][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1104.015709][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1104.016444][ T4358] usb 2-1: USB disconnect, device number 17 [ 1104.114508][ T4358] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1104.175004][ T4358] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1104.224343][ T4358] quatech2 2-1:0.51: device disconnected [ 1105.523180][T11803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1105.538124][T11803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1105.546371][T11803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1107.821000][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1107.855367][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1107.959082][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1107.973041][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1108.010131][T11441] device veth0_vlan entered promiscuous mode [ 1108.019508][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1108.037538][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1108.081963][T11441] device veth1_vlan entered promiscuous mode [ 1108.159568][T10454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1108.261199][T10454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1108.297823][T10454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1108.331142][T10454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1108.368707][T11441] device veth0_macvtap entered promiscuous mode [ 1108.413555][T11441] device veth1_macvtap entered promiscuous mode [ 1108.519953][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.572631][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.616788][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.666325][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.740347][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.804070][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.861145][T11441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.903262][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1108.919030][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1108.961280][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1109.002856][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1109.053043][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.090285][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.206110][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.266336][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.331216][T11821] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 1109.756653][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.771661][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.803724][T11441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.836397][T10454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1109.851069][T10454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1109.880827][T11441] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.902868][T11441] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.951132][T11441] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.977707][T11441] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.280130][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.309910][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.430769][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1110.460988][T11828] MPTCP: kernel_bind error, err=-98 [ 1110.474917][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.525452][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.540093][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1114.473469][T11875] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 1115.761226][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.767601][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.070664][T11945] MPTCP: kernel_bind error, err=-98 [ 1128.185807][T11997] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1128.279518][T11997] kvm: pic: non byte read [ 1128.305609][T11997] kvm: pic: level sensitive irq not supported [ 1128.309640][T11997] kvm: pic: non byte read [ 1128.358601][T11997] kvm: pic: level sensitive irq not supported [ 1128.358931][T11997] kvm: pic: non byte read [ 1128.404992][T11997] kvm: pic: level sensitive irq not supported [ 1128.405225][T11997] kvm: pic: non byte read [ 1128.856865][ T6902] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1129.046875][ T6902] usb 8-1: Using ep0 maxpacket: 32 [ 1129.056122][ T6902] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1129.084868][ T6902] usb 8-1: config 0 has no interface number 0 [ 