last executing test programs: 18m7.410429033s ago: executing program 32 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x92082) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000500)={0x5, 0x5, {}, {}, 0x3c, 0x4b6}) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f0000000480), 0x0, 0x0, 0x1) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100224e0000", 0x58}], 0x1) syz_open_procfs(0x0, &(0x7f0000000580)='stack\x00') r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f00a4330b05b81792a507cfe9a9510ecad25e"], 0x0, 0x34}, 0x28) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x28, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffb, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x208000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x409, 0x7, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x0, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x200000c, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x400, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0xf8, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x9cf1, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x6, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x8001, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x400, 0x7, 0x6}, 'syz1\x00', 0x40}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) 17m33.77998291s ago: executing program 33 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0x10, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 16m39.152838652s ago: executing program 34 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17200}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_VF_PORTS={0x4}]}, 0x3c}, 0x1, 0x8100, 0x0, 0x4050}, 0x2800800c) 16m12.291107959s ago: executing program 35 (id=438): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3224}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 14m57.722365687s ago: executing program 36 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="80007f0a0a000200ffffffffffff00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 8m27.821444427s ago: executing program 37 (id=1420): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc", 0x47}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0", 0x87}], 0x3, 0x0, 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m59.284051391s ago: executing program 9 (id=2246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000680)={0x1, 0x0, [{0x1, 0x519c, 0xd, 0xfffffffd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000006c0)={"0524a2b52ef400e1e752599e881e40145cfcb7bed7d630767efc139023d63bf00d0b3b55e26ac58a246813a72b75c48ce0c1fbffba8dc27740add54380c9f36b9358634e8da43f2a072e53f77bef7338eb7f31b50c5b0fe54758c5014cf8a685dad3610e2c65665c99b70ea8166491e8bdb8621af71c1b96fb598757ea35d817c2e4a9f2af0d43f161d9139e11d1ad54973a1fe5256a01594e71e023a5b240f2203931d1acafad9d230dc6ded28dd50465ef1f634bd2eca6387a3f5e18bdb4f05b158bd4fb37ac966fea1b09cc3eb5888271cd1bb8651591136b130b2bcf17678d8d5d21f39aa6ba1ab15ef8618073f79df84d4dad7bbb7dc779d49891fcbbfd6a2b98d6a5bdfba9c871ed27c62215750f20097383c01ea2bd0284058807a2c804978a6a78e1391cb0714d89640ae776d7f1616d9e66c78a2f0b13481632de16f940ed78b75e532c49c3aea1d20bb8ce0c47c88625634be4d6630f29e3b34c3161a3eb037c11af5a990a718cc0fcc9d2654384ed52b85d51dabdbf86105543ef0972aefcfa920a3fc16f0f76b831dda3189d62bac994462463ce27f163fc064e5f28b37ed0eb45458e84e2e01cd14329a973c391c7036ee376581028962ba1348e7f0847d977eadfd43f8795c9590ac524c2033dfa1a314c4a4f3873fb7edb44a071f6db30d43a6138c850a736deea0350d8b161921946b639c3f4c2b616840a41ee6986778aca5db33e8230cad0cc1079685ca8f2e781f2016ab89fdc656a69c33b4d4facdfd9282d77a8c2abc189eb3e10dbbbc5826cfcde7171af0971f20c3887d8b5cd4bf0055c233d222ebc12d669633253c6b2c115b064e016bd348abdf3aefdf77a264433362f02974823c7a82d1962c2d9ac872d57ac9a9463fcedd6dda1996757184382baee64ebfbd4e124b10472688abc094aed97b29040ab9d70fc7cebf05e08be4e53b6c5a2e1d735f2ce91dec0dadfd18c9e54852fd9c2571dfc0b82eff72d60089b8501268c27145fecf09a0064f50de5395c9772cba271cda9ceb5b24a3e0b93265eed4944a8d2737ec0561b46322e88d319ecf55977d10b3c81aa5d113fb669c300a1c6508c1be9fa6052b559633103d8f29c9aee7fc02826043d58e09e7ef0dd1d7484de91ededdb905706b5c270ec944183d491c32917799c31cf556c3c87ad3d6ad32f7c69900586d4853188c8b87f30bcce1ee9b97d02023ad810c15c89869e8ca738d2aa9adefc2280b898c80235bb358b9febebcc40b783daa313c9389fa536fe9f4a73c4c83f0e37ce1fa2738dce377b1edaebdb659f7d29c7dde9520d9c38849cf87aaab8c5021153aaed95b263e0a8552d089695b9945ad1893a6a960fe0462ba294bc6081f8d4a8557f3bc55b0b117bd0171dd29aed94926e35cf5449d250a3a8468a6a0c887f4691626f624d4f50464af732"}) 6m58.14438528s ago: executing program 9 (id=2252): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 6m57.885600091s ago: executing program 9 (id=2257): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8004}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffde61}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x2000c040) 6m57.616399716s ago: executing program 9 (id=2261): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) chdir(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) 6m57.324774323s ago: executing program 9 (id=2264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='hybla', 0x5) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 6m55.488328784s ago: executing program 9 (id=2271): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2004}) epoll_pwait(r2, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) 6m55.161385476s ago: executing program 38 (id=2271): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2004}) epoll_pwait(r2, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) 6m23.437224007s ago: executing program 3 (id=2607): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x520c, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e062678bd00", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x81) 6m21.719633141s ago: executing program 3 (id=2625): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x800) sched_setscheduler(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 6m21.105603545s ago: executing program 3 (id=2634): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x68, @private0={0xfc, 0x0, '\x00', 0x1}, 0x64f}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x24000000}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x7fffffff}, 0x8) 6m20.873964907s ago: executing program 3 (id=2637): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) syz_clone(0x2108000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00') 6m20.573201347s ago: executing program 3 (id=2642): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x33, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0xd, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m19.559562011s ago: executing program 3 (id=2658): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6m19.307328342s ago: executing program 39 (id=2658): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 5m43.542181269s ago: executing program 0 (id=3085): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5c9}}]}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) fcntl$setstatus(r3, 0x4, 0x42800) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 5m43.331746622s ago: executing program 0 (id=3088): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000380)=""/100, 0x64, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000340)=""/25, 0x19, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000700)=""/200, 0xc8, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000080)=""/28, 0x1c, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000000c0)=""/156, 0x9c, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 5m42.982202061s ago: executing program 0 (id=3092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x3, 0x0, [{0xd, 0x2, 0xe, 0x1}, {0xc0000001, 0x0, 0x10, 0x3b, 0x1}, {0xa, 0xfffffff8, 0x9, 0xa000, 0x6}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m42.394476717s ago: executing program 0 (id=3099): socket$inet6_sctp(0xa, 0x5, 0x84) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 5m42.111790744s ago: executing program 0 (id=3103): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet(0x2, 0x801, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xc0, 0x5) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340), &(0x7f0000000280)) 5m39.744796506s ago: executing program 0 (id=3117): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sched_setattr(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)=""/4057, 0x0) 5m38.779170805s ago: executing program 40 (id=3117): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sched_setattr(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)=""/4057, 0x0) 5m37.628305053s ago: executing program 6 (id=3128): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) r1 = io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) syz_usb_connect(0x2, 0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) close(r0) 5m36.18798764s ago: executing program 6 (id=3137): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f00000005c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000780)="509aa20641d2244ebbd983faf9d1eafad79cec4161aa17fe1cd37e8babae35656ea8ac829f0a6759bb5afbb63b56f50bee3170ef65b57c07d777eb1c98e625dd62ca006ff759c5f0dc5db674f37ba6cd6cb7a49886d014b33eec127f0676ff9248a6a3250f8ba9e8b47b14cb67f66cd4b7435a6966c6b7558739845ad1562922743c86fcf3000038c348face5d5401fc5051852b63c2ca6851eb7e3ac38e501efb635e34285ea9a18f123a8c5b57e8337db0e7bd37405ea6d162ee503136ce5e710974c69893be75b6a9fda63d06668c7189f972f1ffd2769d17f4c973b5492522031121f5de78d866855420a4f86fcd09bbb379c2", 0xf5}, {&(0x7f0000000300)="ea0babbbd4857109", 0x8}], 0x2) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/252, 0xfc, 0x0, 0x0, 0x0) 5m35.933158391s ago: executing program 6 (id=3139): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x7f, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m35.723616713s ago: executing program 6 (id=3143): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) close(r3) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd2a, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 5m34.418714473s ago: executing program 6 (id=3157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x0, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 5m34.03886584s ago: executing program 6 (id=3163): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000140)='fd/3\x00') sched_setattr(r2, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x7fffdf003000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5m18.920528641s ago: executing program 41 (id=3163): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000140)='fd/3\x00') sched_setattr(r2, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x7fffdf003000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m9.632966428s ago: executing program 1 (id=3850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x8004) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 4m7.702140561s ago: executing program 1 (id=3852): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m6.801112948s ago: executing program 1 (id=3861): syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x92082) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x1) 4m6.470562166s ago: executing program 1 (id=3865): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x1cb0c2, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x5, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x0, 0x5, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000680)=@bridge_delneigh={0x40, 0x1d, 0x20, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x4, 0x49cc739cb5f479bb, 0xa}, [@NDA_FLAGS_EXT={0x8}, @NDA_PROBES={0x8, 0x4, 0xf6}, @NDA_VNI={0x8, 0x7, 0x5}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x40}}, 0x20020000) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) kexec_load(0xfffffffffffffffc, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}, {0x0, 0x0, 0x3e0000000000, 0x8000}], 0x0) 4m4.661181886s ago: executing program 1 (id=3871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x2c000010) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x20, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) 4m3.368268551s ago: executing program 1 (id=3876): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') exit(0x1ff) read$eventfd(r1, &(0x7f00000000c0), 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000240)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000340)="aa201a9bb3583c0f865e7ed838e9be5f64cacbe493", 0x15}, {0x0}], 0x2) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000240)={0x4, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @private=0xa010102}}}, 0x108) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) sendto$unix(r2, &(0x7f00000000c0)="2b9ec2927cf27e6c598b03cc84fac084ea3034d807b5ea0e1adf2cdd2cb80b6e4cb0b0b1a09811bb431c14433e1e9141524f5281ae56d032634ea6f2d885318bd557ee85c809427015fc9ef168140a400c4fa7913bb61c6fe751053a19a2facf42d89372eb3346ef98022644650b2b816996a8eee453a7ea0ee840f5fe9f16107d150166914ee13804195dc3", 0x8c, 0x4009010, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e22, 0x2, @loopback, 0x4000000c}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000180)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x18}, 0x5c39d53d76e37746) 3m48.329063712s ago: executing program 42 (id=3876): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') exit(0x1ff) read$eventfd(r1, &(0x7f00000000c0), 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000240)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000340)="aa201a9bb3583c0f865e7ed838e9be5f64cacbe493", 0x15}, {0x0}], 0x2) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000240)={0x4, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @private=0xa010102}}}, 0x108) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) sendto$unix(r2, &(0x7f00000000c0)="2b9ec2927cf27e6c598b03cc84fac084ea3034d807b5ea0e1adf2cdd2cb80b6e4cb0b0b1a09811bb431c14433e1e9141524f5281ae56d032634ea6f2d885318bd557ee85c809427015fc9ef168140a400c4fa7913bb61c6fe751053a19a2facf42d89372eb3346ef98022644650b2b816996a8eee453a7ea0ee840f5fe9f16107d150166914ee13804195dc3", 0x8c, 0x4009010, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e22, 0x2, @loopback, 0x4000000c}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000180)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x18}, 0x5c39d53d76e37746) 6.579951441s ago: executing program 5 (id=5540): socket$alg(0x26, 0x5, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @remote}, 0x6a, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 6.424056458s ago: executing program 5 (id=5542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 6.205032335s ago: executing program 5 (id=5545): r0 = open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$BTRFS_IOC_DEFRAG(r0, 0x40081271, 0x3) 6.189934357s ago: executing program 8 (id=5546): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) 6.01696599s ago: executing program 2 (id=5548): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}}) 5.692448208s ago: executing program 2 (id=5551): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0xf, @loopback, 0x200}}, 0x5, 0x0, 0x0, 0x9}, 0x9c) 5.688643075s ago: executing program 8 (id=5553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5.524328799s ago: executing program 2 (id=5555): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000002c0)={0x1}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) dup(r5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x4f, 0x1}, 0x14}}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000003c0), 0x1000040, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@appraise_type}, {@appraise_type}]}}) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.219139726s ago: executing program 7 (id=5561): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = getpgrp(0x0) socket$netlink(0x10, 0x3, 0xf) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)) semctl$GETPID(0x0, 0x2, 0xb, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x2000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r0, 0x8004af79, &(0x7f00000000c0)) 4.675572031s ago: executing program 5 (id=5562): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001140)={&(0x7f0000000c80)={0xa, 0x4e21, 0x13, @mcast2, 0xed2}, 0x1c, 0x0, 0x0, &(0x7f0000000e80)=[@hopopts={{0x12, 0x29, 0x36, {0x3a}}}, @dontfrag={{0x18, 0x29, 0x3e, 0xf0}}], 0x30}, 0x80) 