last executing test programs: 23m20.319392705s ago: executing program 32 (id=683): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 21m45.783607137s ago: executing program 5 (id=966): mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 21m45.409400009s ago: executing program 5 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 21m45.156467256s ago: executing program 5 (id=972): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, "37a0"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="400b020000008c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21m40.118712525s ago: executing program 5 (id=981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a44000000090a010400000000000000000a0000090900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014e80000000c0a010300000000000000000a0000060900020073797a31000000000900010073797a3100000000bc000380b80000800400018098000b80100001800a000100"], 0x154}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000050) 21m39.984314855s ago: executing program 5 (id=984): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, 0x0) write$char_usb(r1, 0x0, 0x0) r3 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x30, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x15c, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0xff, 0x7, {0x7, 0x25, 0x1, 0x0, 0x3, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0xe, {0x7, 0x25, 0x1, 0x8, 0x4, 0xe}}}}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r3) syz_usb_ep_write(r0, 0x8d, 0x0, 0x0) 21m35.373150399s ago: executing program 5 (id=990): openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="20000000150a0102000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 21m19.360832421s ago: executing program 33 (id=990): openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="20000000150a0102000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 20m39.748106333s ago: executing program 2 (id=1108): socket(0x10, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x2000, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}]}, 0x80}}, 0x0) 20m36.418853523s ago: executing program 2 (id=1111): close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="33f31605", 0x4}], 0x1, 0x0, 0x0, 0x841}, 0x2005) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 20m33.963609247s ago: executing program 2 (id=1113): socket(0x10, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x2000, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}]}, 0x80}}, 0x0) 20m32.884107267s ago: executing program 2 (id=1119): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 20m32.796373413s ago: executing program 2 (id=1120): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 20m30.947657197s ago: executing program 0 (id=1123): socket$l2tp6(0xa, 0x2, 0x73) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f", 0x69}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x2f8}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x40}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0xa, 0xffff7fff, &(0x7f00000004c0)}) unshare(0x6020400) socket$unix(0x1, 0x2, 0x0) 20m29.955907253s ago: executing program 0 (id=1124): socket$l2tp6(0xa, 0x2, 0x73) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f", 0x69}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="e86b23ea031a0d0335d120405fcbc0e8261e54e194b7ac7427e456a0c74eba6fd030e30723c080ff9d1d60aa58929f37061fea9199560e8c9734c24ad5a9849b6dc72795f44e9954bf08f35b5483099d17afa38d10de84516fb241942b5dc2443a0df8de2b82fba03bd1aaf1a8b54a56340e1c17ec2c1f797cb9e8534005fad205586e8df9c5e5846de0a63ea0935349fbe97099bcd39d198870265cb0e9d30982731773077edf0340e001654b40167f7172daaaf09261d1a91c77ab96126862c5af4dedd795869895c3f9770a945fc27c4579371167a0e2981f9e678f36a1f5c630359af6d41a45159b21d214d2b46132bc35cb5dc8a2324c3b447144e3ec5aa60a0791c33111d4c18e54f0f61d99dc68d109530c58fbb766a533071d8f12d4fa93efa0867620756cb13183b963714fc8f641ff59bcb98d36d132c30e4aacf1585a2aa076bf6ab258ee85734651c05ab4c24c32f18f2a884ff3562b367cb24c4e35587a42b7da49d69756a1f5e1e8eac669e0b968e8d88d863f7ea0a364926f0fb64d8f347c39f68ae32be6a3d875a7470dd209327d4060c75fba01cfb285aca1e8a1bddf0759ba9485bcbb585593374041cb2354fcee8290aad5ffc690a4c8e36ae09540b10f40310567b2c82ab527d403468524a4d42488e2a8f8a144ee47e00ffbfc09aa3138237780e160e63c97700d5c1a5c8e198e223d11bcc2e684c04c42d185977aa42accf31fb8d90162e07dbf4dcc6222e0e3d81493c390a61bf506ba14b044fc268e0a04756440280d62e249857eea9234cbd65d7e08ad58bcccd4244c2ebd7c781f4661fc448e04db6a9150d48022ce3aebddba51c23ae242a9c6d8ad4f4dff925f5a7033b5f6f765d96aa316ec31ef2c022e2c381defb051b81aa9710379e8e775abe6e9d632439c998ffa48e7e54208d12a4c2e018f2873e26f6ea2c758cbd10069baba0f85d8509c5c4475b29c6358c96dd61ae8181a99cd453820f6a6509c29543b9c7db410e6d9d60082ccc2602b8cf91a59a8b8c2fcba7f43913f4b0a2842042f20488cf58de93150a9b7d0a7c4b9", 0x2f8}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x40}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0xa, 0xffff7fff, &(0x7f00000004c0)}) unshare(0x6020400) socket$unix(0x1, 0x2, 0x0) 20m28.853525859s ago: executing program 0 (id=1126): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000480)=[@nested_vmlaunch={0x12f, 0x18}, @wrmsr={0x65, 0x20, {0x90c, 0x5}}, @nested_load_code={0x12e, 0x5c, {0x1, "0f083e0f01cb2e666467420f23310fc7be0f000000c4e37d4cc2f166b845000f00d8c744240093000000c7442402898e0000ff1c2466b842008ee8470f2247440fc77500"}}], 0x94}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x1, 0x40, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0x8000c595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x201051}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20m28.767741802s ago: executing program 2 (id=1127): bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20m28.494423972s ago: executing program 34 (id=1127): bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20m28.280007347s ago: executing program 0 (id=1129): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x2042, 0x0) 20m27.892175124s ago: executing program 0 (id=1132): close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="33f31605", 0x4}], 0x1, 0x0, 0x0, 0x841}, 0x2005) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 20m25.328083073s ago: executing program 0 (id=1137): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 20m23.546155006s ago: executing program 35 (id=1137): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 11m59.731688112s ago: executing program 4 (id=2353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) 11m55.230362639s ago: executing program 4 (id=2369): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 11m55.094890501s ago: executing program 4 (id=2370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r4, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 11m53.257431669s ago: executing program 4 (id=2374): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 11m51.506739093s ago: executing program 4 (id=2377): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4620, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b", 0xc3, 0x0, 0x0, 0x0) 11m51.330639113s ago: executing program 4 (id=2380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_io_uring_setup(0x3af6, &(0x7f0000001400)={0x0, 0xd9b2, 0x1000, 0x0, 0x23b}, &(0x7f0000000280), &(0x7f00000003c0), 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffffffffffff, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 11m34.481456317s ago: executing program 36 (id=2380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_io_uring_setup(0x3af6, &(0x7f0000001400)={0x0, 0xd9b2, 0x1000, 0x0, 0x23b}, &(0x7f0000000280), &(0x7f00000003c0), 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffffffffffff, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4m21.184316148s ago: executing program 8 (id=3736): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x800000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4m20.875817121s ago: executing program 8 (id=3739): r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 4m18.628048096s ago: executing program 8 (id=3751): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\b', 0x4}, {&(0x7f0000000280)="ce46", 0x2}], 0x3) 4m18.457772773s ago: executing program 8 (id=3755): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) unshare(0x20000) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 4m17.835886716s ago: executing program 8 (id=3765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) 4m15.128553356s ago: executing program 8 (id=3782): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x22, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@arp={0x806, @generic={0x312, 0xa00, 0x6, 0x0, 0xa, @broadcast, "", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}}}}, 0x0) 4m14.518671434s ago: executing program 37 (id=3782): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x22, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@arp={0x806, @generic={0x312, 0xa00, 0x6, 0x0, 0xa, @broadcast, "", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}}}}, 0x0) 21.749615435s ago: executing program 7 (id=4577): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xb, 0x0, 0x0, 0x8, 0xb6, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="250016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/12, 0xc}, 0x9}], 0x1, 0x10060, 0x0) 19.983293104s ago: executing program 1 (id=4581): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0x2020) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r4]) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x208010, 0x0) 19.100567242s ago: executing program 7 (id=4584): socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 19.048793935s ago: executing program 9 (id=4585): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x4004010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17.336047159s ago: executing program 9 (id=4586): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x62040, 0x20) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) 14.44867233s ago: executing program 9 (id=4589): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x62040, 0x20) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) 10.53956574s ago: executing program 3 (id=4592): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.139268053s ago: executing program 9 (id=4593): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000800)={0x4, "8441e2c1e924a611ad81e18cb6c588ab87ecc1ff498879eecedf00a9e68ad5ec6e3f18d173795a482a140ca67ade4f664e30bdd8abddf7a5b5264fae89b57d0cafe3988177ac082d796071919d577132c5d351dc66ad05c849fffb533c16f3aa510f88abffe9cb7997658525d6c690728bbb6af893bb44ba661775880eac0edb"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) 9.108436127s ago: executing program 3 (id=4595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000020c0), 0x10000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 9.036022933s ago: executing program 1 (id=4596): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x408d4) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) close(r5) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 8.784196862s ago: executing program 9 (id=4597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000020c0), 0x10000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) 8.761476338s ago: executing program 7 (id=4598): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$FUSE(r4, &(0x7f00000008c0)={0x2020}, 0x2020) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32, @ANYRESDEC=r5]) getpid() mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x208010, 0x0) 8.283203814s ago: executing program 3 (id=4599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 7.762638113s ago: executing program 1 (id=4600): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') pread64(r1, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) 7.212837857s ago: executing program 1 (id=4601): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) getdents64(r3, &(0x7f0000000240)=""/146, 0x92) 7.210749827s ago: executing program 7 (id=4602): setresgid(0xee00, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, 0x0, 0x810) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x400) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x9) 7.169621198s ago: executing program 3 (id=4603): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r6}) 6.979566257s ago: executing program 6 (id=4604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x10001, 0x8, 0x8, 0x3ff, 0x80, 0x7f, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x80, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x16, 0xffffffff, 0x80000000, 0x2, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x5, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.836309546s ago: executing program 6 (id=4605): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.707662711s ago: executing program 6 (id=4606): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f40700091d000000000000000001000000000800040001000000", 0x24) 4.049935805s ago: executing program 3 (id=4607): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000bbb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00008f1000/0x3000)=nil, &(0x7f0000df2000/0x4000)=nil, &(0x7f0000acc000/0x1000)=nil, &(0x7f0000b6d000/0x4000)=nil, &(0x7f0000c9a000/0x3000)=nil, &(0x7f00009d2000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) 4.049154336s ago: executing program 7 (id=4608): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 4.048044821s ago: executing program 6 (id=4609): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c032e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb477ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad750f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c262fb637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf96283447366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce56902007f5d6a6270ff0f0f4c371029ca8489571b55841b06de003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0d0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a574"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02", 0x4c}], 0x2}, 0x0) 2.805650433s ago: executing program 6 (id=4610): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x408d4) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) close(r5) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1.518536706s ago: executing program 1 (id=4611): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') pread64(r1, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) 1.482111128s ago: executing program 3 (id=4612): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xb, 0x0, 0x0, 0x8, 0xb6, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="250016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='user.incfs.size\x00') syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/12, 0xc}, 0x9}], 0x1, 0x10060, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf80}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x5c}}, 0x84) 1.153226059s ago: executing program 1 (id=4613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 687.574754ms ago: executing program 9 (id=4614): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xb, 0x0, 0x0, 0x8, 0xb6, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="250016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/12, 0xc}, 0x9}], 0x1, 0x10060, 0x0) 1.197236ms ago: executing program 7 (id=4615): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x10001, 0x8, 0x8, 0x3ff, 0x80, 0x7f, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x80, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x16, 0xffffffff, 0x80000000, 0x2, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x5, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=4616): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e0000001800"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): port 2(bridge_slave_1) entered blocking state [ 1176.434488][T16530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.434927][T16530] bridge_slave_1: entered allmulticast mode [ 1176.442499][T16530] bridge_slave_1: entered promiscuous mode [ 