1129.111858][ T6902] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1129.149623][ T6902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.177297][ T6902] usb 8-1: Product: syz [ 1129.196882][ T6902] usb 8-1: Manufacturer: syz [ 1129.201523][ T6902] usb 8-1: SerialNumber: syz [ 1129.233873][ T6902] usb 8-1: config 0 descriptor?? [ 1129.379773][ T6902] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1129.698784][ T6902] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1129.823930][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1129.922637][ T6902] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1130.038520][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1130.164695][ T6902] usb 8-1: USB disconnect, device number 2 [ 1130.173423][ T6902] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1130.186225][ T6902] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1130.198386][ T6902] quatech2 8-1:0.51: device disconnected [ 1133.643699][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1133.655133][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1133.976967][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1134.015989][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1134.024542][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1134.032578][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1135.076046][T12051] lo speed is unknown, defaulting to 1000 [ 1136.068187][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 1138.101081][T12051] chnl_net:caif_netlink_parms(): no params data found [ 1138.136794][ T4461] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1138.146973][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 1138.359742][ T4461] usb 8-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1138.374007][ T4461] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.397636][T12051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.424501][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.470812][T12051] device bridge_slave_0 entered promiscuous mode [ 1138.503605][T12051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.541005][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.581063][T12051] device bridge_slave_1 entered promiscuous mode [ 1138.712027][T12051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.779086][T12051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.810350][ T4461] dln2 8-1:1.0: Diolan DLN2 serial 305419896 [ 1138.995963][T12051] team0: Port device team_slave_0 added [ 1139.010402][ C1] dln2 8-1:1.0: short response: 0 [ 1139.029028][T12051] team0: Port device team_slave_1 added [ 1139.036287][ T4461] dln2 8-1:1.0: USB write failed: -110 [ 1139.046226][ T4461] dln2-gpio dln2-gpio.1.auto: failed to get pin count: -110 [ 1139.086524][ T4461] dln2-gpio: probe of dln2-gpio.1.auto failed with error -110 [ 1139.147463][T12051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.154560][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1139.211268][ C1] dln2 8-1:1.0: short response: 7 [ 1139.281951][T12051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.346991][ T4461] dln2 8-1:1.0: USB write failed: -110 [ 1139.352660][ T4461] dln2-i2c dln2-i2c.2.auto: failed to initialize adapter: -110 [ 1139.392974][ T4461] dln2-i2c: probe of dln2-i2c.2.auto failed with error -110 [ 1140.226978][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 1140.572804][T12051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.648355][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.767191][ T4461] dln2 8-1:1.0: USB write failed: -110 [ 1140.776872][ T4461] dln2-spi dln2-spi.3.auto: Failed to disable SPI module [ 1140.784169][ T4461] dln2-spi: probe of dln2-spi.3.auto failed with error -110 [ 1140.905899][ T4461] dln2 8-1:1.0: USB write failed: -71 [ 1140.926628][ T4461] dln2-adc dln2-adc.4.auto: failed to set ADC resolution to 10 bits [ 1140.949431][T12051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.986046][ T4461] dln2-adc: probe of dln2-adc.4.auto failed with error -71 [ 1141.158061][ T4461] usb 8-1: USB disconnect, device number 3 [ 1141.164645][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.170901][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.177132][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.183340][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.189556][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.195762][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.201966][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.208157][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.214388][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.220570][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.226772][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.232970][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.239159][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.245366][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.251549][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.257730][ C1] dln2 8-1:1.0: failed to resubmit RX URB: -19 [ 1141.785206][T12051] device hsr_slave_0 entered promiscuous mode [ 1141.818673][T12051] device hsr_slave_1 entered promiscuous mode [ 1141.838501][T12051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1141.863436][T12051] Cannot create hsr debugfs directory [ 1142.055731][T12114] ================================================================== [ 1142.063844][T12114] BUG: KASAN: use-after-free in release_card_device+0x192/0x1a0 [ 1142.071514][T12114] Read of size 1 at addr ffff88802ecf4d11 by task syz.5.1929/12114 [ 1142.079467][T12114] [ 1142.081825][T12114] CPU: 0 PID: 12114 Comm: syz.5.1929 Not tainted syzkaller #0 [ 1142.089316][T12114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1142.099419][T12114] Call Trace: [ 1142.102732][T12114] [ 1142.105687][T12114] dump_stack_lvl+0x188/0x24e [ 1142.110406][T12114] ? __lock_acquire+0x7c40/0x7c40 [ 1142.115464][T12114] ? show_regs_print_info+0x12/0x12 [ 1142.120682][T12114] ? load_image+0x410/0x410 [ 1142.125199][T12114] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1142.130674][T12114] ? __virt_addr_valid+0x188/0x540 [ 1142.135816][T12114] ? __virt_addr_valid+0x467/0x540 [ 1142.140954][T12114] ? release_card_device+0x192/0x1a0 [ 1142.146262][T12114] print_report+0xa8/0x210 [ 1142.150699][T12114] kasan_report+0x10b/0x140 [ 1142.155226][T12114] ? release_card_device+0x192/0x1a0 [ 1142.160544][T12114] release_card_device+0x192/0x1a0 [ 1142.165681][T12114] ? snd_power_wait+0x90/0x90 [ 1142.170380][T12114] device_release+0x92/0x1c0 [ 1142.174998][T12114] kobject_put+0x217/0x450 [ 1142.179431][T12114] snd_card_file_remove+0x32d/0x380 [ 1142.184659][T12114] snd_pcm_oss_release+0x1fd/0x240 [ 1142.189790][T12114] ? snd_disconnect_mmap+0x10/0x10 [ 1142.194918][T12114] __fput+0x20a/0x8b0 [ 1142.198918][T12114] task_work_run+0x1d0/0x260 [ 1142.203529][T12114] ? task_work_cancel+0x220/0x220 [ 1142.208576][T12114] ? __close_range+0x20c/0x770 [ 1142.213365][T12114] ? exit_to_user_mode_loop+0x3b/0x110 [ 1142.218857][T12114] exit_to_user_mode_loop+0xe6/0x110 [ 1142.224174][T12114] exit_to_user_mode_prepare+0xee/0x180 [ 1142.229740][T12114] syscall_exit_to_user_mode+0x16/0x40 [ 1142.235223][T12114] do_syscall_64+0x58/0xa0 [ 1142.239663][T12114] ? clear_bhb_loop+0x60/0xb0 [ 1142.244364][T12114] ? clear_bhb_loop+0x60/0xb0 [ 1142.249068][T12114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.255002][T12114] RIP: 0033:0x7f5327d9e0d9 [ 1142.259434][T12114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.279067][T12114] RSP: 002b:00007ffe1c23e678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1142.287495][T12114] RAX: 0000000000000000 RBX: 00007f5328027da0 RCX: 00007f5327d9e0d9 [ 1142.295481][T12114] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1142.303458][T12114] RBP: 00007f5328027da0 R08: 0000000000000006 R09: 0000000000000000 [ 1142.311446][T12114] R10: 00007f5328027cb0 R11: 0000000000000246 R12: 0000000000116c98 [ 1142.319449][T12114] R13: 00007f532802609c R14: 0000000000116b2c R15: 00007ffe1c23e780 [ 1142.327441][T12114] [ 1142.330477][T12114] [ 1142.332811][T12114] The buggy address belongs to the physical page: [ 1142.339240][T12114] page:ffffea0000bb3d00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ecf4 [ 1142.349410][T12114] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1142.356543][T12114] raw: 00fff00000000000 ffffea0001e0a108 ffff8880b8f415f0 0000000000000000 [ 1142.365136][T12114] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1142.373722][T12114] page dumped because: kasan: bad access detected [ 1142.380143][T12114] page_owner tracks the page as freed [ 1142.385514][T12114] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 22882431793, free_ts 1142040970181 [ 1142.402790][T12114] post_alloc_hook+0x173/0x1a0 [ 1142.407568][T12114] get_page_from_freelist+0x206b/0x2180 [ 1142.413125][T12114] __alloc_pages+0x1ec/0x4f0 [ 1142.417726][T12114] __kmalloc_large_node+0x8c/0x1f0 [ 1142.422862][T12114] __kmalloc_node_track_caller+0x10f/0x240 [ 1142.428683][T12114] __devres_alloc_node+0x49/0x110 [ 1142.433718][T12114] snd_devm_card_new+0x74/0x150 [ 1142.438578][T12114] loopback_probe+0x14d/0x1a20 [ 