4.57402207s ago: executing program 7 (id=5563): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.42549504s ago: executing program 7 (id=5564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2020b}}, 0x20}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) 4.425189527s ago: executing program 4 (id=5565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x8000}) 4.364532793s ago: executing program 4 (id=5566): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e80)={0xffffffffffffffff}) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) 4.256312677s ago: executing program 4 (id=5567): r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 4.21710597s ago: executing program 5 (id=5568): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 4.21506011s ago: executing program 8 (id=5569): inotify_init1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x7, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.09401279s ago: executing program 8 (id=5570): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCGIFHWADDR(r0, 0x89b1, &(0x7f0000000080)={'vlan0\x00'}) 4.093791145s ago: executing program 7 (id=5571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000006c005d2328bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0800000000800000080029"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4048000) 4.072053407s ago: executing program 4 (id=5572): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 4.031401411s ago: executing program 8 (id=5573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) syz_usb_connect(0x0, 0x17e, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.896923529s ago: executing program 5 (id=5574): socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) socket(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full', 0x20, 0x40030000000000}, 0xfffffdef) 2.897509785s ago: executing program 7 (id=5575): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 2.868395095s ago: executing program 2 (id=5576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a"], 0x14}}, 0x0) 1.260152038s ago: executing program 4 (id=5577): add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0xaa8a0000, 0x0, 0x2e, 0x0, 0x0, 0x0) 293.872918ms ago: executing program 8 (id=5578): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) 193.568ms ago: executing program 2 (id=5579): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) 124.865138ms ago: executing program 7 (id=5580): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0xc1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x4, 0xf}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r4, 0x0, 0x0, 0x0) 32.089834ms ago: executing program 2 (id=5581): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="40000f0000000116"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=5582): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) kernel console output (not intermixed with test programs): send_packet: packet tx failed (-71) [ 921.791027][ T807] usb 7-1: USB disconnect, device number 18 [ 921.805566][T12826] imon:vfd_write: send packet #1 failed [ 922.202910][ T60] Bluetooth: hci2: command tx timeout [ 923.978342][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 923.978359][ T36] audit: type=1326 audit(1770778596.994:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12888 comm="syz.6.2330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc051b9bf79 code=0x0 [ 924.282240][ T60] Bluetooth: hci2: command tx timeout [ 924.291459][T12906] netlink: 'syz.6.2336': attribute type 1 has an invalid length. [ 924.361286][T12906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 924.459364][T12908] bond1: entered allmulticast mode [ 925.036426][T12935] batman_adv: batadv0: Adding interface: dummy0 [ 925.036453][T12935] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.036487][T12935] batman_adv: batadv0: Interface activated: dummy0 [ 925.155531][T12935] batadv0: mtu less than device minimum [ 925.231100][T12935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.283051][T12935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.315225][T12935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.365408][T12935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.392764][T12935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.435502][T12935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.481439][T12935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.523145][T12935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.550408][T12935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 926.368661][ T60] Bluetooth: hci2: command tx timeout [ 927.395554][T12739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 927.431573][T12739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 927.528003][T12739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 927.620716][T12739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 927.823707][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'. [ 927.828054][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'. [ 928.236768][T12739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.355742][T12739] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.387686][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.387891][ T1445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.421518][ T3961] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.421667][ T3961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.973030][T13070] fuse: Bad value for 'fd' [ 929.295655][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 929.295686][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2390'. [ 929.627188][T12739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.927602][T12739] veth0_vlan: entered promiscuous mode [ 930.009107][T12739] veth1_vlan: entered promiscuous mode [ 930.145034][T12739] veth0_macvtap: entered promiscuous mode [ 930.160755][T13106] netlink: 'syz.6.2398': attribute type 9 has an invalid length. [ 930.160776][T13106] netlink: 'syz.6.2398': attribute type 11 has an invalid length. [ 930.160788][T13106] netlink: 'syz.6.2398': attribute type 12 has an invalid length. [ 930.160802][T13106] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.2398'. [ 930.160925][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2398'. [ 930.322550][T12739] veth1_macvtap: entered promiscuous mode [ 930.337946][T13110] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2401'. [ 930.575869][T12739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.654561][T12739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.756202][T11301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.759517][T11301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.759780][T11301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.760225][T11301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.802879][ T36] audit: type=1800 audit(1770778603.824:1049): pid=13119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2402" name="file0" dev="tmpfs" ino=2054 res=0 errno=0 [ 931.540340][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.540359][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.649150][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.649250][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.928429][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.928448][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.586693][T13185] fuse: Bad value for 'fd' [ 933.037487][ T36] audit: type=1326 audit(1770778606.054:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13205 comm="syz.5.2432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc65e85bf79 code=0x0 [ 933.511902][ T986] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 933.683748][ T986] usb 7-1: Using ep0 maxpacket: 32 [ 933.688241][ T986] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 933.688267][ T986] usb 7-1: config 2 has no interface number 0 [ 933.688315][ T986] usb 7-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 933.688337][ T986] usb 7-1: config 2 interface 88 has no altsetting 0 [ 933.691128][ T986] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 933.691156][ T986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.691173][ T986] usb 7-1: Product: syz [ 933.691184][ T986] usb 7-1: Manufacturer: syz [ 933.691195][ T986] usb 7-1: SerialNumber: syz [ 933.727135][T13219] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 933.946375][T13219] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 935.486172][T11298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 935.870961][ T986] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 935.870990][ T986] asix 7-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 935.871249][ T986] asix 7-1:2.88: probe with driver asix failed with error -71 [ 935.897389][ T986] usb 7-1: USB disconnect, device number 19 [ 937.734582][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 937.734603][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 937.945757][T13374] batman_adv: batadv0: Adding interface: dummy0 [ 937.945776][T13374] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.945807][T13374] batman_adv: batadv0: Interface activated: dummy0 [ 938.068348][T13374] net_ratelimit: 10 callbacks suppressed [ 938.068368][T13374] batadv0: mtu less than device minimum [ 938.124301][T13374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.128174][T13374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.168245][T13374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.207564][T13374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.255036][T13374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.318588][T13374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.381331][T13374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.408799][T13374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 938.470257][T13374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 941.436599][T13470] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2521'. [ 941.678272][T13480] loop2: detected capacity change from 0 to 7 [ 941.740427][T13480] Dev loop2: unable to read RDB block 7 [ 941.740476][T13480] loop2: unable to read partition table [ 941.740710][T13480] loop2: partition table beyond EOD, truncated [ 941.740744][T13480] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 943.451922][ T5854] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 943.637696][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 943.640761][ T5854] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.640792][ T5854] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.677998][ T5854] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 943.678026][ T5854] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 943.678044][ T5854] usb 4-1: Product: syz [ 943.678056][ T5854] usb 4-1: Manufacturer: syz [ 943.800799][ T5854] hub 4-1:4.0: USB hub found [ 943.971877][ T5854] hub 4-1:4.0: 2 ports detected [ 945.018041][ T5854] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 945.018067][ T5854] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 946.432735][ T7577] usb 4-1: USB disconnect, device number 3 [ 946.547149][T13648] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 949.090713][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 951.208521][T13781] veth0_to_team: entered promiscuous mode [ 951.363973][T13786] ip6erspan0: entered allmulticast mode [ 952.034796][T13822] veth0_to_team: entered promiscuous mode [ 953.271896][ T5854] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 953.449360][ T5854] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.449387][ T5854] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 953.450717][ T5854] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 953.450741][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 953.450759][ T5854] usb 7-1: SerialNumber: syz [ 953.613773][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 953.621664][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 953.632294][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 953.640450][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 953.641902][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 953.684365][ T5854] usb 7-1: 0:2 : does not exist [ 953.802115][ T5854] usb 7-1: USB disconnect, device number 20 [ 953.900269][T13875] fuse: Bad value for 'fd' [ 954.040827][T13739] udevd[13739]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 954.199708][T12740] Bluetooth: hci1: connection err: -111 [ 954.442850][T11322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.955002][T11322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.410936][T11322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.741928][ T7807] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 955.801277][T11322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.803767][T12740] Bluetooth: hci2: command tx timeout [ 955.891933][ T7807] usb 7-1: Using ep0 maxpacket: 16 [ 955.909859][ T7807] usb 7-1: config 0 has no interfaces? [ 955.909892][ T7807] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 955.909913][ T7807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.943767][ T7807] usb 7-1: config 0 descriptor?? [ 956.455218][T13868] chnl_net:caif_netlink_parms(): no params data found [ 956.728472][ T807] usb 7-1: USB disconnect, device number 21 [ 957.078665][T11322] bridge_slave_1: left allmulticast mode [ 957.078692][T11322] bridge_slave_1: left promiscuous mode [ 957.078941][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.195397][T11322] bridge_slave_0: left allmulticast mode [ 957.195424][T11322] bridge_slave_0: left promiscuous mode [ 957.195672][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.882279][T12740] Bluetooth: hci2: command tx timeout [ 958.096624][ T7807] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 958.294145][ T7807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.294189][ T7807] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 958.294210][ T7807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.310895][ T7807] usb 7-1: config 0 descriptor?? [ 958.411866][ T829] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 958.601213][ T7807] usbhid 7-1:0.0: can't add hid device: -71 [ 958.601340][ T7807] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 958.651121][ T7807] usb 7-1: USB disconnect, device number 22 [ 958.666499][ T829] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 958.666527][ T829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.666545][ T829] usb 2-1: Product: syz [ 958.666558][ T829] usb 2-1: Manufacturer: syz [ 958.666571][ T829] usb 2-1: SerialNumber: syz [ 959.151850][ T7807] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 959.311891][ T7807] usb 7-1: Using ep0 maxpacket: 32 [ 959.314623][ T7807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.314676][ T7807] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 959.314697][ T7807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.370072][ T7807] usb 7-1: config 0 descriptor?? [ 959.536454][ T7807] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 959.588479][ T7807] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 959.732946][ T829] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 959.733194][ T829] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 959.733215][ T829] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 959.933187][ T829] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 959.962066][T12740] Bluetooth: hci2: command tx timeout [ 960.202210][ T7807] usb 7-1: USB disconnect, device number 23 [ 960.207493][ T7807] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 961.097877][T11322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.211521][T11322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.294074][T11322] bond0 (unregistering): Released all slaves [ 961.444386][ T829] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 961.444421][T14088] netlink: 'syz.1.2757': attribute type 12 has an invalid length. [ 961.630169][T13868] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.630269][T13868] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.649650][T13868] bridge_slave_0: entered allmulticast mode [ 961.658172][ T829] usb 2-1: USB disconnect, device number 10 [ 961.669414][ T829] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 