1176.910583][T16657] trusted_key: encrypted_key: key user:syz not found [ 1177.470445][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.470519][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.546627][T16661] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2864'. [ 1178.681189][T16530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.720380][T16530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.906632][T16530] team0: Port device team_slave_0 added [ 1179.949710][T16530] team0: Port device team_slave_1 added [ 1180.095985][T16530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.096004][T16530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.096031][T16530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.165758][T16530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.165776][T16530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.165803][T16530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.402846][T16530] hsr_slave_0: entered promiscuous mode [ 1180.405985][T16530] hsr_slave_1: entered promiscuous mode [ 1180.406899][T16530] debugfs: 'hsr0' already exists in 'hsr' [ 1180.406923][T16530] Cannot create hsr debugfs directory [ 1181.145509][T16695] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2875'. [ 1181.147021][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2875'. [ 1181.331837][T16705] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2876'. [ 1182.194836][T16718] trusted_key: encrypted_key: key user:syz not found [ 1183.218233][T16730] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2885'. [ 1183.218269][T16730] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2885'. [ 1183.281930][T16732] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2886'. [ 1183.373235][T16730] vlan2: entered promiscuous mode [ 1183.373546][T16730] vlan2: entered allmulticast mode [ 1183.378536][ T5834] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1183.552610][ T5834] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1183.553363][ T5834] usb 7-1: not running at top speed; connect to a high speed hub [ 1183.554870][ T5834] usb 7-1: config 253 has an invalid interface number: 130 but max is 0 [ 1183.554916][ T5834] usb 7-1: config 253 has no interface number 0 [ 1183.554968][ T5834] usb 7-1: config 253 interface 130 altsetting 144 has an invalid descriptor for endpoint zero, skipping [ 1183.554991][ T5834] usb 7-1: config 253 interface 130 altsetting 144 has an invalid endpoint descriptor of length 2, skipping [ 1183.555020][ T5834] usb 7-1: config 253 interface 130 altsetting 144 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1183.555048][ T5834] usb 7-1: config 253 interface 130 has no altsetting 0 [ 1183.557458][ T5834] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00ac, bcdDevice=eb.2c [ 1183.557487][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.557508][ T5834] usb 7-1: Product: syz [ 1183.557523][ T5834] usb 7-1: Manufacturer: syz [ 1183.557539][ T5834] usb 7-1: SerialNumber: syz [ 1183.936861][T16725] 9p: Bad value for 'rfdno' [ 1184.002861][ T5834] usb 7-1: USB disconnect, device number 53 [ 1184.692319][ T3095] bridge_slave_1: left allmulticast mode [ 1184.692357][ T3095] bridge_slave_1: left promiscuous mode [ 1184.692627][ T3095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.782808][ T3095] bridge_slave_0: left allmulticast mode [ 1184.782847][ T3095] bridge_slave_0: left promiscuous mode [ 1184.783138][ T3095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.063386][T16763] trusted_key: encrypted_key: key user:syz not found [ 1187.227002][T16772] trusted_key: encrypted_key: key user:syz not found [ 1188.819301][ T3095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.904618][ T3095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.945716][ T3095] bond0 (unregistering): Released all slaves [ 1189.275578][T16750] macvlan2: entered promiscuous mode [ 1189.275603][T16750] macvlan2: entered allmulticast mode [ 1189.686189][T16797] trusted_key: encrypted_key: key user:syz not found [ 1191.235148][T16809] trusted_key: encrypted_key: key user:syz not found [ 1193.337648][T16834] trusted_key: encrypted_key: key user:syz not found [ 1194.110363][ T3095] hsr_slave_0: left promiscuous mode [ 1194.217763][ T3095] hsr_slave_1: left promiscuous mode [ 1194.220859][ T3095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.220885][ T3095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.339923][ T3095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.339953][ T3095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.629092][T16841] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2919'. [ 1194.630389][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 1194.823304][ T3095] veth1_macvtap: left promiscuous mode [ 1194.823416][ T3095] veth0_macvtap: left promiscuous mode [ 1194.823860][ T3095] veth1_vlan: left promiscuous mode [ 1194.824057][ T3095] veth0_vlan: left promiscuous mode [ 1194.892505][T16855] trusted_key: encrypted_key: key user:syz not found [ 1195.807114][T16860] fuse: Unknown parameter 'user_id00000000000000000000' [ 1197.142485][T16872] trusted_key: encrypted_key: key user:syz not found [ 1198.017979][ T3095] team0 (unregistering): Port device team_slave_1 removed [ 1198.171445][ T3095] team0 (unregistering): Port device team_slave_0 removed [ 1201.770997][T16929] trusted_key: encrypted_key: key user:syz not found [ 1202.381977][T16926] netlink: 200 bytes leftover after parsing attributes in process `syz.8.2937'. [ 1205.304204][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2942'. [ 1205.304242][T16948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2942'. [ 1205.304648][T16948] 8021q: VLANs not supported on ip6gre0 [ 1208.784135][T16993] trusted_key: encrypted_key: key user:syz not found [ 1209.681216][T17000] fuse: Invalid rootmode [ 1210.808678][T16530] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1211.994994][T16530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1211.996104][T16530] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1212.042734][T16530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1212.046925][T16530] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1212.259928][T17015] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2953'. [ 1212.259965][T17015] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2953'. [ 1212.290948][T16530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1212.293988][T17015] 8021q: VLANs not supported on ip6gre0 [ 1212.294759][T16530] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1212.342270][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 1212.342301][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2954'. [ 1212.345537][T17017] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2954'. [ 1212.414716][T16530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1212.901408][T16530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.013440][T16530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.074916][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.075066][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.274228][T12016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.275475][T12016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.733464][T17045] syz.6.2960 (17045) used greatest stack depth: 18184 bytes left [ 1213.902381][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2966'. [ 1213.902532][T17057] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2966'. [ 1213.902931][T17057] 8021q: VLANs not supported on ip6gre0 [ 1214.878808][T16530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.431703][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1215.431727][T17099] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1215.705041][T17106] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2977'. [ 1215.777327][T16530] veth0_vlan: entered promiscuous mode [ 1215.835454][T16530] veth1_vlan: entered promiscuous mode [ 1215.837829][T17104] syzkaller1: entered promiscuous mode [ 1215.837855][T17104] syzkaller1: entered allmulticast mode [ 1215.921786][T16530] veth0_macvtap: entered promiscuous mode [ 1215.939470][T16530] veth1_macvtap: entered promiscuous mode [ 1216.047485][T16530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.116024][T16530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.161477][ T3095] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.162025][ T3095] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.162432][ T3095] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.162656][ T3095] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.138989][T17129] netlink: 'syz.1.2981': attribute type 30 has an invalid length. [ 1217.827247][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.827269][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.066951][T17139] __nla_validate_parse: 1 callbacks suppressed [ 1218.066971][T17139] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.2984'. [ 1218.096739][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.096762][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.472097][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2986'. [ 1218.472121][T17143] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2986'. [ 1218.988491][ T10] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1219.022432][T10753] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1219.139031][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1219.140852][ T10] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 1219.140878][ T10] usb 8-1: config 1 has no interface number 0 [ 1219.140931][ T10] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1219.140955][ T10] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1219.140978][ T10] usb 8-1: config 1 interface 105 has no altsetting 0 [ 1219.168516][T10753] usb 10-1: Using ep0 maxpacket: 16 [ 1219.171102][T10753] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 1219.171127][T10753] usb 10-1: config 1 has no interface number 0 [ 1219.171169][T10753] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1219.171194][T10753] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1219.171220][T10753] usb 10-1: config 1 interface 105 has no altsetting 0 [ 1219.178712][ T10] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1219.178739][ T10] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1219.178760][ T10] usb 8-1: Product: syz [ 1219.178774][ T10] usb 8-1: Manufacturer: syz [ 1219.178789][ T10] usb 8-1: SerialNumber: syz [ 1219.282521][T10753] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1219.282554][T10753] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1219.282576][T10753] usb 10-1: Product: syz [ 1219.282591][T10753] usb 10-1: Manufacturer: syz [ 1219.282606][T10753] usb 10-1: SerialNumber: syz [ 1219.346534][T17150] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1219.346665][T17150] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1219.383517][T17151] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1219.383650][T17151] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1219.716573][T13456] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1219.758220][T13456] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1219.766269][T17150] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1219.776787][T17150] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1219.777039][T13456] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1219.823627][T13456] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1219.827776][T13456] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1219.849404][T17151] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1219.857835][T17151] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1220.199410][ T10] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1220.207776][T17150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.208642][T17150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.267921][T10753] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1220.291569][T17151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.294084][T17151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.328999][T17151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.329533][T17151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.334585][T10753] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1220.429022][T17170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.429586][T17170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.429635][T17150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.431404][T17150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.475034][T17150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.475640][T17150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.513014][ T10] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1220.535983][T10753] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1220.567968][ T10] aqc111 8-1:1.105 eth21: register 'aqc111' at usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 26:8b:9f:ba:1a:0d [ 1220.587568][ T10] usb 8-1: USB disconnect, device number 74 [ 1220.617037][ T10] aqc111 8-1:1.105 eth21: unregister 'aqc111' usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1220.636398][T10753] aqc111 10-1:1.105 eth22: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c6:0c:c6:e5:9b:d4 [ 1220.660535][T10753] usb 10-1: USB disconnect, device number 2 [ 1220.680482][T10753] aqc111 10-1:1.105 eth22: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1220.793682][ T10] aqc111 8-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1220.793838][ T10] aqc111 8-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1220.793976][ T10] aqc111 8-1:1.105 eth21 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1220.964164][T10753] aqc111 10-1:1.105 eth22 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1220.964298][T10753] aqc111 10-1:1.105 eth22 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1220.964422][T10753] aqc111 10-1:1.105 eth22 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1221.398960][T17179] netlink: 16162 bytes leftover after parsing attributes in process `syz.9.2995'. [ 1221.833185][T17185] trusted_key: encrypted_key: key user:syz not found [ 1222.625573][T13456] Bluetooth: hci1: command tx timeout [ 1222.759747][ T5834] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1222.765041][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2999'. [ 1222.765061][T17190] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2999'. [ 1222.943015][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.943050][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.943090][ T5834] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1222.943114][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.032002][ T5834] usb 9-1: config 0 descriptor?? [ 1223.495580][ T5834] hid_parser_main: 246 callbacks suppressed [ 1223.495606][ T5834] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1223.495637][ T5834] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1223.495664][ T5834] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1223.495690][ T5834] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1223.495716][ T5834] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1223.495741][ T5834] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1223.495767][ T5834] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1223.582263][ T5834] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0 [ 1223.675041][ T5834] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 1223.675094][ T5834] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 1223.805156][ T5834] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -32 [ 1223.870535][ T5834] usb 9-1: USB disconnect, device number 54 [ 1224.362918][T17213] fuse: Bad value for 'rootmode' [ 1224.764557][T13456] Bluetooth: hci1: command tx timeout [ 1224.880155][T17220] trusted_key: encrypted_key: key user:syz not found [ 1225.702660][T17210] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3006'. [ 