1142.443372][T12114] platform_probe+0x137/0x1c0 [ 1142.448060][T12114] really_probe+0x24a/0xb40 [ 1142.452583][T12114] __driver_probe_device+0x1f5/0x390 [ 1142.457891][T12114] driver_probe_device+0x4f/0x420 [ 1142.462941][T12114] __device_attach_driver+0x2c6/0x510 [ 1142.468335][T12114] bus_for_each_drv+0x184/0x210 [ 1142.473195][T12114] __device_attach+0x2a7/0x480 [ 1142.477994][T12114] bus_probe_device+0xba/0x1d0 [ 1142.482769][T12114] page last free stack trace: [ 1142.487455][T12114] free_unref_page_prepare+0x8e5/0x9e0 [ 1142.492947][T12114] free_unref_page+0x2e/0x3f0 [ 1142.497656][T12114] free_large_kmalloc+0xfd/0x1a0 [ 1142.502633][T12114] devres_release_all+0x1a9/0x230 [ 1142.507674][T12114] device_release_driver_internal+0x53b/0x7c0 [ 1142.513758][T12114] unbind_store+0x2e2/0x300 [ 1142.518269][T12114] kernfs_fop_write_iter+0x3a0/0x520 [ 1142.523571][T12114] vfs_write+0x482/0x9a0 [ 1142.527832][T12114] ksys_write+0x14d/0x260 [ 1142.532205][T12114] do_syscall_64+0x4c/0xa0 [ 1142.536643][T12114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.542552][T12114] [ 1142.544896][T12114] Memory state around the buggy address: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1142.550531][T12114] ffff88802ecf4c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1142.558596][T12114] ffff88802ecf4c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1142.566666][T12114] >ffff88802ecf4d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1142.574764][T12114] ^ [ 1142.579361][T12114] ffff88802ecf4d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1142.587435][T12114] ffff88802ecf4e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1142.595508][T12114] ================================================================== [ 1142.612719][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 1142.726829][T12114] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1142.734152][T12114] CPU: 1 PID: 12114 Comm: syz.5.1929 Not tainted syzkaller #0 [ 1142.741608][T12114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1142.751664][T12114] Call Trace: [ 1142.754943][T12114] [ 1142.757875][T12114] dump_stack_lvl+0x188/0x24e [ 1142.762566][T12114] ? memcpy+0x3c/0x60 [ 1142.766554][T12114] ? show_regs_print_info+0x12/0x12 [ 1142.771765][T12114] ? load_image+0x410/0x410 [ 1142.776276][T12114] panic+0x2d3/0x710 [ 1142.780186][T12114] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1142.786400][T12114] ? bpf_jit_dump+0xd0/0xd0 [ 1142.790942][T12114] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1142.796964][T12114] ? _raw_spin_unlock+0x40/0x40 [ 1142.801859][T12114] check_panic_on_warn+0x80/0xa0 [ 1142.806830][T12114] ? release_card_device+0x192/0x1a0 [ 1142.812143][T12114] end_report+0x66/0x110 [ 1142.816425][T12114] kasan_report+0x118/0x140 [ 1142.821004][T12114] ? release_card_device+0x192/0x1a0 [ 1142.826327][T12114] release_card_device+0x192/0x1a0 [ 1142.831503][T12114] ? snd_power_wait+0x90/0x90 [ 1142.836218][T12114] device_release+0x92/0x1c0 [ 1142.840860][T12114] kobject_put+0x217/0x450 [ 1142.845329][T12114] snd_card_file_remove+0x32d/0x380 [ 1142.850580][T12114] snd_pcm_oss_release+0x1fd/0x240 [ 1142.855773][T12114] ? snd_disconnect_mmap+0x10/0x10 [ 1142.860927][T12114] __fput+0x20a/0x8b0 [ 1142.864938][T12114] task_work_run+0x1d0/0x260 [ 1142.869570][T12114] ? task_work_cancel+0x220/0x220 [ 1142.874774][T12114] ? __close_range+0x20c/0x770 [ 1142.879623][T12114] ? exit_to_user_mode_loop+0x3b/0x110 [ 1142.885147][T12114] exit_to_user_mode_loop+0xe6/0x110 [ 1142.890477][T12114] exit_to_user_mode_prepare+0xee/0x180 [ 1142.896089][T12114] syscall_exit_to_user_mode+0x16/0x40 [ 1142.901630][T12114] do_syscall_64+0x58/0xa0 [ 1142.906107][T12114] ? clear_bhb_loop+0x60/0xb0 [ 1142.910834][T12114] ? clear_bhb_loop+0x60/0xb0 [ 1142.915566][T12114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.921498][T12114] RIP: 0033:0x7f5327d9e0d9 [ 1142.925944][T12114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.945633][T12114] RSP: 002b:00007ffe1c23e678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1142.954085][T12114] RAX: 0000000000000000 RBX: 00007f5328027da0 RCX: 00007f5327d9e0d9 [ 1142.962086][T12114] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1142.970082][T12114] RBP: 00007f5328027da0 R08: 0000000000000006 R09: 0000000000000000 [ 1142.978079][T12114] R10: 00007f5328027cb0 R11: 0000000000000246 R12: 0000000000116c98 [ 1142.986095][T12114] R13: 00007f532802609c R14: 0000000000116b2c R15: 00007ffe1c23e780 [ 1142.994101][T12114] [ 1142.997733][T12114] Kernel Offset: disabled [ 1143.002065][T12114] Rebooting in 86400 seconds..