961.669672][T13868] bridge_slave_0: entered promiscuous mode [ 961.871429][T13868] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.871562][T13868] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.887617][T13868] bridge_slave_1: entered allmulticast mode [ 961.892955][T13868] bridge_slave_1: entered promiscuous mode [ 962.041916][T12740] Bluetooth: hci2: command tx timeout [ 962.300441][T14118] net_ratelimit: 10 callbacks suppressed [ 962.300460][T14118] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 962.660963][T13868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.087151][T13868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.101898][ T829] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 963.287125][T13868] team0: Port device team_slave_0 added [ 963.291052][T13868] team0: Port device team_slave_1 added [ 963.322399][ T829] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 963.322427][ T829] usb 2-1: config 128 has no interface number 0 [ 963.322476][ T829] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 963.322498][ T829] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 963.322521][ T829] usb 2-1: config 128 interface 148 has no altsetting 0 [ 963.342809][ T829] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 963.342836][ T829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.342854][ T829] usb 2-1: Product: syz [ 963.342866][ T829] usb 2-1: Manufacturer: syz [ 963.342878][ T829] usb 2-1: SerialNumber: syz [ 963.512149][T11322] hsr_slave_0: left promiscuous mode [ 963.552582][T11322] hsr_slave_1: left promiscuous mode [ 963.554058][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.554079][T11322] batadv0: mtu less than device minimum [ 963.601943][ T829] usb 2-1: USB disconnect, device number 11 [ 963.611167][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.660241][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.686367][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.690624][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.739962][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.750007][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.769758][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.784909][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.906469][T11322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.923106][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.106140][ T829] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 964.167383][T11322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.193194][T11322] batman_adv: batadv0: Interface deactivated: dummy0 [ 964.193220][T11322] batman_adv: batadv0: Removing interface: dummy0 [ 964.251932][ T829] usb 2-1: Using ep0 maxpacket: 8 [ 964.257071][ T829] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 964.257130][ T829] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 964.257150][ T829] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 964.257170][ T829] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 964.257190][ T829] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.257226][ T829] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 964.257246][ T829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.477622][ T829] usb 2-1: usb_control_msg returned -32 [ 964.477664][ T829] usbtmc 2-1:16.0: can't read capabilities [ 964.617482][T11322] veth1_macvtap: left promiscuous mode [ 964.617591][T11322] veth0_macvtap: left promiscuous mode [ 964.617853][T11322] veth1_vlan: left promiscuous mode [ 964.618009][T11322] veth0_vlan: left promiscuous mode [ 964.941905][ T986] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 965.092007][ T986] usb 7-1: Using ep0 maxpacket: 8 [ 965.111341][ T986] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 965.111383][ T986] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 965.111406][ T986] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 965.111427][ T986] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 965.111467][ T986] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 965.111487][ T986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.259174][T14226] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 965.330613][ T986] usb 7-1: GET_CAPABILITIES returned 0 [ 965.330660][ T986] usbtmc 7-1:16.0: can't read capabilities [ 965.453357][ T986] usb 2-1: USB disconnect, device number 12 [ 965.488768][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2828'. [ 965.574564][ T5854] usb 7-1: USB disconnect, device number 24 [ 966.571895][ T5854] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 966.742094][ T5854] usb 7-1: Using ep0 maxpacket: 8 [ 966.751700][ T5854] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 966.766451][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.766475][ T5854] usb 7-1: Product: syz [ 966.766488][ T5854] usb 7-1: Manufacturer: syz [ 966.766501][ T5854] usb 7-1: SerialNumber: syz [ 966.849021][ T5854] usb 7-1: config 0 descriptor?? [ 967.066156][ T5854] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 967.491984][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 968.086216][ T5854] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 968.102704][ T5854] usb 7-1: USB disconnect, device number 25 [ 968.492220][ T8457] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 968.661910][ T8457] usb 2-1: Using ep0 maxpacket: 32 [ 968.664071][ T8457] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 968.664095][ T8457] usb 2-1: config 0 has no interface number 0 [ 968.664140][ T8457] usb 2-1: config 0 interface 89 has no altsetting 0 [ 968.667164][ T8457] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 968.667191][ T8457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.667208][ T8457] usb 2-1: Product: syz [ 968.667221][ T8457] usb 2-1: Manufacturer: syz [ 968.667232][ T8457] usb 2-1: SerialNumber: syz [ 968.688432][ T8457] usb 2-1: config 0 descriptor?? [ 968.735735][ T8457] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 968.735769][ T8457] em28xx 2-1:0.89: Video interface 89 found: bulk [ 969.349313][ T8457] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 969.763162][T11322] team0 (unregistering): Port device team_slave_1 removed [ 970.067989][ T8457] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 970.068017][ T8457] em28xx 2-1:0.89: board has no eeprom [ 970.134503][ T8457] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 970.134529][ T8457] em28xx 2-1:0.89: analog set to bulk mode. [ 970.135940][ T37] em28xx 2-1:0.89: Registering V4L2 extension [ 970.148997][T11322] team0 (unregistering): Port device team_slave_0 removed [ 970.226094][ T8457] usb 2-1: USB disconnect, device number 13 [ 970.236578][ T8457] em28xx 2-1:0.89: Disconnecting em28xx [ 970.258454][ T37] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 970.258477][ T37] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 970.258489][ T37] em28xx 2-1:0.89: No AC97 audio processor [ 970.302387][ T37] usb 2-1: Decoder not found [ 970.302406][ T37] em28xx 2-1:0.89: failed to create media graph [ 970.302434][ T37] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 970.309945][ T37] em28xx 2-1:0.89: Registering snapshot button... [ 970.311642][ T37] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input52 [ 970.437476][ T37] em28xx 2-1:0.89: Remote control support is not available for this card. [ 970.437532][ T8457] em28xx 2-1:0.89: Closing input extension [ 970.437552][ T8457] em28xx 2-1:0.89: Deregistering snapshot button [ 970.794616][ T8457] em28xx 2-1:0.89: Freeing device [ 971.532154][ T8457] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 971.725562][ T8457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.725590][ T8457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.725618][ T8457] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 971.725643][ T8457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.730775][ T8457] usb 2-1: config 0 descriptor?? [ 972.204679][ T8457] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 972.228108][ T8457] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 972.402136][ T8457] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 973.053697][ T8457] cp2112 0003:10C4:EA90.0011: error reading lock byte: -71 [ 973.123492][ T8457] usb 2-1: USB disconnect, device number 14 [ 974.137721][T14232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.429784][T14232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.875556][T13868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.875571][T13868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.875590][T13868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.886089][T13868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.886105][T13868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.886129][T13868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.223463][T13868] hsr_slave_0: entered promiscuous mode [ 975.228725][T13868] hsr_slave_1: entered promiscuous mode [ 975.229896][T13868] debugfs: 'hsr0' already exists in 'hsr' [ 975.229925][T13868] Cannot create hsr debugfs directory [ 976.387703][T14557] loop2: detected capacity change from 0 to 7 [ 976.390817][T14557] loop2: [ 976.390850][T14557] loop2: partition table partially beyond EOD, truncated [ 977.487937][T14587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 977.487956][T14587] IPv6: NLM_F_CREATE should be set when creating new route [ 977.667698][ T36] audit: type=1326 audit(1770778650.684:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14591 comm="syz.1.2982" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b09c1bf79 code=0x0 [ 977.901615][T14592] : renamed from vlan0 (while UP) [ 980.452713][T14670] fuse: Bad value for 'fd' [ 981.570090][T13868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 981.707734][T13868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 981.784336][T13868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 981.846005][T13868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 982.257893][T14728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 982.262467][T14728] team0: Failed to send port change of device bond2 via netlink (err -105) [ 982.262723][T14728] team0: Failed to send options change via netlink (err -105) [ 982.262737][T14728] team0: Port device bond2 added [ 982.573721][T14747] fuse: Bad value for 'fd' [ 982.578677][T13868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.656656][T13868] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.669951][T11322] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.673151][T11322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.698323][T11322] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.704933][T11322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.520759][T13868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.559393][T14786] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3044'. [ 983.665389][T13868] veth0_vlan: entered promiscuous mode [ 983.697649][T13868] veth1_vlan: entered promiscuous mode [ 983.837653][T13868] veth0_macvtap: entered promiscuous mode [ 983.875852][T13868] veth1_macvtap: entered promiscuous mode [ 983.953988][T13868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.990616][T13868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.057763][T11326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.058359][T11326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.093542][T11326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.100198][T11326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.739207][T11326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.739303][T11326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.401647][T11326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.401669][T11326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.538059][ T7577] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 986.691082][ T7577] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.691109][ T7577] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 986.692728][ T7577] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 986.692755][ T7577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 986.692772][ T7577] usb 2-1: SerialNumber: syz [ 987.032930][ T7577] usb 2-1: 0:2 : does not exist [ 987.052135][ T7577] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 987.205979][ T7577] usb 2-1: USB disconnect, device number 15 [ 987.538760][T13739] udevd[13739]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.849672][T14889] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 989.142864][T14929] cgroup: Unknown subsys name 'cpuset' [ 989.765855][T14948] kvm: pic: single mode not supported [ 989.765912][T14948] kvm: pic: single mode not supported [ 989.765997][T14948] kvm: pic: single mode not supported [ 989.766034][T14948] kvm: pic: single mode not supported [ 989.766207][T14948] kvm: pic: single mode not supported [ 989.766410][T14948] kvm: pic: level sensitive irq not supported [ 989.766457][T14948] kvm: pic: single mode not supported [ 989.766465][T14948] kvm: pic: level sensitive irq not supported [ 989.766738][T14948] kvm: pic: level sensitive irq not supported [ 989.766776][T14948] kvm: pic: level sensitive irq not supported [ 989.767219][T14948] kvm: pic: single mode not supported [ 989.767228][T14948] kvm: pic: level sensitive irq not supported [ 989.767263][T14948] kvm: pic: single mode not supported [ 989.767272][T14948] kvm: pic: level sensitive irq not supported [ 989.767447][T14948] kvm: pic: single mode not supported [ 989.767485][T14948] kvm: pic: single mode not supported [ 989.767941][T14948] kvm: pic: level sensitive irq not supported [ 989.767978][T14948] kvm: pic: level sensitive irq not supported [ 989.768146][T14948] kvm: pic: level sensitive irq not supported [ 989.768182][T14948] kvm: pic: level sensitive irq not supported [ 989.995309][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3094'. [ 991.611874][ T5854] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 991.821852][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 991.824482][ T5854] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 991.824511][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.836650][ T5854] usb 2-1: config 0 descriptor?? [ 992.105821][ T5854] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 992.111599][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 992.114723][ T5854] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 992.114779][ T5854] usb 2-1: media controller created [ 992.293106][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 992.688434][ T829] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 992.688469][ T829] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 992.688492][ T829] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 992.688516][ T829] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 992.688540][ T829] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 992.688562][ T829] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 992.688585][ T829] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 992.688609][ T829] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 992.688632][ T829] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 992.688656][ T829] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 992.839742][ T829] hid-generic 0006:0004:0009.0012: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 993.090799][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.090865][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.321971][ T5854] stb0899_attach: Driver disabled by Kconfig [ 993.321990][ T5854] az6027: no front-end attached [ 993.321990][ T5854] [ 993.411992][ T807] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 993.423860][ T5854] az6027: usb out operation failed. (-71) [ 993.423878][ T5854] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 993.427575][ T5854] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53 [ 993.449542][ T5854] dvb-usb: schedule remote query interval to 400 msecs. [ 993.449565][ T5854] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 993.517657][ T5854] usb 2-1: USB disconnect, device number 16 [ 993.580776][ T807] usb 7-1: Using ep0 maxpacket: 8 [ 993.608993][ T807] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 993.609028][ T807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.609047][ T807] usb 7-1: Product: syz [ 993.609060][ T807] usb 7-1: Manufacturer: syz [ 993.609073][ T807] usb 7-1: SerialNumber: syz [ 993.660293][ T807] usb 7-1: config 0 descriptor?? [ 993.895504][ T807] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 994.432647][ T807] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 994.447987][ T807] usb 7-1: USB disconnect, device number 26 [ 994.504562][ T5854] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 994.560022][T11322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.851663][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 994.874122][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 994.877581][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 994.917267][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 994.918035][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 995.362014][ T829] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 995.518312][ T829] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 995.518339][ T829] usb 7-1: config 0 has no interface number 0 [ 995.518398][ T829] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 995.523614][ T829] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 995.523641][ T829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.523658][ T829] usb 7-1: Product: syz [ 995.523671][ T829] usb 7-1: Manufacturer: syz [ 995.523683][ T829] usb 7-1: SerialNumber: syz [ 995.558043][ T829] usb 7-1: config 0 descriptor?? [ 995.629674][T15066] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 996.737154][T11322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.868318][T15102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3141'. [ 996.929574][ T829] plusb 7-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, c2:e1:bd:49:35:1f [ 997.026993][ T829] usb 7-1: USB disconnect, device number 27 [ 997.028761][ T829] plusb 7-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 997.082085][T12740] Bluetooth: hci2: command tx timeout [ 997.167712][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3143'. [ 997.263383][T11322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.460937][T11322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.162019][T12740] Bluetooth: hci2: command tx timeout [ 999.483307][T11335] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 999.782183][T11322] bridge_slave_1: left allmulticast mode [ 999.782213][T11322] bridge_slave_1: left promiscuous mode [ 999.782466][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.921321][T11322] bridge_slave_0: left allmulticast mode [ 999.921349][T11322] bridge_slave_0: left promiscuous mode [ 999.921612][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.263881][T12740] Bluetooth: hci2: command tx timeout [ 1003.319031][T15285] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1003.350908][T15285] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 1003.353002][T12740] Bluetooth: hci2: command tx timeout [ 1003.381703][T15285] kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 1003.382057][T15285] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1003.382164][T15285] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 1003.382340][T15285] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 1003.386388][T15285] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1003.386711][T15285] kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 1003.386888][T15285] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 1003.400140][T15285] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 1004.524141][T11322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.605944][T11322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.645463][T11322] bond0 (unregistering): Released all slaves [ 1004.952389][T15348] fuse: Bad value for 'fd' [ 1004.974702][T11322] IPVS: stopping backup sync thread 14889 ... [ 1005.108403][T15059] chnl_net:caif_netlink_parms(): no params data found [ 1006.836169][T15397] syzkaller0: entered promiscuous mode [ 1006.836198][T15397] syzkaller0: entered allmulticast mode [ 1006.847214][T15399] tipc: Started in network mode [ 1006.847245][T15399] tipc: Node identity da160d37a7e6, cluster identity 4711 [ 1006.871953][T15399] tipc: Enabled bearer , priority 0 [ 1007.191669][T15059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.192687][T15059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.192964][T15059] bridge_slave_0: entered allmulticast mode [ 1007.243992][T15059] bridge_slave_0: entered promiscuous mode [ 1007.620854][T11322] hsr_slave_0: left promiscuous mode [ 1007.663788][T11322] hsr_slave_1: left promiscuous mode [ 1007.664898][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.664921][T11322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.750682][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.750709][T11322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.181151][T11322] veth1_macvtap: left promiscuous mode [ 1008.181250][T11322] veth0_macvtap: left promiscuous mode [ 1008.200897][T11322] veth1_vlan: left promiscuous mode [ 1008.201081][T11322] veth0_vlan: left promiscuous mode [ 1014.455450][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1014.502227][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1014.527242][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1014.600628][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1014.623295][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1016.837991][T12740] Bluetooth: hci4: command tx timeout [ 1017.781888][ T6034] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1017.971899][ T6034] usb 2-1: Using ep0 maxpacket: 32 [ 1017.974275][ T6034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.974305][ T6034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.974339][ T6034] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1017.974358][ T6034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.979112][ T6034] usb 2-1: config 0 descriptor?? [ 1018.083012][T11322] team0 (unregistering): Port device team_slave_1 removed [ 1018.084663][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3337'. [ 1018.389258][ T6034] hid_parser_main: 7 callbacks suppressed [ 1018.389277][ T6034] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 1018.389296][ T6034] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 1018.504228][T11322] team0 (unregistering): Port device team_slave_0 removed [ 1018.590150][ T6034] ft260 0003:0403:6030.0013: chip code: 0000 0000 [ 1018.829672][ T6034] ft260 0003:0403:6030.0013: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1018.922179][T12740] Bluetooth: hci4: command tx timeout [ 1019.035758][ T6034] ft260 0003:0403:6030.0013: failed to retrieve status: -32, no wakeup [ 1019.036610][ T6034] ft260 0003:0403:6030.0013: failed to retrieve status: -32 [ 1019.294540][ T6034] usb 2-1: USB disconnect, device number 17 [ 1021.002690][T12740] Bluetooth: hci4: command tx timeout [ 1022.145681][T15059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.145761][T15059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.145956][T15059] bridge_slave_1: entered allmulticast mode [ 1022.147558][T15059] bridge_slave_1: entered promiscuous mode [ 1022.148703][ T5880] tipc: Node number set to 2112884023 [ 1022.664026][T15059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.681104][T15059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.954185][T15059] team0: Port device team_slave_0 added [ 1022.986408][T15059] team0: Port device team_slave_1 added [ 1023.082005][T12740] Bluetooth: hci4: command tx timeout [ 1024.672796][T15059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.672811][T15059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.672833][T15059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.080106][T15059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.080122][T15059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.080147][T15059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.191126][T15059] hsr_slave_0: entered promiscuous mode [ 1027.215932][T15059] hsr_slave_1: entered promiscuous mode [ 1027.220257][T15059] debugfs: 'hsr0' already exists in 'hsr' [ 1027.220284][T15059] Cannot create hsr debugfs directory [ 1027.373739][T15873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3436'. [ 1027.593190][T15879] vlan0: entered allmulticast mode [ 1027.593222][T15879] bond1: entered allmulticast mode [ 1031.481877][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1031.915449][T15552] chnl_net:caif_netlink_parms(): no params data found [ 1032.410466][T11322] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.410502][T11322] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.781873][ T986] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1033.992067][ T986] usb 2-1: Using ep0 maxpacket: 16 [ 1033.994521][ T986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1033.998366][ T986] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1033.998394][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.998411][ T986] usb 2-1: Product: syz [ 1033.998424][ T986] usb 2-1: Manufacturer: syz [ 1033.998434][ T986] usb 2-1: SerialNumber: syz [ 1034.003775][ T986] usb 2-1: config 0 descriptor?? [ 1034.040445][T11322] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.040477][T11322] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.065440][ T986] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1034.065473][ T986] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1034.762266][ T986] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1035.276487][ T986] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1035.276516][ T986] em28xx 2-1:0.0: board has no eeprom [ 1036.201951][ T986] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1036.201980][ T986] em28xx 2-1:0.0: dvb set to bulk mode. [ 1036.203322][ T5880] em28xx 2-1:0.0: Binding DVB extension [ 1036.403421][ T986] usb 2-1: USB disconnect, device number 18 [ 1036.405654][ T986] em28xx 2-1:0.0: Disconnecting em28xx [ 1036.638775][T11322] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.638811][T11322] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.688498][ T5880] em28xx 2-1:0.0: Registering input extension [ 1037.208284][ T986] em28xx 2-1:0.0: Closing input extension [ 1037.390265][ T986] em28xx 2-1:0.0: Freeing device [ 1039.433939][T11322] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.433974][T11322] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.572151][T16090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3512'. [ 1039.658352][T15552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.659083][T15552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.659414][T15552] bridge_slave_0: entered allmulticast mode [ 1039.677295][T15552] bridge_slave_0: entered promiscuous mode [ 1041.961195][T15552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.961265][T15552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.961453][T15552] bridge_slave_1: entered allmulticast mode [ 1041.971233][T15552] bridge_slave_1: entered promiscuous mode [ 1042.259966][T16096] syz.1.3517 (16096): drop_caches: 2 [ 1043.295833][T15552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.346522][T15552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.555350][T15552] team0: Port device team_slave_0 added [ 1043.558974][T15552] team0: Port device team_slave_1 added [ 1043.886141][T15552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.886157][T15552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.886177][T15552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.888053][T15552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.888065][T15552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.888082][T15552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.567475][T15552] hsr_slave_0: entered promiscuous mode [ 1046.599278][T15552] hsr_slave_1: entered promiscuous mode [ 1046.606160][T15552] debugfs: 'hsr0' already exists in 'hsr' [ 1046.606187][T15552] Cannot create hsr debugfs directory [ 1047.309318][T11322] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.309354][T11322] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.318662][T11322] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1049.318698][T11322] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.862808][T11322] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1051.862842][T11322] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.391049][T11322] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.391071][T11322] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.464171][T15059] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1053.576126][T15059] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1053.766295][T15059] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1054.217983][T15059] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1054.556721][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.556792][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.219413][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1055.254341][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1055.267115][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1055.269068][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1055.278638][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1057.417724][T12740] Bluetooth: hci0: command tx timeout [ 1058.004154][T16372] netlink: 'syz.1.3600': attribute type 1 has an invalid length. [ 1059.808999][T12740] Bluetooth: hci0: command tx timeout [ 1062.071913][T12740] Bluetooth: hci0: command tx timeout [ 1063.973209][ T68] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1064.209024][T12740] Bluetooth: hci0: command tx timeout [ 1064.255382][T11322] dummy0: left allmulticast mode [ 1064.255671][T11322] bridge0: port 4(dummy0) entered disabled state [ 1064.355686][T11322] vlan2: left promiscuous mode [ 1064.356201][T11322] bridge0: port 3(vlan2) entered disabled state [ 1064.537505][T11322] bridge_slave_1: left allmulticast mode [ 1064.537534][T11322] bridge_slave_1: left promiscuous mode [ 1064.537767][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.536237][T11322] bridge_slave_0: left promiscuous mode [ 1065.536495][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.733031][ T36] audit: type=1326 audit(1770778738.754:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16456 comm="syz.5.3632" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc65e85bf79 code=0x0 [ 1065.802323][T11322] dummy0: left allmulticast mode [ 1065.802567][T11322] bridge0: port 3(dummy0) entered disabled state [ 1066.035329][T11322] bridge_slave_1: left allmulticast mode [ 1066.035356][T11322] bridge_slave_1: left promiscuous mode [ 1066.035592][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.143986][T11322] bridge_slave_0: left allmulticast mode [ 1066.144015][T11322] bridge_slave_0: left promiscuous mode [ 1066.144256][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.655370][T11322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.702636][T11322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.754439][T11322] bond0 (unregistering): Released all slaves [ 1072.005108][T11322] bond1 (unregistering): Released all slaves [ 1073.203050][T11322] team0: Port device bond2 removed [ 1073.207364][T11322] bond2 (unregistering): Released all slaves [ 1074.006068][T12740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1074.012498][T12740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1074.023538][T12740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1074.031331][T12740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1074.032803][T12740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1075.442630][T11322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.502704][T11322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.525977][T11322] bond0 (unregistering): Released all slaves [ 1076.125259][ T60] Bluetooth: hci2: command tx timeout [ 1076.764006][T11322] bond1 (unregistering): Released all slaves [ 1077.010920][T11322] : left promiscuous mode [ 1078.256063][ T60] Bluetooth: hci2: command tx timeout [ 1080.356785][ T60] Bluetooth: hci2: command tx timeout [ 1081.465825][T16913] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3836'. [ 