1225.702759][T17211] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3006'. [ 1225.894130][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3010'. [ 1225.894156][T17225] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3010'. [ 1226.254007][ T10] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1226.398543][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1226.401076][ T10] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1226.401113][ T10] usb 9-1: config 0 has no interface number 0 [ 1226.404688][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1226.404718][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.404739][ T10] usb 9-1: Product: syz [ 1226.404755][ T10] usb 9-1: Manufacturer: syz [ 1226.404771][ T10] usb 9-1: SerialNumber: syz [ 1226.557746][ T10] usb 9-1: config 0 descriptor?? [ 1226.808765][T13456] Bluetooth: hci1: command tx timeout [ 1226.988039][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1226.988073][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1227.054638][T12016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1227.054677][T12016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.282589][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3017'. [ 1227.282626][T17242] netlink: 'syz.6.3017': attribute type 30 has an invalid length. [ 1227.830026][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1227.830354][ T10] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61 [ 1228.078674][ T10] usb 9-1: USB disconnect, device number 55 [ 1229.546354][T12016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.546394][T12016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.756759][ T5612] Bluetooth: hci1: command tx timeout [ 1230.091360][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3024'. [ 1230.091386][T17261] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3024'. [ 1230.273454][T17263] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3025'. [ 1230.273482][T17263] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3025'. [ 1230.456648][T17160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.456837][T17160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.457002][T17160] bridge_slave_0: entered allmulticast mode [ 1230.459393][T17160] bridge_slave_0: entered promiscuous mode [ 1230.478644][T17160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.479031][T17160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.479695][T17160] bridge_slave_1: entered allmulticast mode [ 1230.486795][T17160] bridge_slave_1: entered promiscuous mode [ 1230.668890][T17269] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3027'. [ 1231.346910][T12016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.346962][T12016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.472987][T17160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.517773][T17160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.078169][T12016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1232.078209][T12016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.363667][T17160] team0: Port device team_slave_0 added [ 1232.380978][T17160] team0: Port device team_slave_1 added [ 1232.535059][T17299] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3038'. [ 1232.535096][T17299] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3038'. [ 1232.822918][T17160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.822936][T17160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.822964][T17160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.830230][T17299] 8021q: VLANs not supported on ip6gre0 [ 1232.928847][T17160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.928866][T17160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.928894][T17160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.060250][T17160] hsr_slave_0: entered promiscuous mode [ 1233.061978][T17160] hsr_slave_1: entered promiscuous mode [ 1233.062881][T17160] debugfs: 'hsr0' already exists in 'hsr' [ 1233.062904][T17160] Cannot create hsr debugfs directory [ 1233.366443][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3040'. [ 1234.151029][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3042'. [ 1234.151052][T17309] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3042'. [ 1234.286988][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3043'. [ 1234.287024][T17313] netlink: 'syz.8.3043': attribute type 30 has an invalid length. [ 1234.366914][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3044'. [ 1235.330603][T17337] tipc: Enabled bearer , priority 0 [ 1235.333797][T17337] syzkaller0: entered promiscuous mode [ 1235.333822][T17337] syzkaller0: entered allmulticast mode [ 1235.669533][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3052'. [ 1235.669570][T17350] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3052'. [ 1235.838779][T10286] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1235.988580][T10286] usb 7-1: Using ep0 maxpacket: 32 [ 1235.995593][T10286] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1235.995620][T10286] usb 7-1: config 0 has no interface number 0 [ 1235.998186][T10286] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1235.998215][T10286] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.998236][T10286] usb 7-1: Product: syz [ 1235.998253][T10286] usb 7-1: Manufacturer: syz [ 1235.998263][T10286] usb 7-1: SerialNumber: syz [ 1236.071199][T10286] usb 7-1: config 0 descriptor?? [ 1236.139041][T12016] bridge_slave_1: left allmulticast mode [ 1236.139078][T12016] bridge_slave_1: left promiscuous mode [ 1236.139395][T12016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.226924][T12016] bridge_slave_0: left allmulticast mode [ 1236.226961][T12016] bridge_slave_0: left promiscuous mode [ 1236.239066][T12016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.488909][T10286] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1236.488931][T10286] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1237.094951][T10286] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1237.095280][T10286] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1237.132922][T10286] usb 7-1: USB disconnect, device number 54 [ 1237.520587][T12016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1237.611194][T12016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1237.635469][T12016] bond0 (unregistering): Released all slaves [ 1237.656969][T12016] bond1 (unregistering): Released all slaves [ 1237.697175][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3054'. [ 1237.697192][T17360] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3054'. [ 1237.976832][T17336] tipc: Resetting bearer [ 1238.181880][T17336] tipc: Disabling bearer [ 1238.347385][ T5257] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1238.371494][ T31] tipc: Node number set to 654781328 [ 1238.376605][T17355] syzkaller1: entered promiscuous mode [ 1238.376633][T17355] syzkaller1: entered allmulticast mode [ 1238.845451][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.845524][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.895228][T17372] macvlan2: entered promiscuous mode [ 1238.895250][T17372] macvlan2: entered allmulticast mode [ 1238.977783][T12016] IPVS: stopping backup sync thread 6493 ... [ 1239.266378][T17387] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3063'. [ 1239.554992][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3064'. [ 1239.555016][T17396] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3064'. [ 1239.920037][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3067'. [ 1239.920071][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3067'. [ 1240.869336][T17417] trusted_key: encrypted_key: key user:syz not found [ 1241.851133][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3074'. [ 1242.111285][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3076'. [ 1242.111311][T17433] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3076'. [ 1242.373675][T17439] trusted_key: encrypted_key: key user:syz not found [ 1244.765783][T12016] hsr_slave_0: left promiscuous mode [ 1244.810482][T12016] hsr_slave_1: left promiscuous mode [ 1244.813738][T12016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.813767][T12016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.874018][T12016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.874048][T12016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.044773][T12016] veth1_macvtap: left promiscuous mode [ 1245.044855][T12016] veth0_macvtap: left promiscuous mode [ 1245.045338][T12016] veth1_vlan: left promiscuous mode [ 1245.045515][T12016] veth0_vlan: left promiscuous mode [ 1246.466635][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3090'. [ 1246.466670][T17501] netlink: 'syz.9.3090': attribute type 30 has an invalid length. [ 1246.927030][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3093'. [ 1247.519337][T12016] team0 (unregistering): Port device team_slave_1 removed [ 1247.580997][T12016] team0 (unregistering): Port device team_slave_0 removed [ 1248.229083][T17516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1248.447235][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3100'. [ 1248.960202][T15754] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.355470][T15754] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.370391][T15754] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.389689][T15754] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.645743][T17546] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.3103'. [ 1250.104433][ T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.571239][T17586] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.3115'. [ 1252.508259][T17160] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1252.592366][T17160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1252.596181][T17160] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1252.805881][T17160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1252.814522][T17160] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1252.872546][T17160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1252.874887][T17160] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1252.899275][ T9869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.116486][T17160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1253.300808][T17634] binder: 17633:17634 ioctl c0306201 0 returned -14 [ 1253.305237][T17634] binder_alloc: 17633: binder_alloc_buf, no vma [ 1253.580717][T17641] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.3129'. [ 1253.736012][T17160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.856791][T17160] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.911136][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.911322][ T7981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.955407][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.955545][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.329268][T14246] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1254.468667][T14246] usb 9-1: device descriptor read/64, error -71 [ 1254.708481][T14246] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1254.848620][T14246] usb 9-1: device descriptor read/64, error -71 [ 1254.959286][T14246] usb usb9-port1: attempt power cycle [ 1255.739046][T14246] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1255.807213][T14246] usb 9-1: device descriptor read/8, error -71 [ 1256.219568][T14246] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1256.246404][T14246] usb 9-1: device descriptor read/8, error -71 [ 1256.348828][T14246] usb usb9-port1: unable to enumerate USB device [ 1256.521930][T17160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1256.766386][T17160] veth0_vlan: entered promiscuous mode [ 1256.801571][T17160] veth1_vlan: entered promiscuous mode [ 1256.931449][T17690] netlink: 16162 bytes leftover after parsing attributes in process `syz.9.3140'. [ 1256.964674][T17160] veth0_macvtap: entered promiscuous mode [ 1257.003449][T17160] veth1_macvtap: entered promiscuous mode [ 1257.152075][T17160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1257.248780][T17160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1257.268606][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.270490][T11895] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.271546][T11895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.271771][T11895] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.233331][T17717] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.3150'. [ 1260.535784][T17719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3151'. [ 1260.874524][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.874571][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.906419][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1261.001146][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.001169][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.059704][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1261.062093][ T10] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1261.062121][ T10] usb 10-1: config 0 has no interface number 0 [ 1261.088900][ T9869] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1261.113208][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1261.113238][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.113278][ T10] usb 10-1: Product: syz [ 1261.113293][ T10] usb 10-1: Manufacturer: syz [ 1261.113308][ T10] usb 10-1: SerialNumber: syz [ 1261.162087][ T10] usb 10-1: config 0 descriptor?? [ 1261.238536][ T9869] usb 9-1: Using ep0 maxpacket: 32 [ 1261.243889][ T9869] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1261.243916][ T9869] usb 9-1: config 0 has no interface number 0 [ 1261.268273][ T9869] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1261.268300][ T9869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.268317][ T9869] usb 9-1: Product: syz [ 1261.268330][ T9869] usb 9-1: Manufacturer: syz [ 1261.268341][ T9869] usb 9-1: SerialNumber: syz [ 1261.313523][ T9869] usb 9-1: config 0 descriptor?? [ 1261.589802][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1261.589836][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1261.744395][ T9869] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1261.744441][ T9869] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1261.908621][T17743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3160'. [ 1262.405565][ T9869] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1262.406209][ T9869] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1262.408854][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1262.409131][ T10] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -61 [ 1262.487076][ T9869] usb 9-1: USB disconnect, device number 60 [ 1262.491947][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.555913][T17747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.556194][T17747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.563084][T17747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.597287][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.597673][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.790209][T17751] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3165'. [ 1262.960337][T17758] syzkaller0: entered promiscuous mode [ 1262.960366][T17758] syzkaller0: entered allmulticast mode [ 1263.178956][ T9869] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1263.328539][ T9869] usb 8-1: Using ep0 maxpacket: 32 [ 1263.332402][ T9869] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1263.332430][ T9869] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1263.332456][ T9869] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1263.337661][ T9869] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1263.337690][ T9869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.337710][ T9869] usb 8-1: Product: syz [ 1263.337725][ T9869] usb 8-1: Manufacturer: syz [ 1263.337740][ T9869] usb 