last executing test programs: 29m17.518279074s ago: executing program 32 (id=15): dup(0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001c0001040300000000ae6bcbaf000000581007b4cca981c7d69b6e88f40e0c349dac15ddd5bd320b0a8d605d57b14cb0128955c6224d15504ecedbe5119b2c48157daa2308fa4a4a66816e0fffb8490efc315f1b5fbecf8e51", @ANYRES32=0x0, @ANYBLOB="10000000"], 0x1c}}, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000200)=0x8001100) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x2, @pix={0x0, 0xa, 0x4f424752, 0x2, 0x0, 0x1a18e3f7, 0x8, 0x81, 0x0, 0x0, 0x1, 0x61d03986f8975690}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000100)='syzkaller\x00', 0x7}, 0x94) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0xe, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x1, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x8001, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x0, 0x8, 0x129432e3, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x59e, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xfffe, 0x3, 0x9, 0xfd, 0x9602, 0xa, 0x2, 0x1, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1c, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xff]}, 0x45c) munlockall() r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) 29m1.471583604s ago: executing program 33 (id=36): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x1, 0x5, 0x8, 0x6f4}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() getpeername$inet6(r0, &(0x7f0000000100), &(0x7f00000001c0)=0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 22m31.940425476s ago: executing program 34 (id=528): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) bind(r0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40e3, 0x4}, 0x80) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x149a82, 0x40) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x8657f, 0x0) 21m36.497860967s ago: executing program 0 (id=623): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 21m34.176259707s ago: executing program 0 (id=627): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 21m33.940038165s ago: executing program 0 (id=629): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) bind(r0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40e3, 0x4}, 0x80) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x8657f, 0x0) 21m31.687432821s ago: executing program 0 (id=631): landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) 21m28.600770009s ago: executing program 0 (id=634): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x18) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x80008, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) 21m25.985235954s ago: executing program 0 (id=637): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 21m10.32446225s ago: executing program 35 (id=637): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 17m54.87953588s ago: executing program 7 (id=928): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind(r0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40e3, 0x4}, 0x80) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x149a82, 0x40) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000004c0), 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x8657f, 0x0) 17m52.254211435s ago: executing program 7 (id=930): r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x80, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x80}}, 0x0) fsmount(r0, 0x0, 0x0) 17m44.559486662s ago: executing program 7 (id=939): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0xed, 0x6be8, 0x48, @rand_addr=' \x01\x00', @private0, 0x7, 0x10, 0x8, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x2, 0x0, 0x5, 0x1, 0x1, [{0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}}, &(0x7f0000000640)=""/160, 0x5e, 0xa0, 0x1, 0xfffffff8}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rseq(0x0, 0x0, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x8, 0x4, 0xc, 0x0, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r1}, 0xfffffe4a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r2, r2, 0x2f}, 0x20) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2e}, 0x20) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x18, 0x140e, 0xa55a02fc4bbd621b, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) socket$alg(0x26, 0x5, 0x0) 17m42.686988924s ago: executing program 7 (id=942): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x80000001}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1d, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m41.435189561s ago: executing program 7 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0x9) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000000440)=""/65, 0x41) 17m36.504874244s ago: executing program 7 (id=948): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) bind(r0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40e3, 0x4}, 0x80) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x40) write$cgroup_int(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e9055406", 0xa1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x8657f, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 17m21.273289191s ago: executing program 36 (id=948): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) bind(r0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40e3, 0x4}, 0x80) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x40) write$cgroup_int(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e9055406", 0xa1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x8657f, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 12m37.899510532s ago: executing program 4 (id=1348): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x18) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) 12m35.412063462s ago: executing program 4 (id=1353): r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 12m26.946467283s ago: executing program 4 (id=1360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1}, 0x38) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 12m25.664296914s ago: executing program 4 (id=1362): r0 = io_uring_setup(0x1532, &(0x7f0000000340)={0x0, 0x3973, 0x10000, 0x2, 0x31f}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000001300)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="f78d6afc270aa9973bb7897689b6f4f89ca38fff48f33148845d99b75af2f66790b0030676742447a5564b59df5b2683463d434c59e44742978334ed8abb1b79c35f3c33009b7347a7bffb381c613d3db5e7d3aa8aeff71875069036d3ea6cd2097023c1de1fb4ad51d4b50d030e86", 0x6f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000600)="5307b096ca413bcf252df193cd6c05eb06cc72f311443c25d50e2c95c0af29", 0x1f}], 0x3}], 0x1, 0x50) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x4, 0x3}, 0x10) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x8000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000440)="baf80c66b88c6aa98766efbafc0c66ed660f3882708d2664f080768c00260f01caba610066ed0f00999fde66b9800000c00f326635008000000f300fc7f00f06ba610066ed", 0x45}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000003c0)="450f01c9f3450f09450f1b680666ba210066edb805000000b91a3100000f01c12664660f388107c4e37d5c24f600c4c1f96cccc7442400f7000000c744240243490000ff1c24c4227bf746b0", 0x4c}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m22.418247933s ago: executing program 4 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0x2, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/212, 0xd4}, {0x0}], 0x2, 0x1a, 0x20f5) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) 12m12.776022218s ago: executing program 4 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r5, 0x1) 11m57.62436291s ago: executing program 37 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r5, 0x1) 5m52.135917717s ago: executing program 8 (id=2019): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c) 5m51.766230414s ago: executing program 8 (id=2020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000340)={&(0x7f0000000300)=""/63, 0x3f}) socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 5m49.872746736s ago: executing program 8 (id=2021): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 5m48.461172052s ago: executing program 8 (id=2023): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="80"], 0x50) 5m46.313631529s ago: executing program 8 (id=2025): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 5m45.980580312s ago: executing program 8 (id=2027): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c) 5m28.142827359s ago: executing program 38 (id=2027): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c) 4m27.659143752s ago: executing program 9 (id=2172): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000006119a0000000000095000000000c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 4m26.889601362s ago: executing program 9 (id=2173): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={"bb924751", 0x4, 0x9, 0x6, 0x7, 0x4ce2, "0ddd85a9772d5bd18f98bce473bb1f", 'Y<\"`', "10a21e0b", "4f7eeff3", ["528e008d3813110b798c61c9", "a195561a811b32abf1b82af8", "208bcf9d9694fc3fd41561fb", "b09c889bb1174f2f67aa4bfe"]}) 4m26.787212204s ago: executing program 9 (id=2174): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 4m26.664205044s ago: executing program 9 (id=2175): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4c04, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) 4m26.617408835s ago: executing program 9 (id=2176): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={r1, r1, 0x0, 0x4, 0x2, 0x6, 0xfffffffd, 0x8001, 0x101, 0x22, 0x70a, 0x1}) 4m26.500431808s ago: executing program 9 (id=2177): dup(0xffffffffffffffff) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x200000000000005, 0x3, 0x2, 0x5, 0x1ff, 0x7], 0x1, 0x0, 0x0, [{}]}, 0x88) 4m11.292951228s ago: executing program 39 (id=2177): dup(0xffffffffffffffff) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x200000000000005, 0x3, 0x2, 0x5, 0x1ff, 0x7], 0x1, 0x0, 0x0, [{}]}, 0x88) 1m49.332833093s ago: executing program 6 (id=2599): add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000240)=""/56, 0x38, 0x0) 1m48.867873295s ago: executing program 6 (id=2602): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1ffffffffffffe, 0x1) syz_emit_ethernet(0x2e, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}, 0x0) 1m48.417231958s ago: executing program 6 (id=2606): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) pwrite64(r0, &(0x7f0000000440)='\x00', 0x1, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m44.403462678s ago: executing program 6 (id=2610): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)='trans=rdma,') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 1m42.113552091s ago: executing program 6 (id=2612): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000b00)=ANY=[@ANYBLOB="401503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000005a000000040000000900000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) unshare(0x6020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c000180380004002000010000004e2000000006ff020000000000000000000000000001000000001400020002000000e000000200000000000000000d000100756470"], 0x60}}, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1100, &(0x7f00000001c0)={0xe, 0x10007c, 0x20000}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m33.953596982s ago: executing program 6 (id=2629): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m17.86264624s ago: executing program 40 (id=2629): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 17.876028176s ago: executing program 1 (id=2733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 17.463765381s ago: executing program 1 (id=2735): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket(0x2, 0x3, 0x64) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012000, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x1, @null, @bpq0, 0x4, 'syz1\x00', @bcast, 0xfffffffd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @null, @bpq0, 0x3, 'syz0\x00', @bcast, 0xffffffff, 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default]}) 17.224022382s ago: executing program 3 (id=2737): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006200)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000100000022bbd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="211000005400a90f880b1c0158e2a7d031b3d89c030000000a00010005a2aaaaaa0c5cf16e8c8d8659d80000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 14.770978408s ago: executing program 1 (id=2741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000c80)='io\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) syz_fuse_handle_req(r2, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.76308539s ago: executing program 3 (id=2742): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xffffff7e) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x105) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r2, 0x1, 0x460c, 0x9) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000a40)={&(0x7f0000000380)={0x50, 0xffffffffffffffda, 0x1ad8, {0x7, 0x2b, 0x604, 0x1454e40c, 0x807, 0x9, 0x2, 0x8, 0x0, 0x0, 0x100, 0x7fffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.234346215s ago: executing program 3 (id=2743): socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r7, 0x0, 0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa801, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000040)={0x4a}) 12.678134137s ago: executing program 1 (id=2744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 12.629284978s ago: executing program 3 (id=2745): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000580)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000002c0)) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11.994392276s ago: executing program 1 (id=2747): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xfff) r1 = syz_io_uring_setup(0xbd9, 0x0, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.900767234s ago: executing program 5 (id=2748): socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r7, 0x0, 0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x4a}) 11.368773737s ago: executing program 2 (id=2749): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x43, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 9.943970807s ago: executing program 5 (id=2750): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x43, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) close_range(r3, 0xffffffffffffffff, 0x0) 9.297682295s ago: executing program 5 (id=2751): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) socket$igmp(0x2, 0x3, 0x2) 9.182525655s ago: executing program 2 (id=2752): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 7.790995629s ago: executing program 5 (id=2753): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3e0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) 6.566210993s ago: executing program 5 (id=2754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) kcmp(r1, r2, 0x6, r5, r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4.772808734s ago: executing program 1 (id=2755): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000480)) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x3c, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) 4.218519481s ago: executing program 5 (id=2756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 3.94259273s ago: executing program 2 (id=2757): connect$rose(0xffffffffffffffff, 0x0, 0x0) 3.664343207s ago: executing program 2 (id=2758): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x101, 0x259ab454}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]}) 2.184423506s ago: executing program 2 (id=2759): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x4ed, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x8000, 0x400253}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'geneve0\x00', {0x20000001}, 0x4}) syz_open_procfs$userns(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000340)='./file0\x00', 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="2c0000002c0b0000000000009da04f27e67eaa494856d8e361aa50bb6323", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 427.417981ms ago: executing program 3 (id=2760): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 280.054206ms ago: executing program 2 (id=2761): socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) timer_create(0x2, 0x0, &(0x7f00000001c0)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x4a}) 0s ago: executing program 3 (id=2762): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x43, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ] veth1_macvtap: entered promiscuous mode [ 1495.799314][T14692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.833012][T14692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.853030][ T1266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.853257][ T1266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.853314][ T1266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.853353][ T1266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.406827][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.406851][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.764357][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.764380][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.085592][ T7930] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1497.251216][ T7930] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1497.251250][ T7930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.294185][ T7930] usb 4-1: config 0 descriptor?? [ 1497.301150][ T7930] cp210x 4-1:0.0: cp210x converter detected [ 1498.769386][ T7930] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1499.987110][T14961] tipc: Enabling of bearer rejected, failed to enable media [ 1501.318782][ T31] usb 4-1: USB disconnect, device number 2 [ 1501.347290][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1501.348046][ T31] cp210x 4-1:0.0: device disconnected [ 1505.048159][ T7930] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1505.218859][ T7930] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1505.218892][ T7930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.290307][ T7930] usb 9-1: config 0 descriptor?? [ 1505.308227][ T7930] cp210x 9-1:0.0: cp210x converter detected [ 1505.558437][ T7930] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1506.764586][ T5873] usb 9-1: USB disconnect, device number 2 [ 1506.782552][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1506.783319][ T5873] cp210x 9-1:0.0: device disconnected [ 1508.758378][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 1510.258412][ T5873] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1510.306205][ T5880] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1510.467275][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 1510.857958][ T5880] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1510.857982][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.890132][ T5880] usb 2-1: config 0 descriptor?? [ 1510.894633][ T5880] cp210x 2-1:0.0: cp210x converter detected [ 1510.924594][ T5873] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1510.924631][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1510.924657][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1510.924692][ T5873] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1510.924739][ T5873] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1510.924763][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.228863][ T5880] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1511.356272][ T5873] usb 4-1: GET_CAPABILITIES returned 0 [ 1511.356322][ T5873] usbtmc 4-1:16.0: can't read capabilities [ 1511.616374][T15079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.623817][T15079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.647388][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.647478][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.647553][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.648059][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.648137][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.648212][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.649130][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.649184][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.649231][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.649552][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.649619][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.649666][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.652605][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.652688][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.652764][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1511.674887][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1512.030186][ T5873] usb 2-1: USB disconnect, device number 41 [ 1512.479312][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1512.480111][ T5873] cp210x 2-1:0.0: device disconnected [ 1515.856177][T13907] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1516.171017][T13907] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.175110][T13907] usb 9-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1516.175606][T13907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.570321][T13907] usb 9-1: config 0 descriptor?? [ 1517.899865][ T5873] usb 4-1: USB disconnect, device number 3 [ 1518.613808][T13907] usb 9-1: string descriptor 0 read error: -71 [ 1518.631549][T13907] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1518.645506][T13907] usb 9-1: USB disconnect, device number 3 [ 1521.076201][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1521.698132][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.698200][ T10] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1521.698218][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.728171][ T10] usb 2-1: config 0 descriptor?? [ 1522.124576][ T8503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1522.147247][T13707] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1522.149913][ T8503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1522.153776][ T8503] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1522.161527][ T8503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1522.164701][ T8503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1522.299447][T13707] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1522.299480][T13707] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.424859][T13707] usb 10-1: config 0 descriptor?? [ 1522.711142][T13707] cp210x 10-1:0.0: cp210x converter detected [ 1523.128053][ T10] usb 2-1: string descriptor 0 read error: -71 [ 1523.153354][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1523.181294][ T10] usb 2-1: USB disconnect, device number 42 [ 1523.498792][T13707] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1524.253318][ T10] usb 10-1: USB disconnect, device number 6 [ 1524.287224][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1524.291778][ T10] cp210x 10-1:0.0: device disconnected [ 1524.448127][ T8503] Bluetooth: hci1: command tx timeout [ 1525.952780][T15196] chnl_net:caif_netlink_parms(): no params data found [ 1527.710588][ T8503] Bluetooth: hci1: command tx timeout [ 1528.192234][T15231] tipc: Started in network mode [ 1528.192267][T15231] tipc: Node identity 7f000001, cluster identity 4711 [ 1528.193449][T15231] tipc: Enabled bearer , priority 10 [ 1528.226200][T13907] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1528.486453][T13907] usb 10-1: Using ep0 maxpacket: 8 [ 1528.516826][T13907] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1528.516857][T13907] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1528.516883][T13907] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1528.516908][T13907] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1528.516950][T13907] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1528.516974][T13907] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.692840][T15196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.693084][T15196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.693295][T15196] bridge_slave_0: entered allmulticast mode [ 1528.736512][T15196] bridge_slave_0: entered promiscuous mode [ 1528.770628][T15196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.770730][T15196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.823890][T13907] usb 10-1: usb_control_msg returned -71 [ 1528.823940][T13907] usbtmc 10-1:16.0: can't read capabilities [ 1528.866592][T13907] usb 10-1: USB disconnect, device number 7 [ 1528.882302][T15196] bridge_slave_1: entered allmulticast mode [ 1528.930941][T15196] bridge_slave_1: entered promiscuous mode [ 1528.986623][T15244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1529.996088][ T8503] Bluetooth: hci1: command tx timeout [ 1530.301503][ T5873] tipc: Node number set to 2130706433 [ 1530.338623][T15196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1530.358255][T15196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1532.100114][ T8503] Bluetooth: hci1: command tx timeout [ 1532.435027][T15196] team0: Port device team_slave_0 added [ 1532.482624][T15196] team0: Port device team_slave_1 added [ 1532.751433][ T7966] bridge0: port 3(syz_tun) entered disabled state [ 1532.920365][T15262] kvm: user requested TSC rate below hardware speed [ 1534.818051][ T7966] syz_tun (unregistering): left allmulticast mode [ 1534.818073][ T7966] syz_tun (unregistering): left promiscuous mode [ 1534.819748][ T7966] bridge0: port 3(syz_tun) entered disabled state [ 1534.986977][T13907] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1535.590661][T13907] usb 2-1: Using ep0 maxpacket: 8 [ 1535.637987][T13907] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1535.638009][T13907] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1535.638027][T13907] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1535.638044][T13907] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1535.638076][T13907] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1535.638093][T13907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.779284][T15196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.779304][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.779688][T15196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.224245][T15196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.224265][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.224295][T15196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.993035][T15275] loop8: detected capacity change from 0 to 8 [ 1537.008014][T15275] Dev loop8: unable to read RDB block 8 [ 1537.008062][T15275] loop8: unable to read partition table [ 1537.008523][T15275] loop8: partition table beyond EOD, truncated [ 1537.008545][T15275] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1537.359973][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.466213][ T7930] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1537.503092][ T31] IPVS: starting estimator thread 0... [ 1537.586246][T15280] IPVS: using max 7 ests per chain, 16800 per kthread [ 1537.629550][ T7930] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1537.629581][ T7930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.677760][ T7930] usb 10-1: config 0 descriptor?? [ 1537.699836][ T7930] cp210x 10-1:0.0: cp210x converter detected [ 1537.744146][T15196] hsr_slave_0: entered promiscuous mode [ 1537.754060][T15196] hsr_slave_1: entered promiscuous mode [ 1537.764210][T15196] debugfs: 'hsr0' already exists in 'hsr' [ 1537.764238][T15196] Cannot create hsr debugfs directory [ 1537.926790][ T7930] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1539.260770][T15284] netlink: 'syz.8.2020': attribute type 4 has an invalid length. [ 1539.260842][T15284] netlink: 1601 bytes leftover after parsing attributes in process `syz.8.2020'. [ 1539.423014][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.747447][T13907] usb 2-1: can't set config #16, error -110 [ 1540.830010][ T7930] usb 10-1: USB disconnect, device number 8 [ 1540.938653][ T7930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1540.939481][ T7930] cp210x 10-1:0.0: device disconnected [ 1542.949258][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.019469][T15289] tipc: Enabling of bearer rejected, already enabled [ 1543.442130][ T7930] usb 2-1: USB disconnect, device number 43 [ 1543.590280][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.958411][T13122] Bluetooth: hci2: command 0x0406 tx timeout [ 1545.290060][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2029'. [ 1546.306210][T15324] tipc: Enabling of bearer rejected, already enabled [ 1546.798448][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.798522][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.269604][ T40] bridge_slave_1: left allmulticast mode [ 1547.269637][ T40] bridge_slave_1: left promiscuous mode [ 1547.269899][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.366208][T13919] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1547.421096][ T40] bridge_slave_0: left allmulticast mode [ 1547.421117][ T40] bridge_slave_0: left promiscuous mode [ 1547.421313][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.534864][T13919] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1547.534904][T13919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.573076][T13919] usb 2-1: config 0 descriptor?? [ 1547.679043][T13919] cp210x 2-1:0.0: cp210x converter detected [ 1547.868052][T13919] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1549.351727][T15342] netlink: 'syz.9.2024': attribute type 4 has an invalid length. [ 1549.351753][T15342] netlink: 1601 bytes leftover after parsing attributes in process `syz.9.2024'. [ 1549.986695][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.988672][T13919] usb 2-1: USB disconnect, device number 44 [ 1549.993217][T13919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1549.993989][T13919] cp210x 2-1:0.0: device disconnected [ 1551.136678][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.163178][ T40] bond0 (unregistering): Released all slaves [ 1551.445445][ T40] tipc: Disabling bearer [ 1551.445947][ T40] tipc: Left network mode [ 1552.556664][T15358] netlink: 'syz.9.2037': attribute type 4 has an invalid length. [ 1552.556689][T15358] netlink: 1601 bytes leftover after parsing attributes in process `syz.9.2037'. [ 1555.111890][T15368] netlink: 'syz.9.2040': attribute type 4 has an invalid length. [ 1555.111916][T15368] netlink: 1601 bytes leftover after parsing attributes in process `syz.9.2040'. [ 1556.276176][T15376] netlink: 'syz.1.2041': attribute type 4 has an invalid length. [ 1556.276200][T15376] netlink: 1601 bytes leftover after parsing attributes in process `syz.1.2041'. [ 1560.790181][T15388] netlink: 'syz.9.2044': attribute type 4 has an invalid length. [ 1560.790209][T15388] netlink: 1601 bytes leftover after parsing attributes in process `syz.9.2044'. [ 1561.518485][T15399] pim6reg99999999: entered allmulticast mode [ 1562.200766][T13707] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1562.200807][T13707] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1562.200846][T13707] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1562.200875][T13707] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1562.200903][T13707] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1562.200931][T13707] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1562.200959][T13707] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1562.200988][T13707] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1562.201016][T13707] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1562.201044][T13707] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1562.320108][T15196] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1562.322435][T13707] hid-generic 00A0:0006:0003.000C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1563.399997][T13122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1563.411888][T13122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1563.415076][T13122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1563.428607][T13122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1563.429926][T13122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1566.509583][T13122] Bluetooth: hci3: command tx timeout [ 