1081.465864][T16913] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3836'. [ 1081.769984][T16913] team0: entered promiscuous mode [ 1081.770005][T16913] team_slave_0: entered promiscuous mode [ 1081.770223][T16913] team_slave_1: entered promiscuous mode [ 1081.787582][T16913] bond0: entered promiscuous mode [ 1081.787607][T16913] bond_slave_0: entered promiscuous mode [ 1081.787811][T16913] bond_slave_1: entered promiscuous mode [ 1081.802956][T16913] debugfs: 'hsr1' already exists in 'hsr' [ 1081.802985][T16913] Cannot create hsr debugfs directory [ 1081.836680][T16913] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1082.704558][ T60] Bluetooth: hci2: command tx timeout [ 1085.519307][T16731] chnl_net:caif_netlink_parms(): no params data found [ 1085.554748][T16976] kvm: kvm [16975]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffe900006661 [ 1085.573354][T16976] kvm: kvm [16975]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x6900001500 [ 1085.683042][T16293] chnl_net:caif_netlink_parms(): no params data found [ 1087.860589][T16731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.860715][T16731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.860937][T16731] bridge_slave_0: entered allmulticast mode [ 1087.872009][T16731] bridge_slave_0: entered promiscuous mode [ 1087.902031][T17008] kexec: Could not allocate control_code_buffer [ 1087.962684][T16731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.962819][T16731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.963024][T16731] bridge_slave_1: entered allmulticast mode [ 1087.966609][T16731] bridge_slave_1: entered promiscuous mode [ 1087.968917][T16293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.969037][T16293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.969233][T16293] bridge_slave_0: entered allmulticast mode [ 1087.982299][T16293] bridge_slave_0: entered promiscuous mode [ 1088.046271][T16293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.046398][T16293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.046656][T16293] bridge_slave_1: entered allmulticast mode [ 1088.049648][T16293] bridge_slave_1: entered promiscuous mode [ 1088.494153][T17036] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3871'. [ 1089.312125][T11322] hsr_slave_0: left promiscuous mode [ 1089.342351][T11322] hsr_slave_1: left promiscuous mode [ 1089.343456][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.343481][T11322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.396638][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.396665][T11322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.632472][T11322] hsr_slave_0: left promiscuous mode [ 1089.671983][T11322] hsr_slave_1: left promiscuous mode [ 1089.673029][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.673054][T11322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.723785][T11322] batman_adv: batadv0: Interface deactivated: macsec1 [ 1089.725029][T11322] batman_adv: batadv0: Removing interface: macsec1 [ 1090.968203][T11322] veth1_macvtap: left promiscuous mode [ 1090.968305][T11322] veth0_macvtap: left promiscuous mode [ 1090.968545][T11322] veth1_vlan: left promiscuous mode [ 1090.968707][T11322] veth0_vlan: left promiscuous mode [ 1091.372161][T11322] batadv_slave_0: left promiscuous mode [ 1091.372295][T11322] veth1_macvtap: left promiscuous mode [ 1091.372376][T11322] veth0_macvtap: left promiscuous mode [ 1091.372629][T11322] veth1_vlan: left promiscuous mode [ 1091.372799][T11322] veth0_vlan: left promiscuous mode [ 1096.142336][ T1511] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1097.925317][T17240] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3960'. [ 1099.472468][T11322] team0 (unregistering): Port device team_slave_1 removed [ 1099.832848][T11322] team0 (unregistering): Port device team_slave_0 removed [ 1104.556092][T12740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1104.589060][T12740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1104.634287][T12740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1104.640522][T12740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1104.641252][T12740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1106.493771][T11322] team0 (unregistering): Port device team_slave_1 removed [ 1106.842093][T12740] Bluetooth: hci4: command tx timeout [ 1106.858140][T11322] team0 (unregistering): Port device team_slave_0 removed [ 1108.942245][T12740] Bluetooth: hci4: command tx timeout [ 1110.496132][T16731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.529031][T16731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.680504][T16293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.740695][T16293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.757039][T16731] team0: Port device team_slave_0 added [ 1110.828153][T16731] team0: Port device team_slave_1 added [ 1110.955392][T16293] team0: Port device team_slave_0 added [ 1110.996134][T16293] team0: Port device team_slave_1 added [ 1111.001941][T12740] Bluetooth: hci4: command tx timeout [ 1111.021689][T16731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.021707][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.055518][T16731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.137816][T16731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.137832][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.137858][T16731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.283084][T16293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.283100][T16293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.283124][T16293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.352194][T16293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.352206][T16293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.352220][T16293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.845520][T16731] hsr_slave_0: entered promiscuous mode [ 1112.846932][T16731] hsr_slave_1: entered promiscuous mode [ 1112.847888][T16731] debugfs: 'hsr0' already exists in 'hsr' [ 1112.847912][T16731] Cannot create hsr debugfs directory [ 1112.957312][T16293] hsr_slave_0: entered promiscuous mode [ 1112.958801][T16293] hsr_slave_1: entered promiscuous mode [ 1112.959833][T16293] debugfs: 'hsr0' already exists in 'hsr' [ 1112.959857][T16293] Cannot create hsr debugfs directory [ 1113.081905][T12740] Bluetooth: hci4: command tx timeout [ 1113.860702][T17477] chnl_net:caif_netlink_parms(): no params data found [ 1114.220426][T17477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.220583][T17477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.220751][T17477] bridge_slave_0: entered allmulticast mode [ 1114.247584][T17477] bridge_slave_0: entered promiscuous mode [ 1114.260028][T17477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.260161][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.260411][T17477] bridge_slave_1: entered allmulticast mode [ 1114.283966][T17477] bridge_slave_1: entered promiscuous mode [ 1114.417765][T17477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.436268][T17477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.436647][T16731] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1114.540686][T16731] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1114.865334][T16731] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1114.906177][T17477] team0: Port device team_slave_0 added [ 1114.913705][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1114.920761][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1114.932501][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1114.951161][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1114.961600][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1115.092322][T16731] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1115.117521][T17477] team0: Port device team_slave_1 added [ 1115.338306][T17477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.338323][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.338347][T17477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.402843][T17477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.402859][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.402878][T17477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.685728][T17477] hsr_slave_0: entered promiscuous mode [ 1115.686596][T17477] hsr_slave_1: entered promiscuous mode [ 1115.687167][T17477] debugfs: 'hsr0' already exists in 'hsr' [ 1115.687184][T17477] Cannot create hsr debugfs directory [ 1115.966777][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.966861][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.867208][T11322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.082310][T12740] Bluetooth: hci1: command tx timeout [ 1117.417077][T11322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.740597][T11322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.980945][T17477] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.980968][T17477] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.208837][T11322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.424556][T17477] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.424579][T17477] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.463879][T17751] chnl_net:caif_netlink_parms(): no params data found [ 1118.519896][T16731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.710877][T17477] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.710899][T17477] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.020126][T17477] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.020149][T17477] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.128002][T17751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.128115][T17751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.128260][T17751] bridge_slave_0: entered allmulticast mode [ 1119.129668][T17751] bridge_slave_0: entered promiscuous mode [ 1119.164034][T12740] Bluetooth: hci1: command tx timeout [ 1119.178481][T16731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.178940][T17751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.179130][T17751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.179316][T17751] bridge_slave_1: entered allmulticast mode [ 1119.184007][T17751] bridge_slave_1: entered promiscuous mode [ 1119.270576][T17751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.305697][ T1491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.305873][ T1491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.404756][T17751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.491292][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.491416][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.509112][T17751] team0: Port device team_slave_0 added [ 1119.509464][T11322] bridge_slave_1: left allmulticast mode [ 1119.509485][T11322] bridge_slave_1: left promiscuous mode [ 1119.509692][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.582985][T11322] bridge_slave_0: left allmulticast mode [ 1119.583005][T11322] bridge_slave_0: left promiscuous mode [ 1119.583209][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.692514][T11322] bridge_slave_1: left allmulticast mode [ 1119.692539][T11322] bridge_slave_1: left promiscuous mode [ 1119.692700][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.773139][T11322] bridge_slave_0: left allmulticast mode [ 1119.773168][T11322] bridge_slave_0: left promiscuous mode [ 1119.773541][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.855110][T11322] bridge_slave_1: left allmulticast mode [ 1119.855132][T11322] bridge_slave_1: left promiscuous mode [ 1119.855291][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.912768][T11322] bridge_slave_0: left allmulticast mode [ 1119.912788][T11322] bridge_slave_0: left promiscuous mode [ 1119.912948][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.242707][T12740] Bluetooth: hci1: command tx timeout [ 1122.037344][T11322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.092498][T11322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.114106][T11322] bond0 (unregistering): Released all slaves [ 1122.119139][T11322] bond1 (unregistering): Released all slaves [ 1122.422535][T11322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.523531][T11322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.583932][T11322] bond0 (unregistering): Released all slaves [ 1122.882474][T11322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.973297][T11322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.033927][T11322] bond0 (unregistering): Released all slaves [ 1123.104715][T17751] team0: Port device team_slave_1 added [ 1123.305197][T11322] tipc: Disabling bearer [ 1123.322012][T12740] Bluetooth: hci1: command tx timeout [ 1123.383042][T11322] tipc: Left network mode [ 1123.466250][T17751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.466267][T17751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.466291][T17751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.517163][T17751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.517174][T17751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.517188][T17751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.671629][T17477] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1123.766619][T17477] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1123.941655][T17477] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1124.004224][T17751] hsr_slave_0: entered promiscuous mode [ 1124.005053][T17751] hsr_slave_1: entered promiscuous mode [ 1124.005587][T17751] debugfs: 'hsr0' already exists in 'hsr' [ 1124.005602][T17751] Cannot create hsr debugfs directory [ 1124.010964][T17477] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1125.052882][T11322] hsr_slave_0: left promiscuous mode [ 1125.092048][T11322] hsr_slave_1: left promiscuous mode [ 1125.092736][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.092750][T11322] net_ratelimit: 31 callbacks suppressed [ 1125.092757][T11322] batadv0: mtu less than device minimum [ 1125.096944][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1125.100946][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1125.111042][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1125.119027][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1125.127158][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1125.135127][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1125.143216][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1125.151523][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1125.160046][T11322] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1125.234331][T11322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.254905][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.344654][T11322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.363032][T11322] batman_adv: batadv0: Interface deactivated: dummy0 [ 1125.363059][T11322] batman_adv: batadv0: Removing interface: dummy0 [ 1125.511978][T11322] hsr_slave_0: left promiscuous mode [ 1125.532066][T11322] hsr_slave_1: left promiscuous mode [ 1125.532761][T11322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.573321][T11322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.712919][T11322] hsr_slave_0: left promiscuous mode [ 1125.732464][T11322] hsr_slave_1: left promiscuous mode [ 1125.733116][T11322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.773035][T11322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.898312][T11322] veth1_macvtap: left promiscuous mode [ 1125.898380][T11322] veth0_macvtap: left promiscuous mode [ 1125.898519][T11322] veth1_vlan: left promiscuous mode [ 1125.898611][T11322] veth0_vlan: left promiscuous mode [ 1128.145638][ T1491] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1129.552540][T11322] team0 (unregistering): Port device team_slave_1 removed [ 1129.832914][T11322] team0 (unregistering): Port device team_slave_0 removed [ 1133.413422][T11322] team0 (unregistering): Port device team_slave_1 removed [ 1133.596320][T11322] team0 (unregistering): Port device team_slave_0 removed [ 1133.980789][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1134.042444][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1134.048306][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1134.080375][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1134.081347][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1134.963224][T11322] team0 (unregistering): Port device team_slave_1 removed [ 1135.132717][T11322] team0 (unregistering): Port device team_slave_0 removed [ 1136.139912][T12740] Bluetooth: hci0: command tx timeout [ 1136.451014][T17751] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1136.528333][T17751] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1137.008929][T17751] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1137.048262][T17751] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1137.146852][T17477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.255570][T17775] chnl_net:caif_netlink_parms(): no params data found [ 1137.446340][T17477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.543233][T17775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.543585][T17775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.543833][T17775] bridge_slave_0: entered allmulticast mode [ 1137.545352][T17775] bridge_slave_0: entered promiscuous mode [ 1137.565065][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.565146][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.583660][T17775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.583786][T17775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.584061][T17775] bridge_slave_1: entered allmulticast mode [ 1137.586956][T17775] bridge_slave_1: entered promiscuous mode [ 1137.700041][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.700295][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.774378][T17775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.787404][T17775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.929321][T17775] team0: Port device team_slave_0 added [ 1137.965793][T17775] team0: Port device team_slave_1 added [ 1138.009521][T17775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.009533][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.009547][T17775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.131984][T17775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.132001][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.132025][T17775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.202907][T12740] Bluetooth: hci0: command tx timeout [ 1138.334158][T17775] hsr_slave_0: entered promiscuous mode [ 1138.335239][T17775] hsr_slave_1: entered promiscuous mode [ 1138.486443][T17751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.854198][T17751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.978657][ T1426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.978816][ T1426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.050599][T11301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.050867][T11301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.367212][T17477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.282593][T12740] Bluetooth: hci0: command tx timeout [ 1140.499924][T17477] veth0_vlan: entered promiscuous mode [ 1140.536082][T17477] veth1_vlan: entered promiscuous mode [ 1140.659007][T11322] bridge_slave_1: left allmulticast mode [ 1140.659058][T11322] bridge_slave_1: left promiscuous mode [ 1140.659310][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.784031][T11322] bridge_slave_0: left allmulticast mode [ 1140.784059][T11322] bridge_slave_0: left promiscuous mode [ 1140.784319][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.876536][T11322] bridge_slave_1: left allmulticast mode [ 1140.876566][T11322] bridge_slave_1: left promiscuous mode [ 1140.877475][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.968296][T11322] bridge_slave_0: left allmulticast mode [ 1140.968324][T11322] bridge_slave_0: left promiscuous mode [ 1140.968558][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.361975][T12740] Bluetooth: hci0: command tx timeout [ 1142.768869][T11322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.824324][T11322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.865076][T11322] bond0 (unregistering): Released all slaves [ 1143.153617][T11322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.233393][T11322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.324892][T11322] bond0 (unregistering): Released all slaves [ 1143.356030][T17751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.376237][T17477] veth0_macvtap: entered promiscuous mode [ 1143.410647][T17477] veth1_macvtap: entered promiscuous mode [ 1143.677545][T17477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.837732][T17477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.971181][T11304] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.997014][T11304] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.080288][T11304] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.099781][T17775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1144.230443][T11304] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.405490][T11322] hsr_slave_0: left promiscuous mode [ 1144.422072][T11322] hsr_slave_1: left promiscuous mode [ 1144.423333][T11322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.452594][T11322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.652006][T11322] hsr_slave_0: left promiscuous mode [ 1144.672136][T11322] hsr_slave_1: left promiscuous mode [ 1144.673081][T11322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.712905][T11322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.952972][T11322] team0 (unregistering): Port device team_slave_1 removed [ 1146.252936][T11322] team0 (unregistering): Port device team_slave_0 removed [ 1148.982539][T11322] team0 (unregistering): Port device team_slave_1 removed [ 1149.153237][T11322] team0 (unregistering): Port device team_slave_0 removed [ 1149.895205][T17775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1149.943702][T17775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1150.044179][T17775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1150.081397][T17751] veth0_vlan: entered promiscuous mode [ 1150.455634][T17751] veth1_vlan: entered promiscuous mode [ 1150.640313][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.640334][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.812284][T17751] veth0_macvtap: entered promiscuous mode [ 1150.836442][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.836462][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.838336][T17751] veth1_macvtap: entered promiscuous mode [ 1150.951151][T17751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.975141][T17751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.000852][ T1445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.011346][ T1445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.066749][ T1445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.085111][ T1445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.729756][T17775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.223117][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.223139][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.291667][T17775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.454421][ T1426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.455116][ T1491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.455131][ T1491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.459479][ T1426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.596463][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.596705][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.069995][T17775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.711852][ T6034] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1155.871930][ T6034] usb 9-1: Using ep0 maxpacket: 32 [ 1155.880055][ T6034] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1155.880085][ T6034] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.880104][ T6034] usb 9-1: Product: syz [ 1155.880116][ T6034] usb 9-1: Manufacturer: syz [ 1155.880129][ T6034] usb 9-1: SerialNumber: syz [ 1156.560755][ T6034] usb 9-1: config 0 descriptor?? [ 1156.686061][ T6034] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1157.956230][ T6034] gspca_ov534_9: reg_w failed -71 [ 1158.212371][T17775] veth0_vlan: entered promiscuous mode [ 1158.250650][T17775] veth1_vlan: entered promiscuous mode [ 1158.251880][ T6034] gspca_ov534_9: Unknown sensor 0000 [ 1158.251983][ T6034] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1158.274449][ T6034] usb 9-1: USB disconnect, device number 10 [ 1158.426771][T17775] veth0_macvtap: entered promiscuous mode [ 1158.429711][T17775] veth1_macvtap: entered promiscuous mode [ 1158.593192][T17775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.619353][T17775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.689454][ T1511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.694088][ T1511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.699726][ T1511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.717710][ T1511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.289516][T18044] netlink: 'syz.5.4261': attribute type 4 has an invalid length. [ 1159.289540][T18044] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4261'. [ 1159.388964][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.388984][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.498755][T18051] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4264'. [ 1159.498784][T18051] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4264'. [ 1159.499435][T18051] net_ratelimit: 30 callbacks suppressed [ 1159.499451][T18051] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1159.681899][ T6034] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1159.685825][ T1445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.685844][ T1445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.845918][ T6034] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1159.845977][ T6034] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.847898][ T6034] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1159.847924][ T6034] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1159.847942][ T6034] usb 9-1: Manufacturer: syz [ 1159.895515][ T6034] usb 9-1: config 0 descriptor?? [ 1160.121921][ T1491] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1160.173303][ T6034] rc_core: IR keymap rc-hauppauge not found [ 1160.174260][ T6034] Registered IR keymap rc-empty [ 1160.176660][ T6034] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1160.210845][ T6034] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input55 [ 1160.288029][ T6034] usb 9-1: USB disconnect, device number 11 [ 1160.734600][ T36] audit: type=1804 audit(1770778833.704:1053): pid=18094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.4277" name="/newroot/11/file0" dev="tmpfs" ino=73 res=1 errno=0 [ 1160.786147][ T36] audit: type=1800 audit(1770778833.804:1054): pid=18094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4277" name="file0" dev="tmpfs" ino=73 res=0 errno=0 [ 1162.410700][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4287'. [ 1162.456261][T18120] [U] g Tǫ0X t3w*(sɬZJPnDƑuHy6[ ݝrHE[g./獹=0G/aiӉ&6lgF3)=ɯ8}MRBrwǔcw_4أݓѻU.LNFoG`&Dv [ 1162.456291][T18120] [U] {,.\(݇W1"_//1TEm>6;w;ie.g8F TO6ء,(OJ&CG]Aov\ّ')0H)NZ, [ 1162.456308][T18120] [U] l b@k.YtX1Z;͔.ǘlV KhɰѰP#Ƶ-Юh@\ m|xtGyٱ޾'X ó:֑ [ 1162.456324][T18120] [U] ٹÖh_ɧ-[d:+J֖>`*ȧ]`da!1"ݳ[#G1S E@sEK?p m1Ğ%E#sA [ 1162.456351][T18120] [U] ri_xY6iRBx~ɌKXOnqԇGXa>8JߒJ\_`p5{z?@UPo?Ekjήu ϊ_cT5R|S+ pWMt^mͱ:dR#KVUYB [ 1162.456380][T18120] [U] HF1#0,\{cOg^L%5+O'a|7Uk,-!`PDZ ;z6(e\c(aعSL(*݆O[ ytłP܁܇l kT7A4ePy ([,cEY.?߸'V@ⵖ\-_{ZN؃OQє-88TӜN52{ 3,=sgeYFʴG]LN3DIE{={Ի.y.m ʯ|~>7rqXvEٗb>}fWbQ򕷰K~V~4 [ 1162.456405][T18120] [U] ,#h@QJvf&l:O@S4M9a)?2ejp؏p'QG5<7KoNh%*qu1bz [ 1162.456416][T18120] [U] Gt [ 1162.456423][T18120] [U] /Pc3IN [ 1162.456436][T18120] [U] ݥK҈ʄ) ldDNUpbHmnna qUN [ 1162.456473][T18120] [U] U([ūts [ 1162.456484][T18120] [U] >"ë?~ܦ`*ʚ5{"$s?KH.8IgҞ3miLɆZaSD$HӢtf0pVcLJ [ 1162.474276][T18117] [U] !|h l&?զ`6b@+DW<yL[Z@~H} e:LAeMQ4٫) ϺP=qfiPtC? f%h [ 1162.810465][ T7577] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1163.052079][ T7577] usb 9-1: Using ep0 maxpacket: 8 [ 1163.066777][ T7577] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1163.108623][ T7577] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1163.213350][ T7577] usb 9-1: string descriptor 0 read error: -22 [ 1163.213459][ T7577] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1163.213471][ T7577] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.325366][ T7577] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1163.492405][T18124] usb 9-1: dvb_usb_au6610: wlen=0, aborting [ 1163.492935][ T7577] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1163.493377][ T7577] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1163.493433][ T7577] usb 9-1: media controller created [ 1163.616828][ T7577] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1163.630836][T18155] tipc: Started in network mode [ 1163.630873][T18155] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 1163.630932][T18155] tipc: Enabling of bearer rejected, failed to enable media [ 1163.730166][ T7577] zl10353_read_register: readreg error (reg=127, ret==0) [ 1163.940737][ T7577] usb 9-1: USB disconnect, device number 12 [ 1164.486262][T18177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.739283][ T36] audit: type=1326 audit(1770778837.754:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63764bf79 code=0x7ffc0000 [ 1164.739556][ T36] audit: type=1326 audit(1770778837.754:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63764bf79 code=0x7ffc0000 [ 1164.746561][ T36] audit: type=1326 audit(1770778837.764:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7ff63764bf79 code=0x7ffc0000 [ 1164.746621][ T36] audit: type=1326 audit(1770778837.764:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63764bf79 code=0x7ffc0000 [ 1164.746660][ T36] audit: type=1326 audit(1770778837.764:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63764bf79 code=0x7ffc0000 [ 1164.748633][ T36] audit: type=1326 audit(1770778837.764:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7ff63764bf79 code=0x7ffc0000 [ 1164.748703][T18190] syz.2.4314(18190): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1164.748903][ T36] audit: type=1326 audit(1770778837.764:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18189 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63764bf79 code=0x7ffc0000 [ 1166.769909][T18265] netlink: 'syz.5.4342': attribute type 1 has an invalid length. [ 1166.770055][T18265] netlink: 'syz.5.4342': attribute type 2 has an invalid length. [ 1166.770069][T18265] netlink: 'syz.5.4342': attribute type 1 has an invalid length. [ 1166.770079][T18265] netlink: 'syz.5.4342': attribute type 3 has an invalid length. [ 1166.770090][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4342'. [ 1168.378284][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4369'. [ 1168.672795][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4373'. [ 1168.717942][T18343] veth1_to_hsr: entered promiscuous mode [ 1168.757549][T18343] veth1_to_hsr: left promiscuous mode [ 1169.188434][T18362] netlink: 'syz.5.4380': attribute type 14 has an invalid length. [ 1169.680721][T18377] netlink: 'syz.5.4384': attribute type 11 has an invalid length. [ 1170.138791][T18389] sctp: [Deprecated]: syz.4.4388 (pid 18389) Use of int in max_burst socket option. [ 1170.138791][T18389] Use struct sctp_assoc_value instead [ 1170.924258][T18430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4404'. [ 1171.029021][T18434] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4406'. [ 1171.412275][T12740] Bluetooth: hci4: Invalid handle: 0x306c > 0x0eff [ 1173.770085][T18554] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.4456'. [ 1176.423949][T18641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1176.552892][ T36] audit: type=1326 audit(1770778849.574:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.4.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4158b7bf79 code=0x7ffc0000 [ 1176.553166][ T36] audit: type=1326 audit(1770778849.574:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.4.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4158b7bf79 code=0x7ffc0000 [ 1176.623065][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4487'. [ 1176.624623][ T36] audit: type=1326 audit(1770778849.574:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.4.