8-1: SerialNumber: syz [ 1263.409995][ T9869] usb 8-1: config 0 descriptor?? [ 1263.741872][ T10] usb 10-1: USB disconnect, device number 3 [ 1263.830122][ T9869] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 1264.009062][T17774] tipc: Started in network mode [ 1264.009110][T17774] tipc: Node identity 2277724afc1a, cluster identity 4711 [ 1264.009295][T17774] tipc: Enabled bearer , priority 0 [ 1264.018322][T17774] tipc: Resetting bearer [ 1264.045382][ T9869] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1264.045456][ T9869] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 1264.458963][T17777] fuse: Unknown parameter 'user_id00000000000000000000' [ 1264.551288][T17772] tipc: Disabling bearer [ 1264.788728][T10286] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1264.938559][T10286] usb 2-1: Using ep0 maxpacket: 16 [ 1264.941003][T10286] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.941031][T10286] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1264.946938][T10286] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1264.946983][T10286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.947006][T10286] usb 2-1: Product: syz [ 1264.947023][T10286] usb 2-1: Manufacturer: syz [ 1264.947050][T10286] usb 2-1: SerialNumber: syz [ 1265.105089][T10286] usb 2-1: 0:2 : does not exist [ 1265.128701][ T10] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1265.278502][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1265.287353][ T10] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1265.287383][ T10] usb 7-1: config 0 has no interface number 0 [ 1265.319638][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1265.319671][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.319692][ T10] usb 7-1: Product: syz [ 1265.319707][ T10] usb 7-1: Manufacturer: syz [ 1265.319722][ T10] usb 7-1: SerialNumber: syz [ 1265.369435][ T10] usb 7-1: config 0 descriptor?? [ 1265.422233][T17794] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3182'. [ 1265.424449][T17794] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3182'. [ 1265.472092][T10286] usb 2-1: USB disconnect, device number 73 [ 1265.650769][T17796] netlink: 16162 bytes leftover after parsing attributes in process `syz.9.3183'. [ 1265.721765][T16940] udevd[16940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1265.797667][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1265.797703][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1265.957563][ T9869] usb 8-1: USB disconnect, device number 75 [ 1266.405851][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1266.406178][ T10] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1266.473106][ T10] usb 7-1: USB disconnect, device number 55 [ 1268.110770][T17830] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3195'. [ 1268.110808][T17830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3195'. [ 1270.269993][ T10] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1270.341355][T17861] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3209'. [ 1270.341382][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3209'. [ 1271.079925][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1271.081862][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.081887][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1271.084768][ T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1271.084794][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.084815][ T10] usb 9-1: Product: syz [ 1271.084829][ T10] usb 9-1: Manufacturer: syz [ 1271.084844][ T10] usb 9-1: SerialNumber: syz [ 1271.201793][ T10] usb 9-1: 0:2 : does not exist [ 1271.415085][T17867] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3210'. [ 1273.035137][T14246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.178527][T14246] usb 9-1: USB disconnect, device number 61 [ 1274.033570][T17894] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3220'. [ 1274.033615][T17894] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3220'. [ 1274.057417][T17891] binder: 17890:17891 ioctl c0306201 0 returned -14 [ 1274.128063][T17895] trusted_key: encrypted_key: key user:syz not found [ 1274.657991][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3222'. [ 1274.658040][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3222'. [ 1275.215880][T17905] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3224'. [ 1275.404061][T17911] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3227'. [ 1275.404086][T17911] bridge: RTM_NEWNEIGH with invalid ether address [ 1275.493133][T13456] Bluetooth: hci1: link tx timeout [ 1275.493395][T13456] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1275.523440][ T5725] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1275.678608][ T5725] usb 2-1: Using ep0 maxpacket: 16 [ 1275.684084][ T5725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.684116][ T5725] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1275.692726][ T5725] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1275.692758][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.692782][ T5725] usb 2-1: Product: syz [ 1275.692799][ T5725] usb 2-1: Manufacturer: syz [ 1275.692816][ T5725] usb 2-1: SerialNumber: syz [ 1275.788925][ T5725] usb 2-1: 0:2 : does not exist [ 1275.795863][T17919] fuse: Unknown parameter 'user_id00000000000000000000' [ 1276.003313][ T5725] usb 2-1: USB disconnect, device number 74 [ 1276.082885][T17929] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3233'. [ 1276.190160][T16940] udevd[16940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1276.450460][T17939] netlink: 277 bytes leftover after parsing attributes in process `syz.9.3237'. [ 1276.723425][T17944] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3239'. [ 1276.816048][T17947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3240'. [ 1276.983269][T17951] trusted_key: encrypted_key: key user:syz not found [ 1277.536924][T13456] Bluetooth: hci1: command 0x0406 tx timeout [ 1278.573782][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.636906][T17975] fuse: Bad value for 'fd' [ 1278.638568][ T5725] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1278.675087][T17977] fuse: Bad value for 'fd' [ 1278.788648][ T5725] usb 10-1: Using ep0 maxpacket: 32 [ 1278.791683][ T5725] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1278.791711][ T5725] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1278.791735][ T5725] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1278.794534][ T5725] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1278.794562][ T5725] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.794581][ T5725] usb 10-1: Product: syz [ 1278.794596][ T5725] usb 10-1: Manufacturer: syz [ 1278.794611][ T5725] usb 10-1: SerialNumber: syz [ 1278.804965][ T5725] usb 10-1: config 0 descriptor?? [ 1278.811876][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.196583][T17983] __nla_validate_parse: 6 callbacks suppressed [ 1279.196606][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3253'. [ 1279.205710][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3253'. [ 1279.240746][ T5725] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1279.528606][ T5725] gs_usb 10-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1279.528686][ T5725] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -32 [ 1279.633420][T17991] trusted_key: encrypted_key: key user:syz not found [ 1279.649052][T17991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.654883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.245370][ T5725] usb 10-1: USB disconnect, device number 4 [ 1280.419023][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3255'. [ 1280.521404][T18001] netlink: 277 bytes leftover after parsing attributes in process `syz.8.3258'. [ 1281.041115][T18016] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3264'. [ 1281.044302][T18016] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3264'. [ 1281.261317][ T10] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1281.650765][T18021] trusted_key: encrypted_key: key user:syz not found [ 1282.167633][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1282.226277][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.226307][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1282.250140][ T10] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1282.250174][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.250197][ T10] usb 7-1: Product: syz [ 1282.250215][ T10] usb 7-1: Manufacturer: syz [ 1282.250232][ T10] usb 7-1: SerialNumber: syz [ 1282.327788][ T10] usb 7-1: config 0 descriptor?? [ 1282.376744][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.653879][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1282.653915][T18026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1282.653932][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1283.259485][T18038] trusted_key: encrypted_key: key user:syz not found [ 1284.001520][ T10] usb 7-1: USB disconnect, device number 56 [ 1284.067397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.068958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.575766][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3275'. [ 1286.295187][T18065] trusted_key: encrypted_key: key user:syz not found [ 1288.028591][ T10] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1288.168998][ T5834] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1288.178488][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1288.180900][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1288.180927][ T10] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1288.180951][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1288.197054][ T10] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1288.197084][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.197106][ T10] usb 9-1: Product: syz [ 1288.197121][ T10] usb 9-1: Manufacturer: syz [ 1288.197138][ T10] usb 9-1: SerialNumber: syz [ 1288.265271][ T10] usb 9-1: config 0 descriptor?? [ 1288.454242][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 1288.464028][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.464047][ T5834] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1288.489445][ T5834] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1288.489498][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.489529][ T5834] usb 2-1: Product: syz [ 1288.489546][ T5834] usb 2-1: Manufacturer: syz [ 1288.489563][ T5834] usb 2-1: SerialNumber: syz [ 1288.541181][ T5834] usb 2-1: config 0 descriptor?? [ 1288.771813][ T10] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 1288.983869][ T10] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1288.984009][ T10] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -121 [ 1289.126391][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3284'. [ 1289.126424][T18086] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3284'. [ 1289.126457][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3284'. [ 1291.370814][ T5725] usb 9-1: USB disconnect, device number 62 [ 1291.446887][ T9869] usb 2-1: USB disconnect, device number 75 [ 1291.835454][T18117] trusted_key: encrypted_key: key user:syz not found [ 1292.780608][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.779707][T10286] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1294.170633][T10286] usb 2-1: Using ep0 maxpacket: 32 [ 1294.175886][T10286] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1294.175917][T10286] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1294.175943][T10286] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1294.183564][T10286] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1294.183594][T10286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.183617][T10286] usb 2-1: Product: syz [ 1294.183633][T10286] usb 2-1: Manufacturer: syz [ 1294.183649][T10286] usb 2-1: SerialNumber: syz [ 1294.212255][T10286] usb 2-1: config 0 descriptor?? [ 1295.911958][T18144] syzkaller1: entered promiscuous mode [ 1295.911992][T18144] syzkaller1: entered allmulticast mode [ 1297.223352][T10286] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 1297.223398][T10286] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 1297.994819][ T5834] usb 2-1: USB disconnect, device number 76 [ 1298.629445][T18168] trusted_key: encrypted_key: key user:syz not found [ 1299.570033][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3308'. [ 1299.570063][T18164] bridge: RTM_NEWNEIGH with invalid ether address [ 1299.571359][T18165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3308'. [ 1299.571437][T18165] bridge: RTM_NEWNEIGH with invalid ether address [ 1300.289317][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.289396][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.405915][ T38] audit: type=1804 audit(1777577685.091:4): pid=18193 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.3316" name="/newroot/466/cgroup.controllers" dev="tmpfs" ino=2457 res=1 errno=0 [ 1300.531084][ T38] audit: type=1800 audit(1777577685.211:5): pid=18193 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.3316" name="cgroup.controllers" dev="tmpfs" ino=2457 res=0 errno=0 [ 1300.531155][ T38] audit: type=1804 audit(1777577685.231:6): pid=18194 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.8.3316" name="/newroot/466/cgroup.controllers" dev="tmpfs" ino=2457 res=1 errno=0 [ 1301.812679][ T9869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.151391][T18206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.151622][T18206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.151861][T18206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.267069][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3320'. [ 1302.278298][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 1302.285973][T18210] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3322'. [ 1302.294692][T18217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.295409][T18217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.536462][T18225] fuse: Unknown parameter '0x0000000000000003' [ 1302.892893][T18202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.866878][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3339'. [ 1304.866953][T18264] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3339'. [ 1305.633714][T18279] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3343'. [ 1305.908636][T18287] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3346'. [ 1305.908674][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3346'. [ 1306.037194][T18291] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3347'. [ 1306.273055][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.545492][T18298] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.3350'. [ 1306.644405][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3352'. [ 1306.644436][T18302] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3352'. [ 1308.026058][ T823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.090026][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3355'. [ 1308.262929][T14246] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1308.409296][T14246] usb 8-1: Using ep0 maxpacket: 32 [ 1308.411992][T14246] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1308.412021][T14246] usb 8-1: config 0 has no interface number 0 [ 1308.417990][T14246] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1308.418017][T14246] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.418038][T14246] usb 8-1: Product: syz [ 1308.418052][T14246] usb 8-1: Manufacturer: syz [ 1308.418067][T14246] usb 8-1: SerialNumber: syz [ 1308.504776][T14246] usb 8-1: config 0 descriptor?? [ 1308.925148][T14246] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1308.925183][T14246] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1309.165330][T14246] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1309.165657][T14246] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32 [ 1309.652437][ T38] audit: type=1804 