1566.626276][T15196] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1566.783139][T15427] fido_id[15427]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1567.293427][T15196] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1567.347325][T15438] 9pnet_virtio: no channels available for device syz [ 1567.526916][T15438] pim6reg99999999: entered allmulticast mode [ 1567.527692][T15196] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1569.582229][T13122] Bluetooth: hci3: command tx timeout [ 1569.865623][T15458] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1569.968884][T15451] kthread_run failed with err -4 [ 1570.239873][T15463] hub 8-0:1.0: USB hub found [ 1570.616366][T15463] hub 8-0:1.0: 1 port detected [ 1571.629343][ T8503] Bluetooth: hci3: command tx timeout [ 1573.707441][ T8503] Bluetooth: hci3: command tx timeout [ 1573.778255][T15482] netlink: 'syz.3.2061': attribute type 11 has an invalid length. [ 1573.778278][T15482] netlink: 'syz.3.2061': attribute type 23 has an invalid length. [ 1573.778292][T15482] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2061'. [ 1576.566157][ T40] hsr_slave_0: left promiscuous mode [ 1576.587188][ T40] hsr_slave_1: left promiscuous mode [ 1576.588422][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1576.617099][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1576.617129][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1576.721579][ T40] veth1_macvtap: left promiscuous mode [ 1576.721655][ T40] veth0_macvtap: left promiscuous mode [ 1576.721829][ T40] veth1_vlan: left promiscuous mode [ 1576.721951][ T40] veth0_vlan: left promiscuous mode [ 1578.231141][T15544] hub 8-0:1.0: USB hub found [ 1578.235384][T15544] hub 8-0:1.0: 1 port detected [ 1580.494104][T13122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1580.499348][T13122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1580.500710][T13122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1580.502290][T13122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1580.503397][T13122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1581.528890][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1581.771953][T15568] hub 8-0:1.0: USB hub found [ 1581.775742][T15568] hub 8-0:1.0: 1 port detected [ 1582.594819][T13122] Bluetooth: hci4: command tx timeout [ 1582.628482][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1582.906117][T15572] hub 8-0:1.0: USB hub found [ 1582.909172][T15572] hub 8-0:1.0: 1 port detected [ 1583.892741][ T40] vcan0 (unregistering): left allmulticast mode [ 1584.666454][T13122] Bluetooth: hci4: command tx timeout [ 1585.402514][T15415] chnl_net:caif_netlink_parms(): no params data found [ 1586.823110][T13122] Bluetooth: hci4: command tx timeout [ 1588.466233][T13707] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1588.657723][T13707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.657786][T13707] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1588.657804][T13707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.671538][T13707] usb 4-1: config 0 descriptor?? [ 1588.826437][T13122] Bluetooth: hci4: command tx timeout [ 1588.899124][T15415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.899481][T15415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.900077][T15415] bridge_slave_0: entered allmulticast mode [ 1588.929080][T15415] bridge_slave_0: entered promiscuous mode [ 1589.104800][T15415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.105093][T15415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.105338][T15415] bridge_slave_1: entered allmulticast mode [ 1589.130892][T15415] bridge_slave_1: entered promiscuous mode [ 1589.902381][T15415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.001844][T15415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1590.127008][T15557] chnl_net:caif_netlink_parms(): no params data found [ 1590.505278][T15637] netlink: 'syz.9.2092': attribute type 11 has an invalid length. [ 1590.505304][T15637] netlink: 'syz.9.2092': attribute type 23 has an invalid length. [ 1590.505590][T15637] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2092'. [ 1592.380292][T15415] team0: Port device team_slave_0 added [ 1592.788094][T15653] loop8: detected capacity change from 0 to 8 [ 1592.808830][T15392] Dev loop8: unable to read RDB block 8 [ 1592.808902][T15392] loop8: unable to read partition table [ 1592.809335][T15392] loop8: partition table beyond EOD, truncated [ 1592.847513][T15653] Dev loop8: unable to read RDB block 8 [ 1592.847561][T15653] loop8: unable to read partition table [ 1592.847799][T15653] loop8: partition table beyond EOD, truncated [ 1592.847828][T15653] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1593.326142][T13707] usb 4-1: string descriptor 0 read error: -71 [ 1593.331136][T13707] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1593.368411][T15415] team0: Port device team_slave_1 added [ 1594.328846][T13707] usb 4-1: USB disconnect, device number 4 [ 1594.576148][ T8503] Bluetooth: hci5: command 0x0406 tx timeout [ 1595.939518][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2099'. [ 1602.027633][T15415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1602.027654][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1602.027683][T15415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.084414][T15415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.084434][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.084463][T15415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.179151][T15698] netlink: 'syz.9.2103': attribute type 4 has an invalid length. [ 1603.179177][T15698] netlink: 1601 bytes leftover after parsing attributes in process `syz.9.2103'. [ 1604.832989][T15721] kvm: user requested TSC rate below hardware speed [ 1604.980067][T15724] 9pnet_virtio: no channels available for device syz [ 1605.001200][T15557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.001318][T15557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.001473][T15557] bridge_slave_0: entered allmulticast mode [ 1605.003516][T15557] bridge_slave_0: entered promiscuous mode [ 1605.216261][T13919] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1605.307881][T15557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.308011][T15557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.308211][T15557] bridge_slave_1: entered allmulticast mode [ 1605.314253][T15557] bridge_slave_1: entered promiscuous mode [ 1605.386161][T13919] usb 2-1: Using ep0 maxpacket: 8 [ 1605.417791][T13919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1605.417813][T13919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1605.417831][T13919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1605.417848][T13919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1605.417879][T13919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1605.417895][T13919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.210105][T15415] hsr_slave_0: entered promiscuous mode [ 1606.211491][T15415] hsr_slave_1: entered promiscuous mode [ 1606.221684][T13919] usb 2-1: GET_CAPABILITIES returned 0 [ 1606.221735][T13919] usbtmc 2-1:16.0: can't read capabilities [ 1606.445310][T15557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.486960][T15557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.681827][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.682834][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.683670][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.684621][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.685777][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.686967][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.687854][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.688820][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.689942][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.691102][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.695359][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.696431][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.697628][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.698594][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.699424][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1606.700412][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1608.237550][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.237625][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.978587][T15557] team0: Port device team_slave_0 added [ 1609.643010][T15557] team0: Port device team_slave_1 added [ 1609.677505][T13707] usb 2-1: USB disconnect, device number 45 [ 1610.018361][T15557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.018381][T15557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1610.019619][T15557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.435189][T15557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.435492][T15557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1610.471893][T15557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.957037][ T40] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.338187][T15776] random: crng reseeded on system resumption [ 1612.578993][ T40] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.635231][T15557] hsr_slave_0: entered promiscuous mode [ 1612.644435][T15557] hsr_slave_1: entered promiscuous mode [ 1612.645338][T15557] debugfs: 'hsr0' already exists in 'hsr' [ 1612.645357][T15557] Cannot create hsr debugfs directory [ 1612.755210][T13122] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1612.779621][T13122] Bluetooth: Unexpected continuation frame (len 4) [ 1612.837564][T13707] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1612.909714][ T40] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.997279][T13707] usb 4-1: Using ep0 maxpacket: 32 [ 1612.999587][T13707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1612.999622][T13707] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1612.999641][T13707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1613.002154][T13707] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1613.002181][T13707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.002200][T13707] usb 4-1: Product: syz [ 1613.002219][T13707] usb 4-1: Manufacturer: syz [ 1613.002230][T13707] usb 4-1: SerialNumber: syz [ 1613.020118][T13707] usb 4-1: config 0 descriptor?? [ 1613.092904][T13707] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 1613.443895][T13707] usb 4-1: USB disconnect, device number 5 [ 1613.443901][ C1] xpad 4-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 1613.754337][T15795] syzkaller1: entered promiscuous mode [ 1613.754365][T15795] syzkaller1: entered allmulticast mode [ 1613.923001][ T40] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.890643][T15827] 9pnet_virtio: no channels available for device syz [ 1616.187620][T15858] 9pnet_virtio: no channels available for device syz [ 1616.250040][ T40] bridge_slave_1: left allmulticast mode [ 1616.250070][ T40] bridge_slave_1: left promiscuous mode [ 1616.250342][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.360937][ T40] bridge_slave_0: left allmulticast mode [ 1616.360968][ T40] bridge_slave_0: left promiscuous mode [ 1616.361243][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.544620][ T40] bridge_slave_1: left allmulticast mode [ 1616.544651][ T40] bridge_slave_1: left promiscuous mode [ 1616.544892][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.631643][ T40] bridge_slave_0: left allmulticast mode [ 1616.631674][ T40] bridge_slave_0: left promiscuous mode [ 1616.631928][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.047352][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1618.167511][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1618.262757][ T40] bond0 (unregistering): Released all slaves [ 1618.675328][T15891] ieee802154 phy0 wpan0: encryption failed: -22 [ 1619.157861][T15912] overlayfs: conflicting lowerdir path [ 1619.170826][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1619.256818][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1619.289757][ T40] bond0 (unregistering): Released all slaves [ 1619.577207][T15909] syzkaller0: entered promiscuous mode [ 1619.577237][T15909] syzkaller0: entered allmulticast mode [ 1619.580968][ T40] tipc: Disabling bearer [ 1619.583282][ T40] tipc: Left network mode [ 1620.034191][T15935] GUP no longer grows the stack in syz.1.2166 (15935): 200000002000-200000005000 (200000001000) [ 1620.034227][T15935] CPU: 0 UID: 0 PID: 15935 Comm: syz.1.2166 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1620.034251][T15935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1620.034266][T15935] Call Trace: [ 1620.034276][T15935] [ 1620.034285][T15935] dump_stack_lvl+0xe8/0x150 [ 1620.034324][T15935] __get_user_pages+0x22b6/0x2800 [ 1620.034364][T15935] ? __gup_longterm_locked+0x306/0x1630 [ 1620.034414][T15935] __gup_longterm_locked+0x3db/0x1630 [ 1620.034449][T15935] ? try_get_folio+0x623/0x650 [ 1620.034497][T15935] gup_fast_fallback+0x1cf1/0x2240 [ 1620.034565][T15935] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1620.034599][T15935] ? is_valid_gup_args+0x11f/0x200 [ 1620.034631][T15935] ? pin_user_pages_fast+0x4d/0xb0 [ 1620.034663][T15935] get_vaddr_frames+0x86/0x210 [ 1620.034690][T15935] vb2_create_framevec+0x58/0xd0 [ 1620.034724][T15935] vb2_vmalloc_get_userptr+0x108/0x450 [ 1620.034748][T15935] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 1620.034773][T15935] __buf_prepare+0xe90/0x4a20 [ 1620.034825][T15935] ? __pfx___buf_prepare+0x10/0x10 [ 1620.034862][T15935] ? is_bpf_text_address+0x26/0x2b0 [ 1620.034896][T15935] ? is_bpf_text_address+0x292/0x2b0 [ 1620.034924][T15935] ? is_bpf_text_address+0x26/0x2b0 [ 1620.034956][T15935] ? kernel_text_address+0xa5/0xe0 [ 1620.034982][T15935] ? __kernel_text_address+0xd/0x30 [ 1620.035006][T15935] ? unwind_get_return_address+0x4d/0x90 [ 1620.035026][T15935] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1620.035056][T15935] ? arch_stack_walk+0xfb/0x150 [ 1620.035089][T15935] ? stack_trace_save+0xa9/0x100 [ 1620.035118][T15935] ? __pfx_stack_trace_save+0x10/0x10 [ 1620.035145][T15935] ? kasan_save_free_info+0x46/0x50 [ 1620.035234][T15935] vb2_core_prepare_buf+0xad/0x2c0 [ 1620.035273][T15935] v4l2_m2m_ioctl_prepare_buf+0x160/0x450 [ 1620.035302][T15935] ? v4l_prepare_buf+0x71/0xd0 [ 1620.035337][T15935] __video_do_ioctl+0x88c/0xc50 [ 1620.035371][T15935] ? __pfx___video_do_ioctl+0x10/0x10 [ 1620.035411][T15935] video_usercopy+0x876/0x14b0 [ 1620.035442][T15935] ? __pfx___video_do_ioctl+0x10/0x10 [ 1620.035468][T15935] ? __pfx_video_usercopy+0x10/0x10 [ 1620.035492][T15935] ? smack_file_ioctl+0x2c2/0x360 [ 1620.035544][T15935] ? __fget_files+0x2a/0x420 [ 1620.035570][T15935] ? __fget_files+0x3a6/0x420 [ 1620.035602][T15935] v4l2_ioctl+0x190/0x1e0 [ 1620.035624][T15935] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1620.035647][T15935] __se_sys_ioctl+0xff/0x170 [ 1620.035683][T15935] do_syscall_64+0x14d/0xf80 [ 1620.035714][T15935] ? trace_irq_disable+0x3b/0x150 [ 1620.035739][T15935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.035764][T15935] ? clear_bhb_loop+0x40/0x90 [ 1620.035793][T15935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.035825][T15935] RIP: 0033:0x7f14cd38c799 [ 1620.035855][T15935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.035875][T15935] RSP: 002b:00007f14cb5de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1620.035900][T15935] RAX: ffffffffffffffda RBX: 00007f14cd605fa0 RCX: 00007f14cd38c799 [ 1620.035916][T15935] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000003 [ 1620.035931][T15935] RBP: 00007f14cd422bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1620.035945][T15935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1620.035959][T15935] R13: 00007f14cd606038 R14: 00007f14cd605fa0 R15: 00007ffd62873838 [ 1620.035994][T15935] [ 1621.811318][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1621.816278][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1621.835370][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1621.857905][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1621.858752][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1623.955006][ T5797] Bluetooth: hci1: command