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4158b7bf79 code=0x7ffc0000 [ 1176.625106][ T36] audit: type=1326 audit(1770778849.644:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.4.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4158b7bf79 code=0x7ffc0000 [ 1176.625551][ T36] audit: type=1326 audit(1770778849.644:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.4.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4158b1d399 code=0x7ffc0000 [ 1176.625963][ T36] audit: type=1326 audit(1770778849.644:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.4.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4158b1d399 code=0x7ffc0000 [ 1176.626261][ T36] audit: type=1326 audit(1770778849.644:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.4.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4158b7bf79 code=0x7ffc0000 [ 1176.626541][ T36] audit: type=1326 audit(1770778849.644:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.4.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4158b7bf79 code=0x7ffc0000 [ 1176.626954][ T36] audit: type=1326 audit(1770778849.644:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.4.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4158b1d399 code=0x7ffc0000 [ 1176.627355][ T36] audit: type=1326 audit(1770778849.644:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18644 comm="syz.4.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4158b1d399 code=0x7ffc0000 [ 1177.420564][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.420635][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.596964][ T37] kernel write not supported for file /dsp1 (pid: 37 comm: kworker/1:1) [ 1177.735062][T18665] tun0: tun_chr_ioctl cmd 1074812117 [ 1180.552242][ T37] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1180.704699][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 1180.706974][ T37] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1180.707010][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1180.709570][ T37] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1180.709596][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.709614][ T37] usb 3-1: Product: syz [ 1180.709626][ T37] usb 3-1: Manufacturer: syz [ 1180.709639][ T37] usb 3-1: SerialNumber: syz [ 1180.739660][ T37] usb 3-1: config 0 descriptor?? [ 1180.758640][ T37] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1180.758671][ T37] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1181.384112][ T37] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1181.592333][ T37] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1181.592747][ T37] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1181.592763][ T37] em28xx 3-1:0.0: No AC97 audio processor [ 1181.622397][ T37] usb 3-1: USB disconnect, device number 4 [ 1181.624813][ T37] em28xx 3-1:0.0: Disconnecting em28xx [ 1181.668548][ T37] em28xx 3-1:0.0: Freeing device [ 1183.750567][T18894] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.4582'. [ 1184.841793][T18936] netlink: 'syz.5.4599': attribute type 83 has an invalid length. [ 1189.252106][ T7852] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1189.351999][ T986] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1189.415453][ T7852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1189.415485][ T7852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.415505][ T7852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1189.415544][ T7852] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1189.415565][ T7852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.477567][ T7852] usb 3-1: config 0 descriptor?? [ 1189.531914][ T986] usb 5-1: Using ep0 maxpacket: 8 [ 1189.535331][ T986] usb 5-1: config 0 has no interfaces? [ 1189.539220][ T986] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1189.539249][ T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.539319][ T986] usb 5-1: Product: syz [ 1189.539333][ T986] usb 5-1: Manufacturer: syz [ 1189.539346][ T986] usb 5-1: SerialNumber: syz [ 1189.613185][ T986] usb 5-1: config 0 descriptor?? [ 1189.835466][ T37] usb 5-1: USB disconnect, device number 7 [ 1190.082115][ T7852] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1190.258197][ T8457] usb 3-1: USB disconnect, device number 5 [ 1190.396171][T19150] fido_id[19150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1191.507291][ T1491] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1194.727496][T19309] can0: slcan on ttyS3. [ 1194.934956][T19318] can0 (unregistered): slcan off ttyS3. [ 1195.751950][ T37] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1195.908004][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.908038][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.908059][ T37] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1195.908096][ T37] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1195.908116][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.939113][ T37] usb 5-1: config 0 descriptor?? [ 1196.555562][ T37] usbhid 5-1:0.0: can't add hid device: -71 [ 1196.555681][ T37] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1196.568883][ T37] usb 5-1: USB disconnect, device number 8 [ 1196.771962][T19314] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1196.961119][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4764'. [ 1197.301960][T19417] netlink: 'syz.5.4770': attribute type 11 has an invalid length. [ 1197.301983][T19417] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4770'. [ 1197.342271][T19417] netlink: 'syz.5.4770': attribute type 11 has an invalid length. [ 1197.342292][T19417] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4770'. [ 1197.512822][T19417] netlink: 'syz.5.4770': attribute type 11 has an invalid length. [ 1197.512845][T19417] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4770'. [ 1197.793227][T19442] syzkaller0: refused to change device tx_queue_len [ 1198.643752][T19479] netlink: 'syz.5.4792': attribute type 3 has an invalid length. [ 1199.592036][ T7852] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1199.766100][ T7852] usb 5-1: Using ep0 maxpacket: 16 [ 1199.770239][ T7852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.770271][ T7852] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1199.770310][ T7852] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1199.770330][ T7852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.887801][ T7852] usb 5-1: config 0 descriptor?? [ 1200.169488][T19546] netlink: 'syz.2.4819': attribute type 12 has an invalid length. [ 1200.169510][T19546] netlink: 'syz.2.4819': attribute type 29 has an invalid length. [ 1200.169521][T19546] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4819'. [ 1200.169544][T19546] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4819'. [ 1200.296819][ T7852] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 1200.298907][ T7852] microsoft 0003:045E:07DA.0015: unknown main item tag 0x7 [ 1200.300215][ T7852] HID 045e:07da: Invalid code 65791 type 1 [ 1200.300527][ T7852] HID 045e:07da: Invalid code 768 type 1 [ 1200.300539][ T7852] HID 045e:07da: Invalid code 769 type 1 [ 1200.300551][ T7852] HID 045e:07da: Invalid code 770 type 1 [ 1200.300563][ T7852] HID 045e:07da: Invalid code 771 type 1 [ 1200.300574][ T7852] HID 045e:07da: Invalid code 772 type 1 [ 1200.300586][ T7852] HID 045e:07da: Invalid code 773 type 1 [ 1200.300597][ T7852] HID 045e:07da: Invalid code 774 type 1 [ 1200.300608][ T7852] HID 045e:07da: Invalid code 775 type 1 [ 1200.300618][ T7852] HID 045e:07da: Invalid code 776 type 1 [ 1200.443718][ T7852] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input56 [ 1200.602711][ T7852] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1200.646607][ T7852] usb 5-1: USB disconnect, device number 9 [ 1200.831675][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4826'. [ 1200.892790][T19562] fido_id[19562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1201.380857][T19589] netlink: 'syz.8.4834': attribute type 8 has an invalid length. [ 1201.380877][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4834'. [ 1201.411701][T19589] bond0: entered promiscuous mode [ 1201.421945][T19589] bond_slave_0: entered promiscuous mode [ 1201.422201][T19589] bond_slave_1: entered promiscuous mode [ 1201.435007][T19589] gretap0: entered promiscuous mode [ 1201.440347][T19589] gretap0: left promiscuous mode [ 1201.471928][T19589] bond0: left promiscuous mode [ 1201.471950][T19589] bond_slave_0: left promiscuous mode [ 1201.472452][T19589] bond_slave_1: left promiscuous mode [ 1203.881915][ T37] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1204.068753][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 1204.078304][ T37] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1204.078333][ T37] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1204.078354][ T37] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1204.078404][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1204.078425][ T37] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1204.078448][ T37] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1204.078494][ T37] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1204.078585][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.149334][ T37] usb 5-1: config 0 descriptor?? [ 1204.462641][ T37] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1204.625573][T18351] usb 5-1: USB disconnect, device number 10 [ 1204.655029][T18351] usblp0: removed [ 1205.219711][T19728] netlink: 'syz.2.4885': attribute type 1 has an invalid length. [ 1205.461528][T19728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1205.493413][T19735] bond1: (slave dummy0): making interface the new active one [ 1205.495369][T19735] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1209.207359][T19883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.212929][T19883] bridge_slave_1: left allmulticast mode [ 1209.212956][T19883] bridge_slave_1: left promiscuous mode [ 1209.213201][T19883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.757566][ T36] kauditd_printk_skb: 469 callbacks suppressed [ 1209.757585][ T36] audit: type=1800 audit(1770778882.734:1541): pid=19903 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.4948" name="bus" dev="overlay" ino=643 res=0 errno=0 [ 1210.591940][ T5854] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1210.764807][ T5854] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.764833][ T5854] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1210.767573][ T5854] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1210.767601][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1210.767620][ T5854] usb 5-1: SerialNumber: syz [ 1211.040208][ T5854] usb 5-1: 0:2 : does not exist [ 1211.202003][ T5854] usb 5-1: USB disconnect, device number 11 [ 1211.341575][T18156] udevd[18156]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1213.720598][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4991'. [ 1213.919229][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4991'. [ 1214.132047][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4991'. [ 1217.539781][T20178] netlink: 'syz.2.5033': attribute type 10 has an invalid length. [ 1217.539803][T20178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5033'. [ 1217.824543][T20178] team0: Port device geneve0 added [ 1219.948761][T20231] netlink: 'syz.5.5055': attribute type 27 has an invalid length. [ 1220.858878][T20231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.859448][T20231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.678712][T20231] veth0_to_team: left promiscuous mode [ 1221.762751][T20231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.978639][T20291] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5074'. [ 1222.123956][T20298] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5076'. [ 1222.549559][T20231] ip6gre1: left promiscuous mode [ 1222.549584][T20231] ip6gre1: left allmulticast mode [ 1222.643915][T20258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1222.696006][T20294] syzkaller1: entered promiscuous mode [ 1222.696106][T20294] syzkaller1: entered allmulticast mode [ 1222.698828][ T1000] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.749656][ T1000] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.749950][ T1000] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.204039][ T1000] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.223287][T20338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5089'. [ 1223.503260][ T1000] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1225.192903][T20399] overlayfs: failed to resolve '/r͌~2lO^': -2 [ 1225.839967][T20427] netlink: 'syz.4.5120': attribute type 39 has an invalid length. [ 1226.491569][T20449] binder: 20442:20449 ioctl c0306201 2000000003c0 returned -14 [ 1226.784065][T20455] : entered promiscuous mode [ 1226.888211][T20465] loop2: detected capacity change from 0 to 7 [ 1226.895773][ T5165] loop2: [ 1226.895812][ T5165] loop2: partition table partially beyond EOD, truncated [ 1226.947027][T20465] loop2: [ 1226.947049][T20465] loop2: partition table partially beyond EOD, truncated [ 1227.054278][ T5165] loop2: [ 1227.054299][ T5165] loop2: partition table partially beyond EOD, truncated [ 1227.294602][T20450] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1227.299926][T20450] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1227.402837][T20450] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1227.580223][T20450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1227.580322][T20450] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1227.732400][T20450] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1228.341867][ T7577] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1228.538925][ T7577] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.538950][ T7577] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1228.540554][ T7577] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1228.540579][ T7577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1228.540595][ T7577] usb 3-1: SerialNumber: syz [ 1228.613146][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 1228.662758][ T7577] usb 3-1: 0:2 : does not exist [ 1229.832083][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 1230.684023][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 1231.991923][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 1232.761895][T12740] Bluetooth: hci4: command 0x0c1a tx timeout [ 1233.140093][T20532] loop2: detected capacity change from 0 to 7 [ 1233.167533][T20532] Dev loop2: unable to read RDB block 7 [ 1233.167584][T20532] loop2: unable to read partition table [ 1233.167770][T20532] loop2: partition table beyond EOD, truncated [ 1233.167787][T20532] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1233.216962][ T7577] usb 3-1: USB disconnect, device number 6 [ 1233.626468][T17871] udevd[17871]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1234.042009][T12740] Bluetooth: hci1: command 0x0c1a tx timeout [ 1234.661611][T20577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5171'. [ 1235.649595][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5179'. [ 1235.651598][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5179'. [ 1235.751973][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5179'. [ 1235.900108][ T7577] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1236.061838][ T7577] usb 3-1: Using ep0 maxpacket: 32 [ 1236.096093][ T7577] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1236.096121][ T7577] usb 3-1: config 0 has no interface number 0 [ 1236.096166][ T7577] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1236.099165][ T7577] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1236.099192][ T7577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.099210][ T7577] usb 3-1: Product: syz [ 1236.099223][ T7577] usb 3-1: Manufacturer: syz [ 1236.099235][ T7577] usb 3-1: SerialNumber: syz [ 1236.168726][ T7577] usb 3-1: config 0 descriptor?? [ 1236.178745][T20600] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1236.433168][T20600] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1237.666746][ T7577] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1237.666776][ T7577] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 1237.696202][ T7577] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1237.725647][ T7577] usb 3-1: USB disconnect, device number 7 [ 1239.421710][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.422004][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.574704][T20694] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5207'. [ 1253.522038][T12740] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 1253.527145][T12740] Bluetooth: hci4: unexpected event for opcode 0x203e [ 1255.200483][ T829] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1256.113945][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1256.353845][ T829] usb 5-1: config 0 has no interfaces? [ 1256.383685][ T829] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1256.383714][ T829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.383732][ T829] usb 5-1: Product: syz [ 1256.383744][ T829] usb 5-1: Manufacturer: syz [ 1256.383757][ T829] usb 5-1: SerialNumber: syz [ 1256.450713][ T829] usb 5-1: config 0 descriptor?? [ 1257.577187][T12740] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1257.577636][T12740] Bluetooth: hci4: Injecting HCI hardware error event [ 1257.581334][T12740] Bluetooth: hci4: hardware error 0x00 [ 1257.771607][ T829] usb 5-1: USB disconnect, device number 12 [ 1259.655099][T12740] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1262.580476][T21010] netlink: 'syz.5.5304': attribute type 1 has an invalid length. [ 1262.687375][T21010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1262.956180][T21016] bond1: (slave dummy0): making interface the new active one [ 1262.961645][T21016] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1263.800674][T21034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5310'. [ 1267.392136][T21086] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(12) [ 1267.392163][T21086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1267.448243][T21086] vhci_hcd vhci_hcd.0: Device attached [ 1267.781864][ T5854] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1267.900005][ T829] usb 50-1: SetAddress Request (2) to port 0 [ 1267.900217][ T829] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1268.046300][ T5854] usb 9-1: Using ep0 maxpacket: 16 [ 1268.068596][ T5854] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.068623][ T5854] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1268.092051][ T5854] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1268.092077][ T5854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.092093][ T5854] usb 9-1: Product: syz [ 1268.092106][ T5854] usb 9-1: Manufacturer: syz [ 1268.092117][ T5854] usb 9-1: SerialNumber: syz [ 1268.554799][T21090] vhci_hcd: connection reset by peer [ 1269.051086][T11335] vhci_hcd vhci_hcd.8: stop threads [ 1269.195223][T11335] vhci_hcd vhci_hcd.8: release socket [ 1269.215921][ T5854] usb 9-1: 0:2 : does not exist [ 1269.242347][ T5854] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1269.243669][T11335] vhci_hcd vhci_hcd.8: disconnect device [ 1269.353991][ T5854] usb 9-1: USB disconnect, device number 13 [ 1269.493267][T18156] udevd[18156]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.045710][ T829] usb 50-1: device descriptor read/8, error -110 [ 1274.489386][ T829] usb usb50-port1: attempt power cycle [ 1275.098546][ T829] usb usb50-port1: unable to enumerate USB device [ 1277.747007][T21218] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1277.747034][T21218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1277.766376][T21218] vhci_hcd vhci_hcd.0: Device attached [ 1277.824853][T21218] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(11) [ 1277.824880][T21218] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1277.824932][T21218] vhci_hcd vhci_hcd.0: Device attached [ 1277.858418][T21228] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(13) [ 1277.858436][T21228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1277.861656][T21228] vhci_hcd vhci_hcd.0: Device attached [ 1277.936732][T21228] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(18) [ 1277.936749][T21228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1277.971839][T21218] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(15) [ 1277.971869][T21218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1277.991815][T21228] vhci_hcd vhci_hcd.0: Device attached [ 1278.004232][T21228] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1278.039060][T21218] vhci_hcd vhci_hcd.0: Device attached [ 1278.048692][T21234] vhci_hcd: connection closed [ 1278.049087][T11304] vhci_hcd vhci_hcd.8: stop threads [ 1278.049113][T11304] vhci_hcd vhci_hcd.8: release socket [ 1278.061796][T21224] vhci_hcd: connection closed [ 1278.072104][ T7852] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1278.079562][T21222] vhci_hcd: connection closed [ 1278.079762][T21232] vhci_hcd: connection closed [ 1278.080161][T21229] vhci_hcd: connection closed [ 1278.113964][T11304] vhci_hcd vhci_hcd.8: disconnect device [ 1278.125669][T11304] vhci_hcd vhci_hcd.8: stop threads [ 1278.125690][T11304] vhci_hcd vhci_hcd.8: release socket [ 1278.153689][T21223] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1278.227586][T11304] vhci_hcd vhci_hcd.8: disconnect device [ 1278.227669][T11304] vhci_hcd vhci_hcd.8: stop threads [ 1278.227688][T11304] vhci_hcd vhci_hcd.8: release socket [ 1278.227850][T11304] vhci_hcd vhci_hcd.8: disconnect device [ 1278.239206][T11304] vhci_hcd vhci_hcd.8: stop threads [ 1278.239225][T11304] vhci_hcd vhci_hcd.8: release socket [ 1278.239305][T11304] vhci_hcd vhci_hcd.8: disconnect device [ 1278.245716][T11304] vhci_hcd vhci_hcd.8: stop threads [ 1278.245741][T11304] vhci_hcd vhci_hcd.8: release socket [ 1278.245810][T11304] vhci_hcd vhci_hcd.8: disconnect device [ 1278.939303][ T36] audit: type=1326 audit(1770778951.924:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21259 comm="syz.2.5376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff63764bf79 code=0x0 [ 1279.953058][T21259] delete_channel: no stack [ 1280.088907][T21263] Bluetooth: MGMT ver 1.23 [ 1280.088941][T21263] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 1283.546600][ T7852] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1283.549931][ T7588] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1284.100102][ T7588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.100159][ T7588] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1284.100184][ T7588] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1284.767620][ T7588] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1284.767651][ T7588] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1284.767669][ T7588] usb 3-1: Product: syz [ 1284.767682][ T7588] usb 3-1: Manufacturer: syz [ 1284.767695][ T7588] usb 3-1: SerialNumber: syz [ 1285.097191][ T7588] usb 3-1: config 0 descriptor?? [ 1285.347774][ T7588] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1285.520968][T21306] udevd[21306]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1286.625047][ T8457] usb 3-1: USB disconnect, device number 8 [ 1287.418371][T21372] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1287.515683][T21372] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1287.515709][T21372] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1287.515806][T21372] vhci_hcd vhci_hcd.0: Device attached [ 1288.553800][T11301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1288.753160][ T8457] usb 38-1: SetAddress Request (2) to port 0 [ 1288.753214][ T8457] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1288.862328][T21378] vhci_hcd: connection reset by peer [ 1288.867436][ T68] vhci_hcd vhci_hcd.2: stop threads [ 1288.867460][ T68] vhci_hcd vhci_hcd.2: release socket [ 1288.867523][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 1293.801972][ T8457] usb 38-1: device descriptor read/8, error -110 [ 1295.083099][ T8457] usb usb38-port1: attempt power cycle [ 1297.280983][ T8457] usb usb38-port1: unable to enumerate USB device [ 1300.295208][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.295305][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.861436][T21572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1309.321044][T21597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1318.847199][T21723] sctp: [Deprecated]: syz.4.5502 (pid 21723) Use of int in max_burst socket option. [ 1318.847199][T21723] Use struct sctp_assoc_value instead [ 1320.897280][T21734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1321.469290][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1322.680146][T21776] 9pnet_virtio: no channels available for device syz [ 1324.175142][T21811] bond1: (slave dummy0): Releasing active interface [ 1324.826036][T21811] batman_adv: batadv0: Adding interface: dummy0 [ 1324.826054][T21811] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.826116][T21811] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1325.523596][T21826] QAT: failed to copy from user cfg_data. [ 1326.192094][ T7588] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1326.341979][ T7588] usb 5-1: Using ep0 maxpacket: 32 [ 1326.379529][ T7588] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1326.379550][ T7588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.379559][ T7588] usb 5-1: Product: syz [ 1326.379566][ T7588] usb 5-1: Manufacturer: syz [ 1326.379573][ T7588] usb 5-1: SerialNumber: syz [ 1326.391034][ T7588] usb 5-1: config 0 descriptor?? [ 1326.712545][ T7588] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1326.712564][ T7588] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1326.866142][ T7588] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1326.882361][ T7588] usb 5-1: USB disconnect, device number 13 [ 1328.018087][T21889] ceph: No mds server is up or the cluster is laggy [ 1328.040523][ T7588] libceph: connect (1)[c::]:6789 error -101 [ 1328.047472][ T7588] libceph: mon0 (1)[c::]:6789 connect error [ 1332.682119][ T807] ------------[ cut here ]------------ [ 1332.682133][ T807] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1332.682155][ T807] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#1: kworker/1:2/807 [ 1332.682199][ T807] Modules linked in: [ 1332.682227][ T807] CPU: 1 UID: 0 PID: 807 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1332.682252][ T807] Tainted: [L]=SOFTLOCKUP [ 1332.682258][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1332.682270][ T807] Workqueue: events drm_fb_helper_damage_work [ 1332.682303][ T807] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 1332.682327][ T807] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 af 2b dc fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1332.682343][ T807] RSP: 0018:ffffc90003e078e0 EFLAGS: 00010246 [ 1332.682359][ T807] RAX: 1ffff1102837d200 RBX: ffffffff8f53c2c0 RCX: 0000000000000000 [ 1332.682372][ T807] RDX: ffffffff8b9eef60 RSI: ffffffff8ba0acc0 RDI: ffffffff8f53c2c0 [ 1332.682385][ T807] RBP: ffffc90003e079c8 R08: 0000000000000000 R09: 0000000000000000 [ 1332.682397][ T807] R10: dffffc0000000000 R11: fffffbfff1e91eef R12: ffffffff8ba0acc0 [ 1332.682410][ T807] R13: ffff888141be9000 R14: 1ffff920007c0f20 R15: ffffffff8b9eef60 [ 1332.682424][ T807] FS: 0000000000000000(0000) GS:ffff88812669c000(0000) knlGS:0000000000000000 [ 1332.682439][ T807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1332.682452][ T807] CR2: 0000001b33a24000 CR3: 0000000072566000 CR4: 00000000003526f0 [ 1332.682467][ T807] Call Trace: [ 1332.682478][ T807] [ 1332.682492][ T807] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1332.682515][ T807] ? rt_spin_unlock+0x14f/0x200 [ 1332.682537][ T807] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1332.682569][ T807] ? rt_spin_unlock+0x160/0x200 [ 1332.682593][ T807] ? drm_vblank_get+0x147/0x260 [ 1332.682619][ T807] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1332.682644][ T807] drm_fb_helper_damage_work+0x131/0x6f0 [ 1332.682671][ T807] ? process_scheduled_works+0xa0f/0x17a0 [ 1332.682696][ T807] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1332.682725][ T807] ? process_scheduled_works+0xa0f/0x17a0 [ 1332.682744][ T807] ? process_scheduled_works+0xa0f/0x17a0 [ 1332.682766][ T807] process_scheduled_works+0xaec/0x17a0 [ 1332.682817][ T807] ? __pfx_process_scheduled_works+0x10/0x10 [ 1332.682834][ T807] ? do_raw_spin_lock+0x12b/0x2f0 [ 1332.682857][ T807] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1332.682888][ T807] worker_thread+0xda6/0x1360 [ 1332.682937][ T807] kthread+0x388/0x470 [ 1332.682960][ T807] ? __pfx_worker_thread+0x10/0x10 [ 1332.682978][ T807] ? __pfx_kthread+0x10/0x10 [ 1332.683001][ T807] ret_from_fork+0x51e/0xb90 [ 1332.683025][ T807] ? __pfx_ret_from_fork+0x10/0x10 [ 1332.683045][ T807] ? __switch_to+0xc82/0x1410 [ 1332.683069][ T807] ? __pfx_kthread+0x10/0x10 [ 1332.683092][ T807] ret_from_fork_asm+0x1a/0x30 [ 1332.683133][ T807] [ 1332.683146][ T807] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1332.683161][ T807] CPU: 1 UID: 0 PID: 807 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1332.683185][ T807] Tainted: [L]=SOFTLOCKUP [ 1332.683191][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1332.683202][ T807] Workqueue: events drm_fb_helper_damage_work [ 1332.683225][ T807] Call Trace: [ 1332.683233][ T807] [ 1332.683240][ T807] vpanic+0x1e0/0x670 [ 1332.683266][ T807] panic+0xc5/0xd0 [ 1332.683288][ T807] ? __pfx_panic+0x10/0x10 [ 1332.683319][ T807] ? ret_from_fork_asm+0x1a/0x30 [ 1332.683347][ T807] __warn+0x315/0x4a0 [ 1332.683368][ T807] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1332.683392][ T807] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1332.683417][ T807] __report_bug+0x29a/0x540 [ 1332.683449][ T807] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1332.683473][ T807] ? __pfx___report_bug+0x10/0x10 [ 1332.683518][ T807] report_bug_entry+0x19a/0x290 [ 1332.683547][ T807] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 1332.683569][ T807] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 1332.683591][ T807] handle_bug+0xca/0x200 [ 1332.683611][ T807] exc_invalid_op+0x1a/0x50 [ 1332.683630][ T807] asm_exc_invalid_op+0x1a/0x20 [ 1332.683647][ T807] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 1332.683670][ T807] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 af 2b dc fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1332.683684][ T807] RSP: 0018:ffffc90003e078e0 EFLAGS: 00010246 [ 1332.683698][ T807] RAX: 1ffff1102837d200 RBX: ffffffff8f53c2c0 RCX: 0000000000000000 [ 1332.683711][ T807] RDX: ffffffff8b9eef60 RSI: ffffffff8ba0acc0 RDI: ffffffff8f53c2c0 [ 1332.683724][ T807] RBP: ffffc90003e079c8 R08: 0000000000000000 R09: 0000000000000000 [ 1332.683736][ T807] R10: dffffc0000000000 R11: fffffbfff1e91eef R12: ffffffff8ba0acc0 [ 1332.683749][ T807] R13: ffff888141be9000 R14: 1ffff920007c0f20 R15: ffffffff8b9eef60 [ 1332.683785][ T807] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1332.683807][ T807] ? rt_spin_unlock+0x14f/0x200 [ 1332.683827][ T807] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1332.683851][ T807] ? rt_spin_unlock+0x160/0x200 [ 1332.683875][ T807] ? drm_vblank_get+0x147/0x260 [ 1332.683901][ T807] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1332.683926][ T807] drm_fb_helper_damage_work+0x131/0x6f0 [ 1332.683953][ T807] ? process_scheduled_works+0xa0f/0x17a0 [ 1332.683978][ T807] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1332.684007][ T807] ? process_scheduled_works+0xa0f/0x17a0 [ 1332.684032][ T807] ? process_scheduled_works+0xa0f/0x17a0 [ 1332.684054][ T807] process_scheduled_works+0xaec/0x17a0 [ 1332.684108][ T807] ? __pfx_process_scheduled_works+0x10/0x10 [ 1332.684126][ T807] ? do_raw_spin_lock+0x12b/0x2f0 [ 1332.684148][ T807] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1332.684180][ T807] worker_thread+0xda6/0x1360 [ 1332.684228][ T807] kthread+0x388/0x470 [ 1332.684251][ T807] ? __pfx_worker_thread+0x10/0x10 [ 1332.684269][ T807] ? __pfx_kthread+0x10/0x10 [ 1332.684296][ T807] ret_from_fork+0x51e/0xb90 [ 1332.684320][ T807] ? __pfx_ret_from_fork+0x10/0x10 [ 1332.684342][ T807] ? __switch_to+0xc82/0x1410 [ 1332.684366][ T807] ? __pfx_kthread+0x10/0x10 [ 1332.684390][ T807] ret_from_fork_asm+0x1a/0x30 [ 1332.684431][ T807] [ 1332.684824][ T807] Kernel Offset: disabled