audit(1777577694.371:7): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.3370" name="/newroot/452/cgroup.controllers" dev="tmpfs" ino=2371 res=1 errno=0 [ 1309.652497][ T38] audit: type=1800 audit(1777577694.391:8): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.3370" name="cgroup.controllers" dev="tmpfs" ino=2371 res=0 errno=0 [ 1309.662086][ T38] audit: type=1804 audit(1777577694.391:9): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.3370" name="/newroot/452/cgroup.controllers" dev="tmpfs" ino=2371 res=1 errno=0 [ 1310.053208][T18353] __nla_validate_parse: 8 callbacks suppressed [ 1310.053229][T18353] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3372'. [ 1310.087390][T18353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3372'. [ 1310.910651][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3376'. [ 1310.910686][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3376'. [ 1310.957948][ T5725] usb 8-1: USB disconnect, device number 76 [ 1311.129522][T14246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.400321][T18378] gre2: entered allmulticast mode [ 1313.024619][ T38] audit: type=1804 audit(1777577697.751:10): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.3382" name="/newroot/470/cgroup.controllers" dev="tmpfs" ino=2446 res=1 errno=0 [ 1313.024678][ T38] audit: type=1800 audit(1777577697.751:11): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.3382" name="cgroup.controllers" dev="tmpfs" ino=2446 res=0 errno=0 [ 1313.035592][ T38] audit: type=1804 audit(1777577697.761:12): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.3382" name="/newroot/470/cgroup.controllers" dev="tmpfs" ino=2446 res=1 errno=0 [ 1313.056861][T18401] syzkaller0: entered promiscuous mode [ 1313.056888][T18401] syzkaller0: entered allmulticast mode [ 1313.666315][T18411] trusted_key: encrypted_key: key user:syz not found [ 1315.118533][ T5725] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1315.268498][ T5725] usb 8-1: Using ep0 maxpacket: 32 [ 1315.271136][ T5725] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1315.271165][ T5725] usb 8-1: config 0 has no interface number 0 [ 1315.274226][ T5725] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1315.274257][ T5725] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.274279][ T5725] usb 8-1: Product: syz [ 1315.274296][ T5725] usb 8-1: Manufacturer: syz [ 1315.274312][ T5725] usb 8-1: SerialNumber: syz [ 1315.280210][ T5725] usb 8-1: config 0 descriptor?? [ 1315.793114][ T5725] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1315.793147][ T5725] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1316.419618][ T5725] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1316.420047][ T5725] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32 [ 1317.594199][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3392'. [ 1317.594225][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3392'. [ 1317.821092][ T5725] usb 8-1: USB disconnect, device number 77 [ 1318.018574][T13456] Bluetooth: hci4: command 0x0406 tx timeout [ 1318.175241][T18444] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3398'. [ 1318.176627][T18444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3398'. [ 1320.198915][T18470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3407'. [ 1320.438457][ T823] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1320.588746][ T823] usb 9-1: Using ep0 maxpacket: 32 [ 1320.591737][ T823] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1320.591765][ T823] usb 9-1: config 0 has no interface number 0 [ 1320.599635][ T823] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1320.599681][ T823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.599702][ T823] usb 9-1: Product: syz [ 1320.599716][ T823] usb 9-1: Manufacturer: syz [ 1320.599731][ T823] usb 9-1: SerialNumber: syz [ 1320.768663][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.991158][ T823] usb 9-1: config 0 descriptor?? [ 1321.079594][T18487] trusted_key: encrypted_key: key user:syz not found [ 1321.932838][ T823] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1321.932872][ T823] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1322.142702][ T823] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1322.143044][ T823] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 1322.370567][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3416'. [ 1323.881502][ T5328] usb 9-1: USB disconnect, device number 63 [ 1324.075869][T18521] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3423'. [ 1324.658532][ T10] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1324.810303][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1324.833739][T18536] trusted_key: encrypted_key: key user:syz not found [ 1325.329048][ T10] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 1325.329082][ T10] usb 9-1: config 1 has no interface number 0 [ 1325.329131][ T10] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1325.329159][ T10] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1325.329185][ T10] usb 9-1: config 1 interface 105 has no altsetting 0 [ 1325.332536][ T10] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1325.332568][ T10] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1325.332593][ T10] usb 9-1: Product: syz [ 1325.332609][ T10] usb 9-1: Manufacturer: syz [ 1325.332626][ T10] usb 9-1: SerialNumber: syz [ 1325.506192][T18523] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1325.506390][T18523] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1326.901333][T18549] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1326.908022][T18549] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1327.320163][ T10] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1327.398056][T18523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.422003][T18523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.480955][T18562] gre1: entered allmulticast mode [ 1327.537851][T18568] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3437'. [ 1327.630934][T18523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.631575][T18523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.724620][T18549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.745627][T18549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.673606][T18577] trusted_key: encrypted_key: key user:syz not found [ 1328.795047][ T10] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1329.426675][ T10] aqc111 9-1:1.105 eth21: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d2:fa:71:3e:c4:be [ 1329.452208][ T10] usb 9-1: USB disconnect, device number 64 [ 1329.456422][ T10] aqc111 9-1:1.105 eth21: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1329.790871][T18588] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3444'. [ 1330.022514][ T10] aqc111 9-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1330.022603][ T10] aqc111 9-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1330.022724][ T10] aqc111 9-1:1.105 eth21 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1331.518988][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.831826][T18610] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3451'. [ 1333.048475][ T823] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1333.103574][T18640] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3456'. [ 1333.107762][T18640] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3456'. [ 1333.233495][ T823] usb 10-1: Using ep0 maxpacket: 32 [ 1333.405652][ T823] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1333.405743][ T823] usb 10-1: config 0 has no interface number 0 [ 1334.169260][ T823] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1334.169294][ T823] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.169318][ T823] usb 10-1: Product: syz [ 1334.169335][ T823] usb 10-1: Manufacturer: syz [ 1334.169351][ T823] usb 10-1: SerialNumber: syz [ 1334.229208][ T823] usb 10-1: config 0 descriptor?? [ 1334.612143][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3462'. [ 1334.612262][T18658] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3462'. [ 1334.658671][ T823] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1334.658703][ T823] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1334.864010][ T823] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1334.864681][ T823] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -32 [ 1335.311234][T18667] nbd: must specify a size in bytes for the device [ 1336.243650][ T5328] usb 10-1: USB disconnect, device number 5 [ 1339.267317][T18691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3473'. [ 1339.267357][T18691] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3473'. [ 1340.568681][ T9869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.608437][ T5328] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1342.795837][ T5328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.795871][ T5328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.795910][ T5328] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1342.795933][ T5328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.856513][ T5328] usb 2-1: config 0 descriptor?? [ 1343.389785][ T5328] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 1343.389825][ T5328] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 1343.389855][ T5328] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 1343.389884][ T5328] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 1343.389911][ T5328] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 1343.395270][ T5328] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 1343.395306][ T5328] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 1343.466644][ T5328] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 1343.756429][ T5328] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 1343.756477][ T5328] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 1343.849582][ T5328] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 1344.141923][ T5328] usb 2-1: USB disconnect, device number 77 [ 1344.274912][T18774] trusted_key: encrypted_key: key user:syz not found [ 1348.155650][T18801] trusted_key: encrypted_key: key user:syz not found [ 1350.395897][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.504533][T18826] trusted_key: encrypted_key: key user:syz not found [ 1352.198032][T18841] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3523'. [ 1354.387238][T18844] gre1: entered allmulticast mode [ 1354.443755][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.770506][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.423674][T18890] tipc: Started in network mode [ 1358.423710][T18890] tipc: Node identity e68a572e4edf, cluster identity 4711 [ 1358.423923][T18890] tipc: Enabled bearer , priority 0 [ 1358.426126][T18890] syzkaller0: entered promiscuous mode [ 1358.426149][T18890] syzkaller0: entered allmulticast mode [ 1358.452523][T18895] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3538'. [ 1358.590339][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.593571][T18890] tipc: Resetting bearer [ 1358.716197][T18889] tipc: Resetting bearer [ 1359.122868][T18889] tipc: Disabling bearer [ 1359.168756][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.768826][ T9869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.771145][T18914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3542'. [ 1359.771182][T18914] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3542'. [ 1360.253616][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3546'. [ 1361.696631][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.696703][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.886117][T18961] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3556'. [ 1365.884358][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3558'. [ 1365.884396][T18967] netlink: 'syz.6.3558': attribute type 30 has an invalid length. [ 1367.629209][T18982] trusted_key: encrypted_key: key user:syz not found [ 1371.032596][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.586439][ T31] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1371.739850][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1371.742805][ T31] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1371.742834][ T31] usb 2-1: config 1 has no interface number 0 [ 1371.742882][ T31] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1371.742912][ T31] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1371.743011][ T31] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1371.835671][ T31] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1371.835706][ T31] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1371.835729][ T31] usb 2-1: Product: syz [ 1371.835745][ T31] usb 2-1: Manufacturer: syz [ 1371.835761][ T31] usb 2-1: SerialNumber: syz [ 1372.140906][T18994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1372.141301][T18994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1372.523923][T19011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3570'. [ 1372.599082][T19009] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3569'. [ 1372.599297][T19012] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3569'. [ 1372.625826][T18994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1372.626061][T18994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1373.164465][T19030] trusted_key: encrypted_key: key user:syz not found [ 1373.176012][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.177573][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.181866][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.185216][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.186397][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.187420][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.188310][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.191732][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.879145][T18994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.887827][T18994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.043077][ T31] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1374.203626][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.255182][T19032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.259492][T19032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.389354][T18994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.395978][T18994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.500759][ T5328] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1374.505097][T19039] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3577'. [ 1374.564341][ T31] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1374.648886][ T5328] usb 9-1: Using ep0 maxpacket: 16 [ 1374.654269][ T5328] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 1374.654297][ T5328] usb 9-1: config 0 has no interface number 0 [ 1374.654347][ T5328] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1374.654375][ T5328] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1374.658000][ T5328] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1374.658030][ T5328] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.658053][ T5328] usb 9-1: Product: syz [ 1374.658069][ T5328] usb 9-1: Manufacturer: syz [ 1374.658085][ T5328] usb 9-1: SerialNumber: syz [ 1374.751679][ T5328] usb 9-1: config 0 descriptor?? [ 1374.754873][T19034] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1374.758615][T19034] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1374.796988][T19043] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3579'. [ 1375.020552][T19034] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1375.020687][T19034] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1375.221955][ T5328] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1375.222237][ T5328] asix 9-1:0.34: probe with driver asix failed with error -32 [ 1375.292659][ T31] aqc111 2-1:1.105 eth21: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 4a:18:57:9c:60:ae [ 1375.359175][ T31] usb 2-1: USB disconnect, device number 78 [ 1375.448608][ T31] aqc111 2-1:1.105 eth21: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1376.301258][T19065] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3584'. [ 1376.301517][T19067] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3584'. [ 1376.669953][ T31] aqc111 2-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1376.670081][ T31] aqc111 2-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1376.670198][ T31] aqc111 2-1:1.105 eth21 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1376.998660][T19087] trusted_key: encrypted_key: key user:syz not found [ 1377.637486][ T9869] usb 9-1: USB disconnect, device number 65 [ 1378.194143][T19102] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3591'. [ 1378.314973][T19110] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3592'. [ 1378.547367][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1378.847682][T19122] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3595'. [ 1378.915991][T19124] trusted_key: encrypted_key: key user:syz not found [ 1379.605307][T19129] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3597'. [ 1379.606868][T19129] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3597'. [ 1380.249031][T14246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.925386][T19146] macvlan2: entered promiscuous mode [ 1380.925412][T19146] macvlan2: entered allmulticast mode [ 1381.371123][T19151] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3605'. [ 1382.368812][T19165] trusted_key: encrypted_key: key user:syz not found [ 1382.469008][T19167] trusted_key: encrypted_key: key user:syz not found [ 1383.540225][T19179] syzkaller1: entered promiscuous mode [ 1383.540257][T19179] syzkaller1: entered allmulticast mode [ 1385.826434][T19197] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3617'. [ 1385.896288][T19209] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3622'. [ 1386.678469][T19214] trusted_key: encrypted_key: key user:syz not found [ 1386.820865][T19216] trusted_key: encrypted_key: key user:syz not found [ 1387.350539][T19220] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3623'. [ 1387.433547][T19224] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3626'. [ 1387.433584][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3626'. [ 1387.433602][T19224] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3626'. [ 1388.085045][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3629'. [ 1388.128512][ T31] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1388.164556][T19252] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3635'. [ 1388.258472][ T31] usb 10-1: device descriptor read/64, error -71 [ 1388.524931][ T31] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1388.801005][ T31] usb 10-1: device descriptor read/64, error -71 [ 1388.977951][T19264] trusted_key: encrypted_key: key user:syz not found [ 1389.846688][ T31] usb usb10-port1: attempt power cycle [ 1390.300895][ T31] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1390.330458][ T31] usb 10-1: device descriptor read/8, error -71 [ 1390.495720][T14246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.574097][ T31] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1390.589178][ T31] usb 10-1: device descriptor read/8, error -71 [ 1390.700516][ T31] usb usb10-port1: unable to enumerate USB device [ 1391.178325][T19286] trusted_key: encrypted_key: key user:syz not found [ 1392.070629][ T9869] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1392.218417][ T9869] usb 2-1: Using ep0 maxpacket: 32 [ 1392.224133][ T9869] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1392.224162][ T9869] usb 2-1: config 0 has no interface number 0 [ 1392.256935][ T9869] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1392.256966][ T9869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.256987][ T9869] usb 2-1: Product: syz [ 1392.257016][ T9869] usb 2-1: Manufacturer: syz [ 1392.257032][ T9869] usb 2-1: SerialNumber: syz [ 1392.366858][ T9869] usb 2-1: config 0 descriptor?? [ 1392.374924][T19309] tipc: Enabled bearer , priority 0 [ 1392.448725][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3649'. [ 1392.568173][T19308] tipc: Disabling bearer [ 1392.826143][ T9869] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1392.826176][ T9869] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1393.355296][T19319] syzkaller1: entered promiscuous mode [ 1393.355320][T19319] syzkaller1: entered allmulticast mode [ 1394.064834][ T9869] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1394.065143][ T9869] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 1394.402816][ T9869] usb 2-1: USB disconnect, device number 79 [ 1394.641978][T19342] trusted_key: encrypted_key: key user:syz not found [ 1395.954017][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3665'. [ 1396.624314][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3668'. [ 1397.040374][T19373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.156120][T19373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.325019][T19373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.340072][T19373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.345168][T19373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.345606][T19373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.346158][T19373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.541271][ T5612] block nbd0: Receive control failed (result -32) [ 1398.628448][ T5834] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1398.654339][T19393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3679'. [ 1398.655390][T19393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3679'. [ 1401.870424][T14246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.058695][ T5834] usb 10-1: Using ep0 maxpacket: 16 [ 1402.059689][ T5834] usb 10-1: device descriptor read/all, error -71 [ 1405.483447][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3688'. [ 1405.499483][T19433] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3690'. [ 1405.740728][T19441] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3692'. [ 1405.744154][T19441] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3692'. [ 1406.105205][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3697'. [ 1406.646962][T19466] trusted_key: encrypted_key: key user:syz not found [ 1407.394682][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3698'. [ 1409.652793][T19496] syz.8.3703 (19496) used greatest stack depth: 17280 bytes left [ 1410.156051][T19508] trusted_key: encrypted_key: key user:syz not found [ 1410.981237][ T9869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.986316][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.987892][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.125313][T14246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.175832][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3709'. [ 1412.965874][T19540] trusted_key: encrypted_key: key user:syz not found [ 1415.204384][T19566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3722'. [ 1415.204432][T19566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3722'. [ 1419.868618][ T38] audit: type=1107 audit(1777577804.531:13): pid=19657 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1420.236814][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3767'. [ 1420.568995][ T9869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.712647][T19664] team0: Port device team_slave_0 removed [ 1421.037096][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3771'. [ 1421.037127][T19674] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3771'. [ 1423.134158][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.134251][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.694733][T13456] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1423.753968][T13456] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1423.985409][T13456] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1424.785217][T13456] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1424.804645][T13456] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1426.124681][T19729] overlayfs: missing 'lowerdir' [ 1427.711421][T19750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1427.711458][T19750] netlink: 'syz.1.3796': attribute type 29 has an invalid length. [ 1427.711474][T19750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1427.713911][T19750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1427.713942][T19750] netlink: 'syz.1.3796': attribute type 29 has an invalid length. [ 1427.713959][T19750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1427.929350][T13456] Bluetooth: hci0: command tx timeout [ 1429.048595][T13456] Bluetooth: hci3: command 0x1003 tx timeout [ 1429.049522][ T5612] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1429.956960][T19785] overlayfs: failed to clone upperpath [ 1430.172193][ T5612] Bluetooth: hci0: command tx timeout [ 1431.486292][T10753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.495860][ T5612] Bluetooth: hci0: command tx timeout [ 1433.036113][T19713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.036244][T19713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.036496][T19713] bridge_slave_0: entered allmulticast mode [ 1433.043894][T19713] bridge_slave_0: entered promiscuous mode [ 1433.105131][T19713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.118896][T19713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.119148][T19713] bridge_slave_1: entered allmulticast mode [ 1433.130127][T19713] bridge_slave_1: entered promiscuous mode [ 1433.348797][T19713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.375190][T19713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.547368][T19713] team0: Port device team_slave_0 added [ 1433.578090][T19713] team0: Port device team_slave_1 added [ 1433.671042][T19713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.671061][T19713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.671089][T19713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.699128][T19713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.699173][T19713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.699247][T19713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1434.280706][T19831] binder: 19830:19831 ioctl c0306201 200000000280 returned -14 [ 1434.322499][T19713] hsr_slave_0: entered promiscuous mode [ 1434.329887][T19713] hsr_slave_1: entered promiscuous mode [ 1434.335882][T19713] debugfs: 'hsr0' already exists in 'hsr' [ 1434.335944][T19713] Cannot create hsr debugfs directory [ 1435.221650][ T5612] Bluetooth: hci0: command tx timeout [ 1435.485584][T19844] trusted_key: syz.1.3825 sent an empty control message without MSG_MORE. [ 1441.281305][T10753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.474852][ T5612] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 1443.488076][T19908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1443.541394][T19908] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1443.541524][T19908] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1444.170097][T19908] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1444.189512][T19908] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1444.255932][T19908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1444.256061][T19908] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1444.506054][T19908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1444.506186][T19908] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1444.583378][T19955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.583569][T19955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.583889][T19955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.614847][T19955] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1444.794441][T19908] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1445.834979][T19972] netlink: 'syz.7.3856': attribute type 10 has an invalid length. [ 1445.835005][T19972] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3856'. [ 1445.906469][T19973] Bluetooth: MGMT ver 1.23 [ 1446.013805][T13456] Bluetooth: hci5: command 0x0c1a tx timeout [ 1446.013919][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 1446.168726][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 1446.328491][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 1446.685495][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 1447.899922][T19972] xfrm0: entered promiscuous mode [ 1447.927165][T19981] syzkaller1: entered promiscuous mode [ 1447.927195][T19981] syzkaller1: entered allmulticast mode [ 1448.303707][ T5612] Bluetooth: hci5: command 0x0c1a tx timeout [ 1448.303748][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 1449.296479][T13456] Bluetooth: hci1: command 0x0406 tx timeout [ 1449.297554][T13456] Bluetooth: hci0: command 0x0c1a tx timeout [ 1451.368437][T13456] Bluetooth: hci0: command 0x0c1a tx timeout [ 1455.833003][T20080] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3877'. [ 1457.281918][T20086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1457.727711][T13456] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 1458.275797][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3888'. [ 1458.275855][T20114] netlink: 'syz.1.3888': attribute type 29 has an invalid length. [ 1458.275870][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3888'. [ 1458.578051][T19713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1458.678706][T19713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1458.686910][T19713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1458.874454][T20134] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3891'. [ 1458.902875][T19713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1458.906788][T13456] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 1459.799484][T19713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1461.304933][T19713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1461.347108][T19713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1462.658874][T19713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1463.088612][T13456] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 1464.094953][T19713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.181925][T19713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.210375][ T3095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.210594][ T3095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.238165][T20189] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3907'. [ 1464.269112][ T3095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.269260][ T3095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1465.573606][T20223] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1465.718963][T13456] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 1466.126240][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3916'. [ 1466.126315][T20235] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3916'. [ 1469.026920][T19713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.044433][T13456] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 1469.446488][T19713] veth0_vlan: entered promiscuous mode [ 1469.647988][T19713] veth1_vlan: entered promiscuous mode [ 1469.830527][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3935'. [ 1469.830565][T20295] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3935'. [ 1470.148909][T20302] binder: 20300:20302 ioctl c018620c 200000000040 returned -22 [ 1470.307847][T19713] veth0_macvtap: entered promiscuous mode [ 1470.412827][T19713] veth1_macvtap: entered promiscuous mode [ 1470.549928][T19713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1470.722668][T19713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1470.920636][ T155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.920689][ T155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.920728][ T155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.920766][ T155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.870424][ T7983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.870446][ T7983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.940638][T20358] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10360] was attempted by ""[20358] [ 1473.264716][ T7983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.264739][ T7983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.041683][T13456] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 1478.519106][T13456] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 1478.973329][T20439] capability: warning: `syz.6.3976' uses deprecated v2 capabilities in a way that may be insecure [ 1479.001686][T20438] 9p: Bad value for 'wfdno' [ 1479.147693][T20443] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1479.709104][T13456] Bluetooth: hci4: connection err: -111 [ 1479.817594][T20468] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3990'. [ 1480.680734][T13456] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 1484.001228][T13456] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 1484.629416][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.629485][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.502994][T20563] netlink: 592 bytes leftover after parsing attributes in process `syz.6.4016'. [ 1488.634371][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1488.652691][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1488.686382][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1488.697913][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1488.712954][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1488.885021][ T5612] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 1489.062316][T20576] binder: 20571:20576 ioctl c0306201 200000000180 returned -14 [ 1489.363143][T20586] fuse: Bad value for 'fd' [ 1490.894358][ T5612] Bluetooth: hci3: command tx timeout [ 1491.274115][ T5612] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 1491.825115][T20627] fuse: Bad value for 'fd' [ 1492.972879][ T5612] Bluetooth: hci3: command tx timeout [ 1493.777723][T20643] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[19713] was attempted by ""[20643] [ 1493.805759][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4037'. [ 1493.805798][T20644] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4037'. [ 1493.857768][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4037'. [ 1493.857803][T20646] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4037'. [ 1494.452141][T20659] fuse: Bad value for 'fd' [ 1494.529637][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1494.529669][T20662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1495.048373][ T5612] Bluetooth: hci3: command tx timeout [ 1495.691027][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4050'. [ 1495.691066][T20678] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4050'. [ 1495.786497][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4050'. [ 1495.786535][T20680] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4050'. [ 1495.936355][ T7983] Bluetooth: hci2: Frame reassembly failed (-84) [ 1496.232236][T20690] 9p: Bad value for 'rfdno' [ 1497.866142][T11893] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.866202][T11893] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.915635][T13456] Bluetooth: hci3: command tx timeout [ 1497.928507][ T5612] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1498.675841][T11893] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.675883][T11893] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.487249][T11893] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1499.487288][T11893] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.049998][ T183] Bluetooth: hci2: Frame reassembly failed (-84) [ 1500.590551][T11893] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.590591][T11893] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.113747][T20773] binder: 20772:20773 ioctl c018620c 200000000040 returned -1 [ 1501.267812][T20561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.268064][T20561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.283441][T20561] bridge_slave_0: entered allmulticast mode [ 1501.309756][T20561] bridge_slave_0: entered promiscuous mode [ 1501.331596][T20561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.331796][T20561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.332020][T20561] bridge_slave_1: entered allmulticast mode [ 1501.335075][T20561] bridge_slave_1: entered promiscuous mode [ 1501.406472][T20561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.420999][T20561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.505623][T20561] team0: Port device team_slave_0 added [ 1501.518951][T20561] team0: Port device team_slave_1 added [ 1501.605702][T20561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.605722][T20561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.605753][T20561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.652645][T20561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.652664][T20561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.652696][T20561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1502.088773][T13456] Bluetooth: hci2: command 0x1003 tx timeout [ 1502.093691][ T5612] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1502.817923][T20561] hsr_slave_0: entered promiscuous mode [ 1502.833215][T20561] hsr_slave_1: entered promiscuous mode [ 1502.833954][T20561] debugfs: 'hsr0' already exists in 'hsr' [ 1502.833973][T20561] Cannot create hsr debugfs directory [ 1504.509557][T20829] __nla_validate_parse: 2 callbacks suppressed [ 1504.509575][T20829] netlink: 268 bytes leftover after parsing attributes in process `syz.9.4105'. [ 1505.033224][T11893] bridge_slave_1: left allmulticast mode [ 1505.033279][T11893] bridge_slave_1: left promiscuous mode [ 1505.033595][T11893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.083950][T11893] bridge_slave_0: left allmulticast mode [ 1505.083991][T11893] bridge_slave_0: left promiscuous mode [ 1505.084172][T11893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.632853][ T5612] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1508.480571][T11893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.528703][T11893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.512217][T11893] bond0 (unregistering): Released all slaves [ 1509.529864][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4109'. [ 1509.529887][T20840] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4109'. [ 1516.983072][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1518.304214][T20930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4132'. [ 1518.304240][T20930] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4132'. [ 1520.993148][T20955] binder: 20954:20955 ioctl c018620c 0 returned -14 [ 1523.204789][T20983] fuse: Bad value for 'fd' [ 1523.393489][T20988] binder: 20986:20988 ioctl c018620c 0 returned -14 [ 1525.056476][T21013] fuse: Bad value for 'fd' [ 1525.315065][T21020] binder: 21018:21020 ioctl c018620c 0 returned -14 [ 1525.732680][T11893] hsr_slave_0: left promiscuous mode [ 1525.782977][T11893] hsr_slave_1: left promiscuous mode [ 1525.784162][T11893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1525.784191][T11893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.841242][T11893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1525.841283][T11893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1526.015001][T21046] fuse: Bad value for 'fd' [ 1526.099947][T11893] veth1_macvtap: left promiscuous mode [ 1526.100059][T11893] veth0_macvtap: left promiscuous mode [ 1526.129623][T11893] veth1_vlan: left promiscuous mode [ 1526.129806][T11893] veth0_vlan: left promiscuous mode [ 1527.699221][T11893] team0 (unregistering): Port device team_slave_1 removed [ 1527.750237][T11893] team0 (unregistering): Port device team_slave_0 removed [ 1532.589140][T20561] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1532.634878][T20561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1532.642569][T20561] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1532.786890][T20561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1532.806585][T20561] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1532.885173][T20561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1532.886975][T20561] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1532.948142][T20561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1533.598095][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4220'. [ 1533.598132][T21181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4220'. [ 1533.697350][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4220'. [ 1533.700015][T21182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4220'. [ 1533.801504][T20561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.871494][T20561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.899061][T11893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.899287][T11893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.945891][T11893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.946049][T11893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1537.827364][T21229] binder: BINDER_SET_CONTEXT_MGR already set [ 1537.827381][T21229] binder: 21228:21229 ioctl 4018620d 2000000002c0 returned -16 [ 1538.002241][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4232'. [ 1538.002279][T21238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4232'. [ 1538.007943][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4232'. [ 1538.007975][T21238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4232'. [ 1538.134263][T20561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.753044][T20561] veth0_vlan: entered promiscuous mode [ 1539.409301][T20561] veth1_vlan: entered promiscuous mode [ 1541.503288][T20561] veth0_macvtap: entered promiscuous mode [ 1541.523846][T20561] veth1_macvtap: entered promiscuous mode [ 1541.561532][T20561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1541.587885][T20561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1541.617220][T11893] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.617472][T11893] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.617511][T11893] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.617547][T11893] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.955641][ T7983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1543.955664][ T7983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.086734][ T7983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.086758][ T7983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.017070][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.017149][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.193809][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4261'. [ 1549.193836][T21335] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4261'. [ 1550.098058][T13456] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1550.178166][T13456] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1550.184483][T13456] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1550.194194][T13456] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1550.196531][T13456] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1550.674830][T21362] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4271'. [ 1551.945648][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 1551.945693][T21369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4274'. [ 1552.128668][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 1552.128704][T21373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4274'. [ 1552.797410][T13456] Bluetooth: hci2: command tx timeout [ 1553.758575][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1553.758600][T21379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1554.977582][T13456] Bluetooth: hci2: command tx timeout [ 1556.357587][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1556.357625][T21432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1556.412545][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1556.412581][T21435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1557.276215][ T106] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.276254][ T106] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.368528][T13456] Bluetooth: hci2: command tx timeout [ 1559.472627][T13456] Bluetooth: hci2: command tx timeout [ 1560.995957][ T106] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.995998][ T106] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.870717][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4309'. [ 1561.870770][T21489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4309'. [ 1561.990308][T21490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4309'. [ 1561.990344][T21490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4309'. [ 1562.806590][ T106] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1562.806629][ T106] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.852680][ T106] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1569.852718][ T106] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.880050][T21350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.880234][T21350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.880493][T21350] bridge_slave_0: entered allmulticast mode [ 1575.923193][T21350] bridge_slave_0: entered promiscuous mode [ 1575.961078][T21350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.961209][T21350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.961472][T21350] bridge_slave_1: entered allmulticast mode [ 1575.993280][T21350] bridge_slave_1: entered promiscuous mode [ 1576.432027][T21350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1576.508054][T21350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.422410][ T106] bridge_slave_1: left allmulticast mode [ 1578.422444][ T106] bridge_slave_1: left promiscuous mode [ 1578.422683][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.501213][ T106] bridge_slave_0: left allmulticast mode [ 1578.501248][ T106] bridge_slave_0: left promiscuous mode [ 1578.501506][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.794834][T21697] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4378'. [ 1581.823054][T21695] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input28 [ 1581.905144][T21698] netlink: 'syz.9.4378': attribute type 22 has an invalid length. [ 1581.905168][T21698] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4378'. [ 1583.647733][ T106] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1586.000050][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1586.279126][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1586.309853][ T106] bond0 (unregistering): Released all slaves [ 1586.340347][ T106] bond1 (unregistering): Released all slaves [ 1586.379862][ T106] bond2 (unregistering): Released all slaves [ 1586.759863][T21350] team0: Port device team_slave_0 added [ 1586.763651][T21350] team0: Port device team_slave_1 added [ 1586.844757][T21350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.844776][T21350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.844804][T21350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.895002][T21350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.895017][T21350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.895039][T21350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.303808][ T106] tipc: Left network mode [ 1587.362016][T21350] hsr_slave_0: entered promiscuous mode [ 1587.363536][T21350] hsr_slave_1: entered promiscuous mode [ 1587.364640][T21350] debugfs: 'hsr0' already exists in 'hsr' [ 1587.364665][T21350] Cannot create hsr debugfs directory [ 1592.231185][T21816] netlink: 268 bytes leftover after parsing attributes in process `syz.7.4413'. [ 1592.431703][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1595.208418][ T5725] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1595.359839][ T5725] usb 4-1: Using ep0 maxpacket: 16 [ 1595.362662][ T5725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.362687][ T5725] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1595.398578][ T5725] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1595.398610][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.398633][ T5725] usb 4-1: Product: syz [ 1595.398648][ T5725] usb 4-1: Manufacturer: syz [ 1595.398664][ T5725] usb 4-1: SerialNumber: syz [ 1595.527316][ T5725] usb 4-1: 0:2 : does not exist [ 1595.733567][ T5725] usb 4-1: USB disconnect, device number 7 [ 1596.082021][T21762] udevd[21762]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1599.904602][T21886] binder: BINDER_SET_CONTEXT_MGR already set [ 1599.904619][T21886] binder: 21885:21886 ioctl 4018620d 200000000040 returned -16 [ 1600.498414][ T106] hsr_slave_0: left promiscuous mode [ 1600.518485][ T106] hsr_slave_1: left promiscuous mode [ 1600.519593][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1600.519619][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.633078][T21893] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4431'. [ 1600.830349][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1600.830381][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.200712][ T106] veth1_macvtap: left promiscuous mode [ 1601.200820][ T106] veth0_macvtap: left promiscuous mode [ 1601.202306][ T106] veth1_vlan: left promiscuous mode [ 1601.202524][ T106] veth0_vlan: left promiscuous mode [ 1601.279001][T21895] fuse: Unknown parameter 'grou00000000000000000000' [ 1603.959694][ T106] team0 (unregistering): Port device team_slave_1 removed [ 1606.875697][T21924] fuse: Unknown parameter 'group_i00000000000000000000' [ 1608.291800][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.292078][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.697733][T21946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1610.306107][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1610.345976][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1610.359644][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1610.367460][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1610.388803][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1612.965363][ T5612] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 1613.138868][ T5612] Bluetooth: hci5: command tx timeout [ 1613.377972][T21997] fuse: Unknown parameter 'group_i00000000000000000000' [ 1615.234748][T13456] Bluetooth: hci5: command tx timeout [ 1615.288470][T13456] Bluetooth: hci3: command 0x0406 tx timeout [ 1617.289226][ T5612] Bluetooth: hci5: command tx timeout [ 1617.558430][T11642] bridge_slave_1: left allmulticast mode [ 1617.558468][T11642] bridge_slave_1: left promiscuous mode [ 1617.558773][T11642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.717334][T11642] bridge_slave_0: left allmulticast mode [ 1617.717369][T11642] bridge_slave_0: left promiscuous mode [ 1617.717632][T11642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.893543][T22045] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input30 [ 1618.319225][T11642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1618.458379][T11642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1618.535659][T11642] bond0 (unregistering): Released all slaves [ 1619.087042][T22058] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input31 [ 1619.359132][T22063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4473'. [ 1619.364746][T11642] hsr_slave_0: left promiscuous mode [ 1619.370295][ T5612] Bluetooth: hci5: command tx timeout [ 1619.435119][T22069] netlink: 'syz.1.4473': attribute type 22 has an invalid length. [ 1619.435141][T22069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4473'. [ 1619.878710][T11642] hsr_slave_1: left promiscuous mode [ 1619.905231][T11642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.891742][T11642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.559098][T11642] team0 (unregistering): Port device team_slave_1 removed [ 1622.623852][T11642] team0 (unregistering): Port device team_slave_0 removed [ 1623.166081][T22113] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input32 [ 1624.434434][T21947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.690761][T21947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.772790][T21947] bridge_slave_0: entered allmulticast mode [ 1625.006532][T21947] bridge_slave_0: entered promiscuous mode [ 1625.061725][T21947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.066128][T21947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.066402][T21947] bridge_slave_1: entered allmulticast mode [ 1625.105257][T21947] bridge_slave_1: entered promiscuous mode [ 1625.466077][T22141] netlink: 268 bytes leftover after parsing attributes in process `syz.9.4491'. [ 1625.595124][T21947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1625.612448][T21947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.814337][T21947] team0: Port device team_slave_0 added [ 1625.842978][T21947] team0: Port device team_slave_1 added [ 1626.340834][T21947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.340853][T21947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.340891][T21947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.441302][T21947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.441318][T21947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.441358][T21947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.567826][T21947] hsr_slave_0: entered promiscuous mode [ 1626.575849][T21947] hsr_slave_1: entered promiscuous mode [ 1631.307005][T22176] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4501'. [ 1631.737267][T22187] fuse: Bad value for 'user_id' [ 1631.737290][T22187] fuse: Bad value for 'user_id' [ 1633.417219][T21947] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1633.497771][T22206] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4513'. [ 1633.514703][T21947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1633.516234][T21947] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1634.203864][T21947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1634.545734][T22218] fuse: Bad value for 'user_id' [ 1634.545757][T22218] fuse: Bad value for 'user_id' [ 1634.769264][T21947] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1634.799439][T21947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1634.807224][T21947] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1634.869449][T21947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1636.682372][T21947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1636.716183][T21947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1636.733583][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.733815][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1636.834645][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.834785][ T7981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.992406][T22252] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input33 [ 1638.129112][T22258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4525'. [ 1638.130093][T22258] netlink: 'syz.1.4525': attribute type 22 has an invalid length. [ 1638.130112][T22258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4525'. [ 1640.722931][T21947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.026580][T22306] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input34 [ 1641.082194][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4539'. [ 1641.147223][T22312] netlink: 'syz.1.4539': attribute type 22 has an invalid length. [ 1641.147248][T22312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4539'. [ 1643.873811][T21947] veth0_vlan: entered promiscuous mode [ 1644.016373][T21947] veth1_vlan: entered promiscuous mode [ 1644.651095][T21947] veth0_macvtap: entered promiscuous mode [ 1644.666994][T21947] veth1_macvtap: entered promiscuous mode [ 1644.754300][T21947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1644.774179][T21947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1644.824781][ T106] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.825074][ T106] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.825117][ T106] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.012872][ T106] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.234621][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.234645][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.600581][T22388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input35 [ 1648.724010][T22392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4564'. [ 1649.777543][T22388] netlink: 'syz.3.4564': attribute type 22 has an invalid length. [ 1649.777570][T22388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4564'. [ 1650.016836][ T824] IPVS: starting estimator thread 0... [ 1650.060537][ T7981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.060560][ T7981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.130089][T22400] IPVS: using max 11 ests per chain, 26400 per kthread [ 1651.288604][T22415] sctp: [Deprecated]: syz.3.4568 (pid 22415) Use of int in max_burst socket option. [ 1651.288604][T22415] Use struct sctp_assoc_value instead [ 1656.689255][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4577'. [ 1656.693325][T22450] netlink: 'syz.7.4577': attribute type 22 has an invalid length. [ 1656.693348][T22450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4577'. [ 1667.352957][T22497] binder: 22493:22497 ioctl c0306201 0 returned -14 [ 1667.530177][T22495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1667.530204][T22495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1667.799428][T22496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1667.799456][T22496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1668.514071][T22503] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input36 [ 1668.636904][T22503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4594'. [ 1668.648981][T22503] netlink: 'syz.6.4594': attribute type 22 has an invalid length. [ 1668.649006][T22503] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4594'. [ 1669.217401][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.217474][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.607704][T22534] binder: 22533:22534 ioctl c0306201 0 returned -14 [ 1670.755628][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4605'. [ 1670.755656][T22536] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4605'. [ 1670.757456][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4605'. [ 1670.757478][T22536] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4605'. [ 1676.341415][T22560] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input37 [ 1676.989760][T22564] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4614'. [ 1676.990926][T22564] netlink: 'syz.9.4614': attribute type 22 has an invalid length. [ 1676.990946][T22564] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4614'. [ 1677.530360][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4612'. [ 1677.532562][T22567] netlink: 'syz.3.4612': attribute type 22 has an invalid length. [ 1677.532585][T22567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4612'. [ 1677.607491][T22563] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006e: 0000 [#1] SMP KASAN PTI [ 1677.607522][T22563] KASAN: null-ptr-deref in range [0x0000000000000370-0x0000000000000377] [ 1677.607553][T22563] CPU: 0 UID: 0 PID: 22563 Comm: syz.9.4614 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1677.607580][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS G[ 1677.607580][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1677.607598][T22563] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1677.607778][T22563] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1677.607810][T22563] RSP: 0018:ffffc9000673f880 EFLAGS: 00010202 [ 1677.607836][T22563] RAX: dffffc0000000000 RBX: ffffffff8b1e7f3a RCX: 0000000080000001 [ 1677.607853][T22563] RDX: 0000000000000000 RSI: ffffffff8b1e7f3a RDI: 000000000000006e [ 1677.607868][T22563] RBP: ffffffff8a1ac706 R08: 0000000000000001 R09: 0000000000000000 [ 1677.607882][T22563] R10: dffffc0000000000 R11: ffffed1006d27b8e R12: 0000000000000000 [ 1677.607897][T22563] R13: 0000000000000370 R14: 0000000000000370 R15: 0000000000000001 [ 1677.607911][T22563] FS: 00007f05d8b856c0(0000) GS:ffff88812617a000(0000) knlGS:0000000000000000 [ 1677.607929][T22563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1677.607943][T22563] CR2: 0000001b34720ff8 CR3: 000000003cfe8000 CR4: 00000000003526f0 [ 1677.607962][T22563] Call Trace: [ 1677.607970][T22563] [ 1677.607979][T22563] __kasan_check_byte+0x12/0x40 [ 1677.608006][T22563] lock_acquire+0x84/0x350 [ 1677.608094][T22563] ? l2cap_unregister_user+0x36/0x170 [ 1677.608194][T22563] ? l2cap_unregister_user+0x36/0x170 [ 1677.608219][T22563] mutex_lock_nested+0x5a/0x1d0 [ 1677.608329][T22563] ? l2cap_unregister_user+0x36/0x170 [ 1677.608351][T22563] ? hidp_session_find+0xce/0x100 [ 1677.608401][T22563] l2cap_unregister_user+0x36/0x170 [ 1677.608432][T22563] hidp_connection_del+0xb0/0x170 [ 1677.608458][T22563] hidp_sock_ioctl+0x3ab/0x650 [ 1677.608509][T22563] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 1677.608558][T22563] ? do_vfs_ioctl+0x117b/0x1540 [ 1677.608625][T22563] sock_do_ioctl+0x101/0x320 [ 1677.608726][T22563] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1677.608760][T22563] ? smack_file_ioctl+0x263/0x360 [ 1677.608862][T22563] sock_ioctl+0x5c9/0x7f0 [ 1677.608892][T22563] ? __pfx_sock_ioctl+0x10/0x10 [ 1677.608922][T22563] ? __fget_files+0x2a/0x420 [ 1677.609017][T22563] ? __fget_files+0x3a6/0x420 [ 1677.609050][T22563] ? __fget_files+0x2a/0x420 [ 1677.609086][T22563] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1677.609165][T22563] ? __pfx_sock_ioctl+0x10/0x10 [ 1677.609196][T22563] __se_sys_ioctl+0xff/0x170 [ 1677.609231][T22563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.609277][T22563] do_syscall_64+0x15f/0xf80 [ 1677.609332][T22563] ? trace_irq_disable+0x3b/0x140 [ 1677.609409][T22563] ? clear_bhb_loop+0x40/0x90 [ 1677.609442][T22563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.609466][T22563] RIP: 0033:0x7f05da94cdd9 [ 1677.609494][T22563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.609514][T22563] RSP: 002b:00007f05d8b85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1677.609538][T22563] RAX: ffffffffffffffda RBX: 00007f05dabc6090 RCX: 00007f05da94cdd9 [ 1677.609555][T22563] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 1677.609571][T22563] RBP: 00007f05da9e2d69 R08: 0000000000000000 R09: 0000000000000000 [ 1677.609587][T22563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1677.609600][T22563] R13: 00007f05dabc6128 R14: 00007f05dabc6090 R15: 00007ffc9213d4e8 [ 1677.609626][T22563] [ 1677.609639][T22563] Modules linked in: [ 1677.609710][T22563] ---[ end trace 0000000000000000 ]--- [ 1677.650382][T22563] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1677.650502][T22563] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1677.650558][T22563] RSP: 0018:ffffc9000673f880 EFLAGS: 00010202 [ 1677.650617][T22563] RAX: dffffc0000000000 RBX: ffffffff8b1e7f3a RCX: 0000000080000001 [ 1677.650663][T22563] RDX: 0000000000000000 RSI: ffffffff8b1e7f3a RDI: 000000000000006e [ 1677.650707][T22563] RBP: ffffffff8a1ac706 R08: 0000000000000001 R09: 0000000000000000 [ 1677.650751][T22563] R10: dffffc0000000000 R11: ffffed1006d27b8e R12: 0000000000000000 [ 1677.650795][T22563] R13: 0000000000000370 R14: 0000000000000370 R15: 0000000000000001 [ 1677.650831][T22563] FS: 00007f05d8b856c0(0000) GS:ffff88812627a000(0000) knlGS:0000000000000000 [ 1677.650887][T22563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1677.650932][T22563] CR2: 000055b6c7acdb80 CR3: 000000003cfe8000 CR4: 00000000003526f0 [ 1677.650989][T22563] Kernel panic - not syncing: Fatal exception [ 1677.651713][T22563] Kernel Offset: disabled