tx timeout [ 1626.029732][ T5797] Bluetooth: hci1: command tx timeout [ 1628.127256][ T5797] Bluetooth: hci1: command tx timeout [ 1630.186180][ T5797] Bluetooth: hci1: command tx timeout [ 1635.706180][ T10] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 1635.860727][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1635.860757][ T10] usb 4-1: config 0 has no interface number 0 [ 1635.860799][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1635.860818][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1635.860849][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1635.860865][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.864645][ T10] usb 4-1: config 0 descriptor?? [ 1635.866866][T16027] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1635.956878][ T10] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1636.140299][T11777] usb 4-1: USB disconnect, device number 6 [ 1636.140402][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1636.289854][ T40] hsr_slave_0: left promiscuous mode [ 1636.327436][ T40] hsr_slave_1: left promiscuous mode [ 1636.328497][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.367333][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1636.546285][ T40] hsr_slave_0: left promiscuous mode [ 1636.566291][ T40] hsr_slave_1: left promiscuous mode [ 1636.567451][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1636.567478][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.623603][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1636.623634][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1636.750359][ T40] veth1_macvtap: left promiscuous mode [ 1636.750436][ T40] veth0_macvtap: left promiscuous mode [ 1636.750606][ T40] veth1_vlan: left promiscuous mode [ 1636.750725][ T40] veth0_vlan: left promiscuous mode [ 1637.242059][T16063] overlayfs: failed to resolve './file1': -2 [ 1637.685584][ T5797] Bluetooth: hci2: unexpected event for opcode 0x040d [ 1638.088454][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1638.143258][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1638.699298][T13122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1638.721308][T13122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1638.722629][T13122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1638.724001][T13122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1638.724822][T13122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1638.926299][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1639.108604][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1639.108641][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1639.108669][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1639.108692][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1639.108737][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1639.108763][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.188052][ T10] usb 4-1: config 0 descriptor?? [ 1639.564005][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1639.616513][ T10] hid_parser_main: 4 callbacks suppressed [ 1639.616532][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1639.616556][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1639.616575][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1639.616595][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1639.616615][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1639.616635][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1639.616655][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1639.616674][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1639.616694][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1639.616713][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1639.623923][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1639.636800][ T10] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1639.928695][ T10] usb 4-1: USB disconnect, device number 7 [ 1640.021998][T16104] fido_id[16104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1640.308301][ T5797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1640.331423][ T5797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1640.346367][ T5797] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1640.350307][ T5797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1640.351479][ T5797] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1640.861811][T13122] Bluetooth: hci3: command tx timeout [ 1641.766072][T15955] chnl_net:caif_netlink_parms(): no params data found [ 1642.436030][T13122] Bluetooth: hci6: command tx timeout [ 1642.908594][T13122] Bluetooth: hci3: command tx timeout [ 1643.246361][T15955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.246489][T15955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.246725][T15955] bridge_slave_0: entered allmulticast mode [ 1643.256149][T15955] bridge_slave_0: entered promiscuous mode [ 1643.377778][T15955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.377913][T15955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.378150][T15955] bridge_slave_1: entered allmulticast mode [ 1643.390054][T15955] bridge_slave_1: entered promiscuous mode [ 1643.762867][T15955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.783168][T15955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.866212][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1643.948705][T15955] team0: Port device team_slave_0 added [ 1643.972180][T16098] chnl_net:caif_netlink_parms(): no params data found [ 1644.005696][T15955] team0: Port device team_slave_1 added [ 1644.028473][ T31] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1644.028539][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1644.028566][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1644.028593][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1644.028621][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1644.028664][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1644.028688][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.035604][ T31] usb 4-1: config 0 descriptor?? [ 1644.066479][T16165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1644.480862][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 1644.480998][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1644.505747][ T31] usb 4-1: USB disconnect, device number 8 [ 1644.506199][T13122] Bluetooth: hci6: command tx timeout [ 1644.876620][T16108] chnl_net:caif_netlink_parms(): no params data found [ 1644.986566][T13122] Bluetooth: hci3: command tx timeout [ 1645.080329][T15955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.080350][T15955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.080389][T15955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.214723][T15955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.214743][T15955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.214771][T15955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.369981][ T40] IPVS: stop unused estimator thread 0... [ 1645.604753][T16098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.605033][T16098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.605236][T16098] bridge_slave_0: entered allmulticast mode [ 1645.651493][T16098] bridge_slave_0: entered promiscuous mode [ 1645.760214][T16098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.760831][T16098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.761069][T16098] bridge_slave_1: entered allmulticast mode [ 1645.763933][T16098] bridge_slave_1: entered promiscuous mode [ 1645.803210][T15955] hsr_slave_0: entered promiscuous mode [ 1645.804612][T15955] hsr_slave_1: entered promiscuous mode [ 1645.805591][T15955] debugfs: 'hsr0' already exists in 'hsr' [ 1645.805629][T15955] Cannot create hsr debugfs directory [ 1646.074294][T16108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.074423][T16108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.074686][T16108] bridge_slave_0: entered allmulticast mode [ 1646.102902][T16108] bridge_slave_0: entered promiscuous mode [ 1646.366176][T13707] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1646.470357][T16098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1646.470764][T16108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.470960][T16108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.471220][T16108] bridge_slave_1: entered allmulticast mode [ 1646.473942][T16108] bridge_slave_1: entered promiscuous mode [ 1646.516244][T13707] usb 4-1: Using ep0 maxpacket: 8 [ 1646.521475][T13707] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1646.521505][T13707] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1646.521538][T13707] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1646.521564][T13707] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1646.521607][T13707] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1646.521631][T13707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.596197][T13122] Bluetooth: hci6: command tx timeout [ 1646.822675][T13707] usb 4-1: usb_control_msg returned -71 [ 1646.822725][T13707] usbtmc 4-1:16.0: can't read capabilities [ 1646.899927][T13707] usb 4-1: USB disconnect, device number 9 [ 1646.994800][T16098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.066989][T13122] Bluetooth: hci3: command tx timeout [ 1647.398106][T16108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.432977][T16098] team0: Port device team_slave_0 added [ 1647.441274][T16108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.707160][ T6323] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.786192][T16098] team0: Port device team_slave_1 added [ 1648.041829][T16108] team0: Port device team_slave_0 added [ 1648.299992][ T6323] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.379084][T16098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.379103][T16098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.379132][T16098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.438842][T16274] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1648.440778][T16274] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1648.441126][T16274] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1648.441521][T16274] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1648.443049][T16274] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1648.443668][T16274] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1648.444068][T16274] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1648.469218][T16274] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1648.497861][T16274] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1648.531236][T16108] team0: Port device team_slave_1 added [ 1648.558035][T16274] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1648.659440][T16098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.659459][T16098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.659500][T16098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.676203][T13122] Bluetooth: hci6: command tx timeout [ 1649.026073][ T6323] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.108734][T16108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1649.108753][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.108781][T16108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1649.203772][T16108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.203791][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.203820][T16108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1649.471455][ T6323] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.607185][T11777] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 1649.637866][T16098] hsr_slave_0: entered promiscuous mode [ 1649.641432][T16098] hsr_slave_1: entered promiscuous mode [ 1649.648696][T16098] debugfs: 'hsr0' already exists in 'hsr' [ 1649.648769][T16098] Cannot create hsr debugfs directory [ 1649.769888][T11777] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1649.769948][T11777] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1649.769977][T11777] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1649.770003][T11777] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1649.770031][T11777] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1649.771751][T11777] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1649.771807][T11777] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1649.771833][T11777] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1649.771857][T11777] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1649.771881][T11777] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1649.807166][T11777] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1649.807222][T11777] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1649.807249][T11777] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1649.807275][T11777] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1649.807306][T11777] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1649.838514][T11777] usb 4-1: string descriptor 0 read error: -22 [ 1649.839753][T11777] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1649.839778][T11777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.999631][T11777] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1650.280420][T16108] hsr_slave_0: entered promiscuous mode [ 1650.291483][T16108] hsr_slave_1: entered promiscuous mode [ 1650.296375][T16108] debugfs: 'hsr0' already exists in 'hsr' [ 1650.296404][T16108] Cannot create hsr debugfs directory [ 1650.381725][ T5779] usb 4-1: USB disconnect, device number 10 [ 1650.432182][T16310] usb 4-1: Couldn't submit interrupt_out_urb -19 [ 1650.972861][T15955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1651.090410][T15955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1651.203165][T15955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1651.348505][T15955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1651.445023][ T6323] bridge_slave_1: left allmulticast mode [ 1651.445052][ T6323] bridge_slave_1: left promiscuous mode [ 1651.445303][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.557665][ T6323] bridge_slave_0: left allmulticast mode [ 1651.557696][ T6323] bridge_slave_0: left promiscuous mode [ 1651.557942][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.650230][ T6323] bridge_slave_1: left allmulticast mode [ 1651.650256][ T6323] bridge_slave_1: left promiscuous mode [ 1651.650476][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.748241][ T6323] bridge_slave_0: left allmulticast mode [ 1651.748270][ T6323] bridge_slave_0: left promiscuous mode [ 1651.748520][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.606542][ T6323] bridge_slave_1: left allmulticast mode [ 1652.606571][ T6323] bridge_slave_1: left promiscuous mode [ 1652.606816][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.658257][ T6323] bridge_slave_0: left allmulticast mode [ 1652.658286][ T6323] bridge_slave_0: left promiscuous mode [ 1652.658535][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.769690][ T6323] bridge_slave_1: left allmulticast mode [ 1652.769712][ T6323] bridge_slave_1: left promiscuous mode [ 1652.769892][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.857845][ T6323] bridge_slave_0: left allmulticast mode [ 1652.857883][ T6323] bridge_slave_0: left promiscuous mode [ 1652.858144][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.944542][ T6323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.996964][ T6323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1654.039639][ T6323] bond0 (unregistering): Released all slaves [ 1654.466891][ T6323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1654.546929][ T6323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1654.568490][ T6323] bond0 (unregistering): Released all slaves [ 1654.736749][ T6323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1654.818895][ T6323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1654.878033][ T6323] bond0 (unregistering): Released all slaves [ 1655.050574][ T6323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1655.126890][ T6323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1655.188036][ T6323] bond0 (unregistering): Released all slaves [ 1661.697552][T16369] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1661.735643][T16369] syzkaller0: entered promiscuous mode [ 1661.735666][T16369] syzkaller0: entered allmulticast mode [ 1661.937753][ T6323] tipc: Disabling bearer [ 1661.937932][ T6323] tipc: Left network mode [ 1662.148949][T13919] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1662.307683][T13919] usb 2-1: Using ep0 maxpacket: 8 [ 1662.325385][T13919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1662.325417][T13919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1662.325443][T13919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1662.325470][T13919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1662.325514][T13919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1662.325538][T13919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.630059][T13919] usb 2-1: GET_CAPABILITIES returned 0 [ 1662.630112][T13919] usbtmc 2-1:16.0: can't read capabilities [ 1662.892411][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.892470][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.892517][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.892563][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.892788][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.892835][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.892881][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.892926][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.893145][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.893191][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.893237][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.893282][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.893518][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.893566][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.893611][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.893657][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1662.895087][ T10] usb 2-1: USB disconnect, device number 46 [ 1664.477034][T15955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.546179][T13907] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1664.706157][T13907] usb 2-1: Using ep0 maxpacket: 8 [ 1664.715438][T13907] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1664.715469][T13907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.739137][T13907] usb 2-1: config 0 descriptor?? [ 1664.751964][T15955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1664.820299][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.820681][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1664.954161][T13907] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1665.181233][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.182768][T13907] usb 2-1: USB disconnect, device number 47 [ 1665.193927][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.662229][T16098] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1665.847751][T16098] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1665.921726][T16098] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1666.018852][T11777] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1666.069122][T16098] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1666.146232][T11777] usb 2-1: device descriptor read/64, error -71 [ 1666.398377][T11777] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1666.438038][T16108] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1666.526124][T11777] usb 2-1: device descriptor read/64, error -71 [ 1666.636572][T11777] usb usb2-port1: attempt power cycle [ 1666.754633][T16108] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1666.855739][T16108] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1666.900930][T16108] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1666.980233][T11777] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1667.002027][T11777] usb 2-1: device descriptor read/8, error -71 [ 1667.199258][ T6323] hsr_slave_0: left promiscuous mode [ 1667.236239][T11777] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1667.237405][ T6323] hsr_slave_1: left promiscuous mode [ 1667.238443][ T6323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1667.238468][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1667.267378][T11777] usb 2-1: device descriptor read/8, error -71 [ 1667.297860][ T37] audit: type=1326 audit(2000000726.560:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16498 comm="syz.3.2283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf150c799 code=0x0 [ 1667.331745][ T6323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1667.331774][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1667.378881][T11777] usb usb2-port1: unable to enumerate USB device [ 1667.536166][ T6323] hsr_slave_0: left promiscuous mode [ 1667.581805][ T6323] hsr_slave_1: left promiscuous mode [ 1667.582864][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1667.617338][ T6323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1667.617368][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1667.796336][ T6323] hsr_slave_0: left promiscuous mode [ 1667.838370][ T6323] hsr_slave_1: left promiscuous mode [ 1667.839270][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1667.887054][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1668.026194][ T6323] hsr_slave_0: left promiscuous mode [ 1668.046227][ T6323] hsr_slave_1: left promiscuous mode [ 1668.047020][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1668.098484][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1668.211708][ T6323] veth1_macvtap: left promiscuous mode [ 1668.211820][ T6323] veth0_macvtap: left promiscuous mode [ 1668.212090][ T6323] veth1_vlan: left promiscuous mode [ 1668.212268][ T6323] veth0_vlan: left promiscuous mode [ 1668.356363][ T6323] veth1_macvtap: left promiscuous mode [ 1668.356437][ T6323] veth0_macvtap: left promiscuous mode [ 1668.356615][ T6323] veth1_vlan: left promiscuous mode [ 1668.356744][ T6323] veth0_vlan: left promiscuous mode [ 1668.436149][T11777] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1668.598098][T11777] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1668.598166][T11777] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1668.598183][T11777] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1668.598212][T11777] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1668.598229][T11777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.605669][T11777] usb 4-1: config 0 descriptor?? [ 1668.672773][T11777] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1669.554344][T16515] overlay: Unknown parameter '/' [ 1670.536220][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.536324][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.689581][ T6323] pim6reg99999999 (unregistering): left allmulticast mode [ 1671.357796][ T6323] team0 (unregistering): Port device team_slave_1 removed [ 1671.422953][ T6323] team0 (unregistering): Port device team_slave_0 removed [ 1671.738580][T11777] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1671.886283][T11777] usb 2-1: Using ep0 maxpacket: 32 [ 1671.888472][T11777] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1671.893571][T11777] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1671.893602][T11777] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1671.893617][T11777] usb 2-1: Product: syz [ 1671.893628][T11777] usb 2-1: Manufacturer: syz [ 1671.893639][T11777] usb 2-1: SerialNumber: syz [ 1671.959408][T11777] usb 2-1: config 0 descriptor?? [ 1671.966196][T16527] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1671.979598][ T5779] usb 4-1: USB disconnect, device number 11 [ 1672.113341][T16529] binder: BINDER_SET_CONTEXT_MGR already set [ 1672.113358][T16529] binder: 16528:16529 ioctl 4018620d 200000004a80 returned -16 [ 1672.283267][ T37] audit: type=1326 audit(2000000731.550:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16530 comm="syz.3.2291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf150c799 code=0x0 [ 1672.398650][ T6323] team_slave_1 (unregistering): left allmulticast mode [ 1672.437105][ T6323] team0 (unregistering): Port device team_slave_1 removed [ 1672.460917][ T6323] team_slave_0 (unregistering): left allmulticast mode [ 1672.502331][ T6323] team0 (unregistering): Port device team_slave_0 removed [ 1672.717186][ T6323] vcan0 (unregistering): left allmulticast mode [ 1673.308313][ T6323] team0 (unregistering): Port device team_slave_1 removed [ 1673.377350][ T6323] team0 (unregistering): Port device team_slave_0 removed [ 1673.477568][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1673.616382][ T31] usb 4-1: device descriptor read/64, error -71 [ 1673.870397][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1674.006321][ T31] usb 4-1: device descriptor read/64, error -71 [ 1674.023311][ T6323] team0 (unregistering): Port device team_slave_1 removed [ 1674.088553][ T6323] team0 (unregistering): Port device team_slave_0 removed [ 1674.116538][ T31] usb usb4-port1: attempt power cycle [ 1674.456267][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1674.481251][ T31] usb 4-1: device descriptor read/8, error -71 [ 1674.597615][ T10] usb 2-1: USB disconnect, device number 52 [ 1674.613352][T15955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.716075][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1674.736858][ T31] usb 4-1: device descriptor read/8, error -71 [ 1674.763535][T16544] overlayfs: missing 'lowerdir' [ 1674.799098][T16098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.858757][ T31] usb usb4-port1: unable to enumerate USB device [ 1674.944861][T16098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1674.995459][ T9478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.995604][ T9478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1675.054790][T15955] veth0_vlan: entered promiscuous mode [ 1675.071466][T10261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.071569][T10261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1675.117440][T16108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.160287][T15955] veth1_vlan: entered promiscuous mode [ 1675.275169][T16108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1675.364930][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.373677][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1675.469093][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.469246][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1675.605677][T15955] veth0_macvtap: entered promiscuous mode [ 1675.674280][T15955] veth1_macvtap: entered promiscuous mode [ 1675.872298][T15955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1675.927973][ T37] audit: type=1326 audit(2000000735.200:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16567 comm="syz.1.2299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14cd38c799 code=0x0 [ 1675.928121][T15955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.011325][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.037580][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.069985][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.071877][ T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.030007][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.030032][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.139674][T16098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1677.333180][T16588] overlayfs: missing 'lowerdir' [ 1677.355397][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.355418][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.513985][T16108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1678.966144][T13907] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1679.096704][T13907] usb 4-1: device descriptor read/64, error -71 [ 1679.366057][T13907] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1679.506101][T13907] usb 4-1: device descriptor read/64, error -71 [ 1679.617859][T13907] usb usb4-port1: attempt power cycle [ 1679.720496][T16108] veth0_vlan: entered promiscuous mode [ 1679.925668][T16108] veth1_vlan: entered promiscuous mode [ 1680.012498][T16098] veth0_vlan: entered promiscuous mode [ 1680.040679][T16098] veth1_vlan: entered promiscuous mode [ 1680.096039][T13907] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1680.119280][T13907] usb 4-1: device descriptor read/8, error -71 [ 1680.143330][T16108] veth0_macvtap: entered promiscuous mode [ 1680.171229][T16108] veth1_macvtap: entered promiscuous mode [ 1680.230773][T16098] veth0_macvtap: entered promiscuous mode [ 1680.249307][T16098] veth1_macvtap: entered promiscuous mode [ 1680.265215][T16108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1680.287406][T16108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1680.372505][T15470] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.387211][T15470] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.389625][T15470] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.407362][T13907] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1680.408391][T15470] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.434666][T13907] usb 4-1: device descriptor read/8, error -71 [ 1680.486238][T16098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1680.546448][T13907] usb usb4-port1: unable to enumerate USB device [ 1680.621267][T16098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1680.734194][ T37] audit: type=1326 audit(2000000739.980:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16636 comm="syz.2.2309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84acb0c799 code=0x0 [ 1680.770740][ T69] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.807062][ T69] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.810048][ T69] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.847904][ T69] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.260922][ T6797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.260946][ T6797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.364017][ T6323] IPVS: stop unused estimator thread 0... [ 1681.692433][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.692455][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.858770][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.858794][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.058452][T16653] overlayfs: missing 'lowerdir' [ 1682.081977][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.081999][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.569124][T16686] netlink: 'syz.6.2198': attribute type 30 has an invalid length. [ 1685.676114][T11777] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1685.790913][T16686] bond1: option arp_missed_max: invalid value (0) [ 1685.790939][T16686] bond1: option arp_missed_max: allowed values 1 - 255 [ 1685.806215][T11777] usb 4-1: device descriptor read/64, error -71 [ 1685.862988][T16686] bond1 (unregistering): Released all slaves [ 1686.016089][T13919] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1686.056109][T11777] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1686.146486][T13919] usb 2-1: device descriptor read/64, error -71 [ 1686.197724][T11777] usb 4-1: device descriptor read/64, error -71 [ 1686.439520][T11777] usb usb4-port1: attempt power cycle [ 1686.646848][T13919] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1686.776072][T13919] usb 2-1: device descriptor read/64, error -71 [ 1686.912041][T11777] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1686.932544][T13919] usb usb2-port1: attempt power cycle [ 1686.947242][T11777] usb 4-1: device descriptor read/8, error -71 [ 1687.355196][T13919] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1687.366890][T13919] usb 2-1: device descriptor read/8, error -71 [ 1688.488400][T11777] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1688.629215][T13919] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1688.652710][T13919] usb 2-1: device descriptor read/8, error -71 [ 1688.709654][T11777] usb 4-1: device descriptor read/8, error -71 [ 1688.726573][T16713] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1688.726596][T16713] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1688.726633][T16713] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1688.769699][T13919] usb usb2-port1: unable to enumerate USB device [ 1688.816632][T11777] usb usb4-port1: unable to enumerate USB device [ 1690.169967][T16732] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2330'. [ 1690.390565][ T5779] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1690.552880][ T5779] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.552917][ T5779] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.552942][ T5779] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1690.552985][ T5779] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1690.553009][ T5779] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.622003][ T5779] usb 7-1: config 0 descriptor?? [ 1691.268879][T16753] tipc: Enabling of bearer rejected, already enabled [ 1691.980941][T16756] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1691.980973][T16756] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1691.981022][T16756] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1692.070064][ T5779] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1692.100277][ T7930] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1692.276899][ T7930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.276958][ T7930] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1692.276984][ T7930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.369504][ T7930] usb 2-1: config 0 descriptor?? [ 1692.818934][ T5779] usb 7-1: USB disconnect, device number 2 [ 1692.987661][T16782] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1693.129338][T16783] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2345'. [ 1693.640372][T16794] fuse: Bad value for 'fd' [ 1693.712175][ T7930] usb 2-1: string descriptor 0 read error: -71 [ 1693.728735][ T7930] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1693.741133][ T7930] usb 2-1: USB disconnect, device number 57 [ 1693.842061][T16799] 9pnet_virtio: no channels available for device syz [ 1694.109736][T16799] pim6reg: entered allmulticast mode [ 1696.124795][ T37] audit: type=1326 audit(2000000755.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16827 comm="syz.6.2359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f780004c799 code=0x0 [ 1696.146086][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1696.276133][ T31] usb 3-1: device descriptor read/64, error -71 [ 1696.380960][T16837] fuse: Bad value for 'fd' [ 1696.495481][T16841] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1696.517268][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1696.666139][ T31] usb 3-1: device descriptor read/64, error -71 [ 1696.776559][ T31] usb usb3-port1: attempt power cycle [ 1697.376113][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1697.396825][ T31] usb 3-1: device descriptor read/8, error -71 [ 1697.639538][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1697.660505][ T31] usb 3-1: device descriptor read/8, error -71 [ 1697.766562][ T31] usb usb3-port1: unable to enumerate USB device [ 1698.969361][T16871] 9pnet_virtio: no channels available for device syz [ 1699.070355][T16871] pim6reg: entered allmulticast mode [ 1699.596124][ T37] audit: type=1326 audit(2000000758.810:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16884 comm="syz.1.2377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14cd38c799 code=0x0 [ 1699.616110][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1699.773543][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.773582][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.773607][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1699.773651][ T31] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1699.773747][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.831689][T16896] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1699.964227][T16899] tipc: Started in network mode [ 1699.964391][T16899] tipc: Node identity 7f000001, cluster identity 4711 [ 1700.017640][T16899] tipc: Enabled bearer , priority 10 [ 1700.648890][ T31] usb 4-1: config 0 descriptor?? [ 1701.067408][T11777] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1701.116059][ T5779] tipc: Node number set to 2130706433 [ 1701.898216][T16910] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1702.940718][T11777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.940815][T11777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1702.940843][T11777] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1702.940888][T11777] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1702.940969][T11777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.087340][T11777] usb 6-1: config 0 descriptor?? [ 1703.095869][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 1703.096123][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1703.124177][ T31] usb 4-1: USB disconnect, device number 24 [ 1703.580929][T11777] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1705.987195][T11777] usb 6-1: USB disconnect, device number 36 [ 1707.826055][T13707] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1707.978656][T13707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.978692][T13707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1707.978717][T13707] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1707.978761][T13707] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1707.978787][T13707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.054456][T13707] usb 6-1: config 0 descriptor?? [ 1708.691717][T13707] usbhid 6-1:0.0: can't add hid device: -71 [ 1708.691842][T13707] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1708.753006][T13707] usb 6-1: USB disconnect, device number 37 [ 1709.544389][T16982] fuse: Bad value for 'fd' [ 1710.066625][T13919] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1712.236090][T13919] usb 3-1: device descriptor read/64, error -71 [ 1713.286964][T13919] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1713.809284][T17021] fuse: Bad value for 'fd' [ 1714.086129][T16913] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1714.889324][T16913] usb 2-1: Using ep0 maxpacket: 32 [ 1714.892662][T16913] usb 2-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 1714.892718][T16913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1714.892749][T16913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1714.938641][T16913] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1714.938675][T16913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.938698][T16913] usb 2-1: Product: syz [ 1714.938714][T16913] usb 2-1: Manufacturer: syz [ 1714.938730][T16913] usb 2-1: SerialNumber: syz [ 1715.060860][T16913] usb 2-1: config 0 descriptor?? [ 1715.495228][T16913] usb 2-1: USB disconnect, device number 58 [ 1715.628832][T17041] tipc: Started in network mode [ 1715.629072][T17041] tipc: Node identity 7f000001, cluster identity 4711 [ 1715.655054][T17041] tipc: Enabled bearer , priority 10 [ 1716.776072][T13907] tipc: Node number set to 2130706433 [ 1716.908322][T17057] fuse: Bad value for 'fd' [ 1716.908940][T17060] 9pnet_virtio: no channels available for device syz [ 1716.951720][T17060] pim6reg99999999: entered allmulticast mode [ 1717.056129][ T7930] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1717.206063][ T7930] usb 7-1: device descriptor read/64, error -71 [ 1717.586067][ T7930] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1717.716025][ T7930] usb 7-1: device descriptor read/64, error -71 [ 1717.743672][T17075] overlayfs: conflicting lowerdir path [ 1717.826363][ T7930] usb usb7-port1: attempt power cycle [ 1718.046628][T17080] overlayfs: missing 'lowerdir' [ 1718.896059][ T7930] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1718.927159][ T7930] usb 7-1: device descriptor read/8, error -71 [ 1719.237968][ T7930] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1719.286494][ T7930] usb 7-1: device descriptor read/8, error -71 [ 1719.448179][ T7930] usb usb7-port1: unable to enumerate USB device [ 1720.218277][T17101] 9pnet_virtio: no channels available for device syz [ 1720.279147][T17101] pim6reg99999999: entered allmulticast mode [ 1720.519326][T17111] qrtr: Invalid version 0 [ 1720.624452][T17114] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1720.703569][T17116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2440'. [ 1720.869241][T17120] overlayfs: conflicting lowerdir path [ 1720.871311][T17124] overlayfs: missing 'lowerdir' [ 1721.686137][ T7930] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 1721.838320][ T7930] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1721.838378][ T7930] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1721.838398][ T7930] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1721.838417][ T7930] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1721.838436][ T7930] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1721.839960][ T7930] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1721.840014][ T7930] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1721.840044][ T7930] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1721.840072][ T7930] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1721.840100][ T7930] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1721.841715][ T7930] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1721.841767][ T7930] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1721.841796][ T7930] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1721.841823][ T7930] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1721.841851][ T7930] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1721.882423][ T7930] usb 2-1: string descriptor 0 read error: -22 [ 1721.882832][ T7930] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1721.882904][ T7930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.093855][ T7930] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1722.336600][ T7930] usb 2-1: USB disconnect, device number 59 [ 1722.453531][T17152] qrtr: Invalid version 0 [ 1723.772866][T17162] netlink: 'syz.5.2451': attribute type 4 has an invalid length. [ 1723.772939][T17162] netlink: 1601 bytes leftover after parsing attributes in process `syz.5.2451'. [ 1724.196031][ T5779] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1724.214266][T17168] overlayfs: conflicting lowerdir path [ 1724.285463][T17170] overlayfs: missing 'lowerdir' [ 1724.369839][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1724.369879][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1724.369904][ T5779] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1724.369949][ T5779] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1724.369974][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.445886][ T5779] usb 4-1: config 0 descriptor?? [ 1724.576191][T13707] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1724.706122][T13707] usb 2-1: device descriptor read/64, error -71 [ 1724.931424][ T5779] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1724.953063][T13707] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1725.076751][T13707] usb 2-1: device descriptor read/64, error -71 [ 1725.223769][T13707] usb usb2-port1: attempt power cycle [ 1725.366723][T17188] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1725.566149][T13707] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1725.587251][T13707] usb 2-1: device descriptor read/8, error -71 [ 1725.695679][T13907] usb 4-1: USB disconnect, device number 25 [ 1725.826175][T13707] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1725.846793][T13707] usb 2-1: device descriptor read/8, error -71 [ 1725.957184][T13707] usb usb2-port1: unable to enumerate USB device [ 1726.499850][T17210] tipc: Enabling of bearer rejected, already enabled [ 1727.098133][T17217] qrtr: Invalid version 0 [ 1727.283601][T17222] overlayfs: conflicting lowerdir path [ 1727.345193][T17226] overlayfs: missing 'lowerdir' [ 1727.386062][ T31] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 1727.521087][T17230] netlink: 'syz.1.2468': attribute type 11 has an invalid length. [ 1727.521112][T17230] netlink: 'syz.1.2468': attribute type 23 has an invalid length. [ 1727.521129][T17230] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2468'. [ 1727.563686][ T31] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1727.563744][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1727.563773][ T31] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1727.563801][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1727.563827][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1727.571728][ T31] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1727.571909][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1727.572004][ T31] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1727.572079][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1727.572317][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1727.629450][ T31] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1727.629606][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1727.629682][ T31] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1727.629767][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1727.629852][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1727.698230][ T31] usb 4-1: string descriptor 0 read error: -22 [ 1727.698662][ T31] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1727.698756][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.831319][ T31] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1727.874300][T17241] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1728.036436][T13707] usb 4-1: USB disconnect, device number 26 [ 1730.218231][T17259] tipc: Enabling of bearer rejected, already enabled [ 1730.447275][T17268] qrtr: Invalid version 0 [ 1730.976730][ T7930] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1731.057836][T17283] overlayfs: conflicting lowerdir path [ 1731.094511][T17283] overlayfs: missing 'lowerdir' [ 1731.106104][ T7930] usb 3-1: device descriptor read/64, error -71 [ 1731.346039][ T7930] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1731.476150][ T7930] usb 3-1: device descriptor read/64, error -71 [ 1731.586105][T16913] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1731.586732][ T7930] usb usb3-port1: attempt power cycle [ 1731.692899][T17295] netlink: 'syz.5.2484': attribute type 11 has an invalid length. [ 1731.692924][T17295] netlink: 'syz.5.2484': attribute type 23 has an invalid length. [ 1731.692939][T17295] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2484'. [ 1731.755300][T16913] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1731.755335][T16913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.789737][T16913] usb 2-1: config 0 descriptor?? [ 1731.809573][T16913] cp210x 2-1:0.0: cp210x converter detected [ 1731.976244][ T7930] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1731.999633][ T7930] usb 3-1: device descriptor read/8, error -71 [ 1732.061522][T16913] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1732.241346][ T7930] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1732.245456][T17289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2482'. [ 1732.614584][ T7930] usb 3-1: device descriptor read/8, error -71 [ 1732.716438][ T7930] usb usb3-port1: unable to enumerate USB device [ 1732.777567][ T37] audit: type=1326 audit(2000000792.040:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17309 comm="syz.6.2486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f780004c799 code=0x0 [ 1732.878918][T16913] usb 2-1: USB disconnect, device number 64 [ 1732.913361][T16913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1732.924850][T16913] cp210x 2-1:0.0: device disconnected [ 1733.850051][T17331] overlayfs: conflicting lowerdir path [ 1733.911548][T17331] overlayfs: missing 'lowerdir' [ 1735.356106][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1735.547656][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.547702][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.547726][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1735.547771][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1735.547795][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.645114][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.645205][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.671762][ T31] usb 3-1: config 0 descriptor?? [ 1736.345902][T16913] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1736.381407][ T31] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1737.473217][T16913] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1737.473248][T16913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.512425][T16913] usb 7-1: config 0 descriptor?? [ 1737.612044][T16913] cp210x 7-1:0.0: cp210x converter detected [ 1737.782261][T16913] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1738.361387][T17355] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2498'. [ 1738.719674][ T7930] usb 3-1: USB disconnect, device number 13 [ 1739.346073][T13707] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1739.476097][T13707] usb 6-1: device descriptor read/64, error -71 [ 1739.546516][T16913] usb 7-1: USB disconnect, device number 7 [ 1739.577532][T16913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1739.578293][T16913] cp210x 7-1:0.0: device disconnected [ 1740.236478][T13707] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1740.652191][T13707] usb 6-1: device descriptor read/64, error -71 [ 1740.761286][T13707] usb usb6-port1: attempt power cycle [ 1743.266099][T13707] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1743.548137][T13707] usb 6-1: device not accepting address 40, error -71 [ 1746.069371][T17441] netlink: 'syz.2.2518': attribute type 4 has an invalid length. [ 1746.069443][T17441] netlink: 1601 bytes leftover after parsing attributes in process `syz.2.2518'. [ 1747.755093][T17458] fuse: Invalid rootmode [ 1748.106173][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 1752.116819][T17504] fuse: Invalid rootmode [ 1755.004472][T13907] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1755.047989][T17527] fuse: Unknown parameter 'group_i00000000000000000000' [ 1755.170954][T13907] usb 6-1: Using ep0 maxpacket: 32 [ 1755.184558][T13907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.184616][T13907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 183, changing to 11 [ 1755.184645][T13907] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1755.228396][T13907] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1755.228443][T13907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.228465][T13907] usb 6-1: Product: syz [ 1755.228481][T13907] usb 6-1: Manufacturer: syz [ 1755.228497][T13907] usb 6-1: SerialNumber: syz [ 1755.306245][T13907] usb 6-1: config 0 descriptor?? [ 1755.524582][ T10] usb 6-1: USB disconnect, device number 42 [ 1756.352083][ T5779] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1756.576563][ T5779] usb 4-1: Using ep0 maxpacket: 8 [ 1756.686391][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1756.728938][ T5779] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.729278][ T5779] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1756.729304][ T5779] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1756.729465][ T5779] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1756.729666][ T5779] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1756.729814][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.946893][ T5779] usbtmc 4-1:16.0: bulk endpoints not found [ 1757.008235][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.008325][ T10] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1757.008361][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.048368][ T10] usb 3-1: config 0 descriptor?? [ 1758.490291][T17570] tipc: Enabling of bearer rejected, already enabled [ 1759.423623][ T5880] usb 4-1: USB disconnect, device number 27 [ 1759.572136][ T10] usb 3-1: string descriptor 0 read error: -71 [ 1759.593904][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1759.596987][ T10] usb 3-1: USB disconnect, device number 14 [ 1759.782463][T17576] fuse: Unknown parameter 'group_i00000000000000000000' [ 1760.696163][T16913] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1760.832829][T17595] tipc: Enabling of bearer rejected, already enabled [ 1761.142047][T16913] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1761.142090][T16913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.168698][T16913] usb 4-1: config 0 descriptor?? [ 1761.188248][T16913] cp210x 4-1:0.0: cp210x converter detected [ 1761.628723][T16913] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1762.481454][ T5880] usb 4-1: USB disconnect, device number 28 [ 1762.502609][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1762.541748][ T5880] cp210x 4-1:0.0: device disconnected [ 1763.647543][T13122] Bluetooth: hci3: command 0x0406 tx timeout [ 1764.552200][T17615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2563'. [ 1766.230506][T17625] fuse: Unknown parameter 'group_id00000000000000000000' [ 1766.270118][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1766.535033][T17629] netlink: 'syz.6.2566': attribute type 4 has an invalid length. [ 1766.535070][T17629] netlink: 1601 bytes leftover after parsing attributes in process `syz.6.2566'. [ 1766.726786][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1766.785762][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1766.785796][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1766.785823][ T10] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1766.785847][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1766.830240][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1766.830278][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.938534][ T10] usbtmc 2-1:16.0: bulk endpoints not found [ 1767.852491][ T37] audit: type=1326 audit(2000000827.120:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17645 comm="syz.2.2571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84acb0c799 code=0x0 [ 1769.690857][T16913] usb 2-1: USB disconnect, device number 65 [ 1775.210747][ T37] audit: type=1326 audit(2000000834.480:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17706 comm="syz.2.2585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84acb0c799 code=0x0 [ 1776.467296][ T5880] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1776.683833][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 1776.694255][ T5880] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1776.694293][ T5880] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1776.694321][ T5880] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1776.694345][ T5880] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1776.694392][ T5880] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1776.694417][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.808653][ T5880] usbtmc 4-1:16.0: bulk endpoints not found [ 1777.114594][ T5880] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1777.416031][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 1777.419429][ T5880] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.419458][ T5880] usb 3-1: config 251 has 0 interfaces, different from the descriptor's value: 1 [ 1777.424560][ T5880] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1777.424592][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.424615][ T5880] usb 3-1: Product: syz [ 1777.424631][ T5880] usb 3-1: Manufacturer: syz [ 1777.424647][ T5880] usb 3-1: SerialNumber: syz [ 1777.752612][ T5880] usb 3-1: USB disconnect, device number 15 [ 1778.884277][T13907] usb 4-1: USB disconnect, device number 29 [ 1779.068667][T17751] tipc: Started in network mode [ 1779.068857][T17751] tipc: Node identity 7f000001, cluster identity 4711 [ 1779.097126][T17751] tipc: Enabled bearer , priority 10 [ 1780.204877][ T5873] tipc: Node number set to 2130706433 [ 1781.356228][T13707] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 1781.492014][T13707] usb 7-1: device descriptor read/64, error -71 [ 1781.736117][T13707] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 1781.882583][T13707] usb 7-1: device descriptor read/64, error -71 [ 1782.002781][T13707] usb usb7-port1: attempt power cycle [ 1782.346248][T13707] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 1782.370143][T13707] usb 7-1: device descriptor read/8, error -71 [ 1782.616756][T13707] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 1782.637388][T13707] usb 7-1: device descriptor read/8, error -71 [ 1782.746776][T13707] usb usb7-port1: unable to enumerate USB device [ 1783.878956][T17811] tipc: Enabling of bearer rejected, already enabled [ 1788.016402][T11919] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1788.176358][T11919] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1788.176395][T11919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.182921][T11919] usb 7-1: config 0 descriptor?? [ 1788.218925][T11919] cp210x 7-1:0.0: cp210x converter detected [ 1788.412644][T11919] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1794.351478][ T10] usb 7-1: USB disconnect, device number 12 [ 1795.343565][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1795.379503][ T10] cp210x 7-1:0.0: device disconnected [ 1796.674838][T17898] netlink: 'syz.5.2631': attribute type 4 has an invalid length. [ 1796.674920][T17898] netlink: 1601 bytes leftover after parsing attributes in process `syz.5.2631'. [ 1797.086791][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.086873][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.085231][T17923] tipc: Enabling of bearer rejected, already enabled [ 1807.506093][ T5779] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1807.898525][ T5779] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.898591][ T5779] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1807.898641][ T5779] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1807.898677][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.208372][ T5779] usb 3-1: config 0 descriptor?? [ 1808.490022][ T5779] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1811.506101][T17876] usb 3-1: USB disconnect, device number 16 [ 1811.782786][T17991] netlink: 'syz.3.2650': attribute type 72 has an invalid length. [ 1815.405447][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1815.424883][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1815.427670][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1815.574063][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1815.574894][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1816.992817][T18017] netlink: 'syz.3.2657': attribute type 4 has an invalid length. [ 1816.992846][T18017] netlink: 1601 bytes leftover after parsing attributes in process `syz.3.2657'. [ 1819.154534][ T5797] Bluetooth: hci0: command tx timeout [ 1820.881250][ T6112] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.231429][ T5797] Bluetooth: hci0: command tx timeout [ 1822.614350][ T6112] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.716748][ T5797] Bluetooth: hci0: command tx timeout [ 1825.869299][T18072] hub 8-0:1.0: USB hub found [ 1826.690162][ T5797] Bluetooth: hci0: command tx timeout [ 1826.718483][T18072] hub 8-0:1.0: 1 port detected [ 1827.202392][ T6112] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.666444][T18000] chnl_net:caif_netlink_parms(): no params data found [ 1830.462577][ T6112] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.891954][T18000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.892180][T18000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.892829][T18000] bridge_slave_0: entered allmulticast mode [ 1831.895701][T18000] bridge_slave_0: entered promiscuous mode [ 1831.918892][T18000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.919083][T18000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1831.919366][T18000] bridge_slave_1: entered allmulticast mode [ 1831.922154][T18000] bridge_slave_1: entered promiscuous mode [ 1833.616940][T18000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1835.034068][T18000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1837.889767][T18000] team0: Port device team_slave_0 added [ 1837.949774][T18000] team0: Port device team_slave_1 added [ 1839.798935][T11919] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1840.284547][T18000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1840.284569][T18000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1840.284599][T18000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1840.336312][T11919] usb 3-1: Using ep0 maxpacket: 32 [ 1841.647435][T18000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1841.647572][T18000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1841.647604][T18000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1841.913571][T11919] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1841.913621][T11919] usb 3-1: can't read configurations, error -71 [ 1842.922095][T18000] hsr_slave_0: entered promiscuous mode [ 1842.933164][T18000] hsr_slave_1: entered promiscuous mode [ 1843.425565][T18171] blktrace: Concurrent blktraces are not allowed on loop10 [ 1845.585058][ T6112] bridge_slave_1: left allmulticast mode [ 1845.585095][ T6112] bridge_slave_1: left promiscuous mode [ 1845.585348][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.745743][ T6112] bridge_slave_0: left allmulticast mode [ 1845.745781][ T6112] bridge_slave_0: left promiscuous mode [ 1845.763539][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.716072][T11919] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1847.876770][T11919] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1847.876819][T11919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1847.876848][T11919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1847.876873][T11919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1847.876919][T11919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1847.876946][T11919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.009009][T11919] usb 2-1: config 0 descriptor?? [ 1848.604780][T11919] usbhid 2-1:0.0: can't add hid device: -71 [ 1848.604930][T11919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1848.659767][T11919] usb 2-1: USB disconnect, device number 66 [ 1849.140875][ T6112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1849.228845][ T6112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1849.299491][ T6112] bond0 (unregistering): Released all slaves [ 1849.642178][ T6112] tipc: Disabling bearer [ 1849.642426][ T6112] tipc: Left network mode [ 1852.216661][T18231] blktrace: Concurrent blktraces are not allowed on loop6 [ 1853.486259][T17876] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1853.649819][T17876] usb 4-1: device descriptor read/64, error -71 [ 1853.886305][T17876] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1854.017509][T17876] usb 4-1: device descriptor read/64, error -71 [ 1854.130009][T17876] usb usb4-port1: attempt power cycle [ 1854.476033][T17876] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1854.498672][T17876] usb 4-1: device descriptor read/8, error -71 [ 1854.736175][T17876] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1854.772146][T17876] usb 4-1: device descriptor read/8, error -71 [ 1854.876563][T17876] usb usb4-port1: unable to enumerate USB device [ 1857.806277][ T31] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1857.992875][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1857.992921][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1857.992958][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1857.992984][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1857.993030][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1857.993056][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.052114][ T31] usb 2-1: config 0 descriptor?? [ 1858.875954][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.876480][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.266827][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 1859.271759][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1859.326936][ T31] usb 2-1: USB disconnect, device number 67 [ 1859.342464][ T6112] hsr_slave_0: left promiscuous mode [ 1859.466924][ T6112] hsr_slave_1: left promiscuous mode [ 1859.472143][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1859.472179][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1859.538641][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1859.538678][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1859.693957][ T6112] veth1_macvtap: left promiscuous mode [ 1859.694109][ T6112] veth0_macvtap: left promiscuous mode [ 1859.709987][ T6112] veth1_vlan: left promiscuous mode [ 1859.710201][ T6112] veth0_vlan: left promiscuous mode [ 1860.048353][ T6112] pim6reg (unregistering): left allmulticast mode [ 1860.845142][T18281] netlink: 'syz.1.2708': attribute type 4 has an invalid length. [ 1860.845171][T18281] netlink: 1601 bytes leftover after parsing attributes in process `syz.1.2708'. [ 1860.919544][ T6112] team0 (unregistering): Port device team_slave_1 removed [ 1860.961431][ T6112] team0 (unregistering): Port device team_slave_0 removed [ 1861.156673][T18274] tipc: Enabling of bearer rejected, already enabled [ 1865.163255][T18000] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1865.256745][T18000] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1865.384493][T18000] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1865.499133][T18000] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1865.786858][T18321] fuse: Unknown parameter '0x0000000000000004' [ 1866.611708][T18337] netlink: zone id is out of range [ 1866.611734][T18337] netlink: zone id is out of range [ 1866.611741][T18337] netlink: zone id is out of range [ 1866.611748][T18337] netlink: zone id is out of range [ 1866.611754][T18337] netlink: zone id is out of range [ 1866.611772][T18337] netlink: zone id is out of range [ 1866.611779][T18337] netlink: zone id is out of range [ 1866.611786][T18337] netlink: zone id is out of range [ 1866.611795][T18337] netlink: del zone limit has 4 unknown bytes [ 1866.737824][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'. [ 1867.484930][T18000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1871.133426][T18000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1871.188434][T15470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.192808][T15470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1871.247936][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.271808][T18360] fuse: Unknown parameter '0x0000000000000004' [ 1871.282667][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1871.563415][T18367] netlink: zone id is out of range [ 1874.817368][T18407] fuse: Unknown parameter '0x0000000000000004' [ 1874.974197][T13122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1874.991374][T13122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1874.992845][T13122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1874.997121][T13122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1874.997945][T13122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1875.254471][T17876] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1875.410471][T17876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.410539][T17876] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1875.410567][T17876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.525158][T17876] usb 3-1: config 0 descriptor?? [ 1875.834793][T18420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1877.073472][T13122] Bluetooth: hci3: command tx timeout [ 1877.984669][T17876] usb 3-1: string descriptor 0 read error: -71 [ 1878.010230][T17876] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1878.013823][T17876] usb 3-1: USB disconnect, device number 19 [ 1879.455215][T13122] Bluetooth: hci3: command tx timeout [ 1881.486108][T13122] Bluetooth: hci3: command tx timeout [ 1883.880896][T18455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2754'. [ 1884.891317][T13122] Bluetooth: hci3: command tx timeout [ 1889.521788][ T6323] ODEBUG: Out of memory. ODEBUG disabled [ 1891.486896][T18411] chnl_net:caif_netlink_parms(): no params data found [ 1892.495602][T18519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2766'. [ 1897.001193][T15524] bridge_slave_1: left allmulticast mode [ 1897.001223][T15524] bridge_slave_1: left promiscuous mode [ 1897.001445][T15524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.170354][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2771'. [ 1897.197035][T15524] bridge_slave_0: left allmulticast mode [ 1897.197061][T15524] bridge_slave_0: left promiscuous mode [ 1897.197278][T15524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.316236][T18539] netlink: 'syz.2.2771': attribute type 72 has an invalid length. [ 1897.316266][T18539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2771'. [ 1899.743154][T15524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1899.818175][T15524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1899.858503][T15524] bond0 (unregistering): Released all slaves [ 1899.994035][T18411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.994273][T18411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.994468][T18411] bridge_slave_0: entered allmulticast mode [ 1900.065139][T18411] bridge_slave_0: entered promiscuous mode [ 1900.075319][T18411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1900.086359][T18411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.086695][T18411] bridge_slave_1: entered allmulticast mode [ 1900.089538][T18411] bridge_slave_1: entered promiscuous mode [ 1900.367540][T15524] hsr_slave_0: left promiscuous mode [ 1900.406141][T15524] hsr_slave_1: left promiscuous mode [ 1900.407362][T15524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1900.437043][T15524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1900.910066][T15524] team0 (unregistering): Port device team_slave_1 removed [ 1900.968268][T15524] team0 (unregistering): Port device team_slave_0 removed [ 1901.152186][T18411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1901.197670][T18411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1901.253967][T18411] team0: Port device team_slave_0 added [ 1901.264397][T18411] team0: Port device team_slave_1 added [ 1901.317971][T18411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1901.317988][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1901.318010][T18411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1901.319704][T18411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1901.319717][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1901.319738][T18411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1901.542783][T18411] hsr_slave_0: entered promiscuous mode [ 1901.544213][T18411] hsr_slave_1: entered promiscuous mode [ 1903.149239][T18411] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1903.200402][T18411] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1903.240925][T18411] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1903.285436][T18411] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1903.451439][T18411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1903.484757][T18411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1903.508488][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.508647][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1903.549604][T15524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.549712][T15524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1903.931790][T18411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1904.023120][T18411] veth0_vlan: entered promiscuous mode [ 1904.044367][T18411] veth1_vlan: entered promiscuous mode [ 1904.104311][T18411] veth0_macvtap: entered promiscuous mode [ 1904.118183][T18411] veth1_macvtap: entered promiscuous mode [ 1904.144033][T18411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1904.176990][T18411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1904.185762][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.194132][ T6112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.212490][ T6112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.212900][ T6112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.555441][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1904.555552][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1904.733167][ T6797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1904.733194][ T6797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1919.955485][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.955585][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.347296][T13122] Bluetooth: hci6: command 0x0406 tx timeout [ 1981.392359][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.392469][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2014.186064][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 2022.346841][ C1] ================================================================== [ 2022.346865][ C1] BUG: KASAN: slab-use-after-free in detach_timer+0xc8/0x300 [ 2022.346901][ C1] Read of size 8 at addr ffff88805d0bf8d0 by task ktimers/1/29 [ 2022.346923][ C1] [ 2022.346945][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2022.346978][ C1] Tainted: [L]=SOFTLOCKUP [ 2022.346988][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2022.347005][ C1] Call Trace: [ 2022.347014][ C1] [ 2022.347027][ C1] dump_stack_lvl+0xe8/0x150 [ 2022.347065][ C1] print_report+0xba/0x230 [ 2022.347097][ C1] ? detach_timer+0xc8/0x300 [ 2022.347118][ C1] kasan_report+0x117/0x150 [ 2022.347157][ C1] ? detach_timer+0xc8/0x300 [ 2022.347183][ C1] detach_timer+0xc8/0x300 [ 2022.347207][ C1] __run_timer_base+0x624/0x9f0 [ 2022.347250][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 2022.347292][ C1] run_timer_softirq+0xb7/0x170 [ 2022.347325][ C1] handle_softirqs+0x1de/0x6f0 [ 2022.347364][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 2022.347402][ C1] run_ktimerd+0x69/0x100 [ 2022.347439][ C1] smpboot_thread_fn+0x541/0xa50 [ 2022.347475][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 2022.347516][ C1] kthread+0x388/0x470 [ 2022.347540][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2022.347571][ C1] ? __pfx_kthread+0x10/0x10 [ 2022.347594][ C1] ret_from_fork+0x51e/0xb90 [ 2022.347629][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2022.347660][ C1] ? __switch_to+0xc7d/0x1450 [ 2022.347691][ C1] ? __pfx_kthread+0x10/0x10 [ 2022.347715][ C1] ret_from_fork_asm+0x1a/0x30 [ 2022.347746][ C1] [ 2022.347755][ C1] [ 2022.347762][ C1] Allocated by task 15637: [ 2022.347774][ C1] kasan_save_track+0x3e/0x80 [ 2022.347825][ C1] __kasan_kmalloc+0x93/0xb0 [ 2022.347855][ C1] __kmalloc_cache_noprof+0x3a6/0x690 [ 2022.347888][ C1] rose_add_node+0x26f/0xf50 [ 2022.347913][ C1] rose_rt_ioctl+0xdc1/0x1350 [ 2022.347938][ C1] rose_ioctl+0x3fb/0x8f0 [ 2022.347972][ C1] sock_do_ioctl+0x101/0x320 [ 2022.348007][ C1] sock_ioctl+0x5c9/0x7f0 [ 2022.348038][ C1] __se_sys_ioctl+0xff/0x170 [ 2022.348072][ C1] do_syscall_64+0x14d/0xf80 [ 2022.348102][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.348125][ C1] [ 2022.348131][ C1] Freed by task 29: [ 2022.348147][ C1] kasan_save_track+0x3e/0x80 [ 2022.348174][ C1] kasan_save_free_info+0x46/0x50 [ 2022.348198][ C1] __kasan_slab_free+0x5c/0x80 [ 2022.348227][ C1] kfree+0x1c1/0x6c0 [ 2022.348253][ C1] rose_timer_expiry+0x4cb/0x600 [ 2022.348281][ C1] call_timer_fn+0x192/0x640 [ 2022.348301][ C1] __run_timer_base+0x6a3/0x9f0 [ 2022.348331][ C1] run_timer_softirq+0xb7/0x170 [ 2022.348362][ C1] handle_softirqs+0x1de/0x6f0 [ 2022.348390][ C1] run_ktimerd+0x69/0x100 [ 2022.348423][ C1] smpboot_thread_fn+0x541/0xa50 [ 2022.348455][ C1] kthread+0x388/0x470 [ 2022.348474][ C1] ret_from_fork+0x51e/0xb90 [ 2022.348504][ C1] ret_from_fork_asm+0x1a/0x30 [ 2022.348523][ C1] [ 2022.348529][ C1] The buggy address belongs to the object at ffff88805d0bf800 [ 2022.348529][ C1] which belongs to the cache kmalloc-512 of size 512 [ 2022.348551][ C1] The buggy address is located 208 bytes inside of [ 2022.348551][ C1] freed 512-byte region [ffff88805d0bf800, ffff88805d0bfa00) [ 2022.348575][ C1] [ 2022.348582][ C1] The buggy address belongs to the physical page: [ 2022.348608][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d0bc [ 2022.348630][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2022.348649][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 2022.348674][ C1] page_type: f5(slab) [ 2022.348696][ C1] raw: 0080000000000040 ffff88813fe1cc80 dead000000000100 dead000000000122 [ 2022.348717][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 2022.348739][ C1] head: 0080000000000040 ffff88813fe1cc80 dead000000000100 dead000000000122 [ 2022.348759][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 2022.348779][ C1] head: 0080000000000002 ffffea0001742f01 00000000ffffffff 00000000ffffffff [ 2022.348806][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 2022.348819][ C1] page dumped because: kasan: bad access detected [ 2022.348836][ C1] page_owner tracks the page as allocated [ 2022.348846][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5793, tgid 5793 (syz-executor), ts 94770126790, free_ts 0 [ 2022.348887][ C1] post_alloc_hook+0x231/0x280 [ 2022.348920][ C1] get_page_from_freelist+0x28bb/0x2950 [ 2022.348941][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2022.348961][ C1] allocate_slab+0x77/0x660 [ 2022.348982][ C1] refill_objects+0x334/0x3c0 [ 2022.349001][ C1] __pcs_replace_empty_main+0x328/0x5f0 [ 2022.349025][ C1] __kmalloc_cache_noprof+0x44e/0x690 [ 2022.349052][ C1] tunnel_key_init_net+0x65/0x1a0 [ 2022.349081][ C1] ops_init+0x35c/0x5c0 [ 2022.349104][ C1] setup_net+0x118/0x340 [ 2022.349124][ C1] copy_net_ns+0x50e/0x730 [ 2022.349162][ C1] create_new_namespaces+0x3e7/0x6a0 [ 2022.349198][ C1] unshare_nsproxy_namespaces+0x11a/0x160 [ 2022.349227][ C1] ksys_unshare+0x51d/0x930 [ 2022.349244][ C1] __x64_sys_unshare+0x38/0x50 [ 2022.349261][ C1] do_syscall_64+0x14d/0xf80 [ 2022.349287][ C1] page_owner free stack trace missing [ 2022.349296][ C1] [ 2022.349301][ C1] Memory state around the buggy address: [ 2022.349312][ C1] ffff88805d0bf780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2022.349326][ C1] ffff88805d0bf800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2022.349340][ C1] >ffff88805d0bf880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2022.349350][ C1] ^ [ 2022.349362][ C1] ffff88805d0bf900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2022.349376][ C1] ffff88805d0bf980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2022.349387][ C1] ================================================================== [ 2022.349415][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2022.349437][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2022.349470][ C1] Tainted: [L]=SOFTLOCKUP [ 2022.349480][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2022.349495][ C1] Call Trace: [ 2022.349505][ C1] [ 2022.349515][ C1] vpanic+0x56c/0xa60 [ 2022.349554][ C1] ? __pfx_vpanic+0x10/0x10 [ 2022.349595][ C1] panic+0xc5/0xd0 [ 2022.349629][ C1] ? __pfx_panic+0x10/0x10 [ 2022.349664][ C1] ? detach_timer+0xc8/0x300 [ 2022.349683][ C1] ? rcu_is_watching+0x15/0xb0 [ 2022.349709][ C1] ? detach_timer+0xc8/0x300 [ 2022.349728][ C1] ? detach_timer+0xc8/0x300 [ 2022.349747][ C1] check_panic_on_warn+0x89/0xb0 [ 2022.349773][ C1] ? detach_timer+0xc8/0x300 [ 2022.349799][ C1] end_report+0x73/0x180 [ 2022.349833][ C1] ? detach_timer+0xc8/0x300 [ 2022.349853][ C1] kasan_report+0x128/0x150 [ 2022.349888][ C1] ? detach_timer+0xc8/0x300 [ 2022.349913][ C1] detach_timer+0xc8/0x300 [ 2022.349937][ C1] __run_timer_base+0x624/0x9f0 [ 2022.349974][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 2022.350010][ C1] run_timer_softirq+0xb7/0x170 [ 2022.350042][ C1] handle_softirqs+0x1de/0x6f0 [ 2022.350080][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 2022.350116][ C1] run_ktimerd+0x69/0x100 [ 2022.350151][ C1] smpboot_thread_fn+0x541/0xa50 [ 2022.350185][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 2022.350224][ C1] kthread+0x388/0x470 [ 2022.350244][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2022.350275][ C1] ? __pfx_kthread+0x10/0x10 [ 2022.350304][ C1] ret_from_fork+0x51e/0xb90 [ 2022.350330][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2022.350353][ C1] ? __switch_to+0xc7d/0x1450 [ 2022.350374][ C1] ? __pfx_kthread+0x10/0x10 [ 2022.350391][ C1] ret_from_fork_asm+0x1a/0x30 [ 2022.350413][ C1] [ 2022.351128][ C1] Kernel Offset: disabled