last executing test programs: 7m25.158329456s ago: executing program 32 (id=3298): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000180)={{@host}, 0x0, 0x800000000000002, 0x1}) 7m14.483208846s ago: executing program 33 (id=3387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 7m9.381576915s ago: executing program 34 (id=3411): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 6m16.39597041s ago: executing program 6 (id=3606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000f9dbdf25210000000800", @ANYRES32=r2, @ANYBLOB="0400ff000a00f5"], 0x48}, 0x1, 0x0, 0x0, 0x4014081}, 0x4004000) 6m16.288248814s ago: executing program 6 (id=3607): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = syz_open_procfs(r2, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) 6m14.401746942s ago: executing program 6 (id=3611): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 6m9.376717163s ago: executing program 6 (id=3631): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m8.80693923s ago: executing program 6 (id=3634): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x15, 0xfffffffffffffffe}, 0x10) 6m8.160356437s ago: executing program 6 (id=3640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 6m7.465338603s ago: executing program 35 (id=3640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 5m45.406336078s ago: executing program 1 (id=3742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 5m45.197980305s ago: executing program 1 (id=3743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x200, 0x4800, 0x14dfcb10f4111127}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 5m44.946857085s ago: executing program 8 (id=3641): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c29, 0x10100, 0x0, 0x3a6, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x801a}], 0x1, 0x0, 0x0, 0x0) 5m43.906112023s ago: executing program 8 (id=3748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) add_key(0x0, 0x0, &(0x7f0000000480), 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12002, 0x1}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x68be, 0x5002, 0x9, 0x0, 0x0) 5m42.734141403s ago: executing program 8 (id=3751): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m42.708894154s ago: executing program 8 (id=3752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 5m42.437869844s ago: executing program 8 (id=3757): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) rt_sigaction(0x16, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x1, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m42.290313076s ago: executing program 36 (id=3757): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) rt_sigaction(0x16, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x1, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m42.287426129s ago: executing program 1 (id=3759): unshare(0x2c020400) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) 5m42.166102275s ago: executing program 1 (id=3762): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m42.128221371s ago: executing program 1 (id=3763): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r6, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) close(r5) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x0, 0x2, "100093", 0x9, 0xfc}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 5m41.64058706s ago: executing program 1 (id=3767): getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\a\x00'], 0x0}, 0x0) 5m40.934228941s ago: executing program 37 (id=3767): getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\a\x00'], 0x0}, 0x0) 5m39.035479102s ago: executing program 7 (id=3779): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 5m36.132041482s ago: executing program 7 (id=3788): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2dcd, 0x4000, 0x0, 0x0, 0x0) r5 = socket$kcm(0x29, 0x7, 0x0) close_range(0xffffffffffffffff, r5, 0x2) timerfd_create(0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 5m35.0850077s ago: executing program 7 (id=3790): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 5m34.994272765s ago: executing program 7 (id=3791): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m34.948127817s ago: executing program 7 (id=3792): mkdirat(0xffffffffffffff9c, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$setopts(0x4206, 0x0, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 5m34.665268951s ago: executing program 7 (id=3795): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m34.516425829s ago: executing program 38 (id=3795): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m46.032721224s ago: executing program 2 (id=4493): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 3m46.005389971s ago: executing program 2 (id=4494): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010900000000ffdb"], 0x24}, 0x1, 0x0, 0x0, 0x40000800}, 0x0) 3m45.791424673s ago: executing program 2 (id=4496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/15, 0xf) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="3fee3e", 0x3}, {&(0x7f0000000540)="ab3a2297af", 0x5}], 0x2}}], 0x1, 0x4000000) 3m45.48722839s ago: executing program 2 (id=4498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) add_key(0x0, 0x0, &(0x7f0000000480), 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000340)={0x0, 0x1, 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x12002, 0x1, {0x0, r8}}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 3m43.860729422s ago: executing program 2 (id=4506): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010900000000ffdb"], 0x24}, 0x1, 0x0, 0x0, 0x40000800}, 0x0) 3m43.657282077s ago: executing program 2 (id=4508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef2885"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 3m28.524735666s ago: executing program 39 (id=4508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef2885"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 11.194952019s ago: executing program 5 (id=5035): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.155696019s ago: executing program 9 (id=5050): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) mkdir(&(0x7f0000000300)='./file0\x00', 0x99) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) r6 = syz_open_procfs(r2, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x2a, 0x3, 0x9) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.119043855s ago: executing program 4 (id=5051): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x9, 0x8000009, 0x5, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x18}}], 0x1, 0x1) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 7.90998226s ago: executing program 5 (id=5052): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) mkdir(&(0x7f0000000300)='./file0\x00', 0x99) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = syz_open_procfs(r2, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x2a, 0x3, 0x9) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.196035448s ago: executing program 4 (id=5053): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xc9, 0x100, 0x8000000, 0x0, 0x0, 0x81, 0x2000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_fuse_handle_req(r0, &(0x7f00000041c0)="75ff311821f07fa4703471f11c7f9a343f146bc8a0059adb304af4dda6a635c782f0d1876dc4627e1aec92ca1fa753a923ca393dde13807c4a58e5a359ca9e98080eef63408e6f862bb0163f4d0eb142e97c03e024aa14ae0bedb306245522bb5a9d1fbc0e8655ae0dc9ba5980d67871769aef065383747b762ce0de5431ecd5e635dbb9ec7fe06e6cf812ef5bac0e0ea2daea3849ef66912f02de733073e13d5a4e5432e0d04f561567c0a9968ae8f5ff5a896237069bfb948bc71ccdea121324fec465b4cf31bd464726d15e7c13741869f0c969fe6f173604650e9d37350745066e8a5dc520898df15cf02859f6d508dc8bb5342af839d6ac5cd69bfb102b5c54746c5382dd976382351a7b701f3490a27ae738b93176d55d5de60823ddcd2470bf6c939ed858c53ba880c38db973256e065521c495d3b6f01d89a526e285bd11a1ad902cbad5bd7a240a10c4f955e6f57bf2b734fe658151b69ca497d6a90f930b330f639c3480a03b8ff62d067051ee0fb71df680b4d79ade539e31512d102ae66b75fc632b5af7da47ba3b87489a7c9735a522070c1b9c7f980aca172315b90bef887aaffe72804ff70d6a275513a90722d191c367474102dd5b17cd9e115e6ce1a2d6a787f8beac2fa5e32f88be0902db5bb1ecde5adb2331f1cd97e9a181e722c3fb83a99a53568f94e457c377ee840de8f2dcaf183781fad768431dc0b24ee63e689eaaaf7e75346fc5e5f6ff123d2fedaeee184e8d6a4d9e45f7a06b5de83fce572c5f631beed57641d3e262e57d592256bc38911adc7c4c59b022d532c7a5418fdebc76ff44c1fd9392818934a4f5603f33687d7d0f9e72c7056e55180e9ce336d86f99f243d31b3fcb15bd7a5bac39a93fcd7f747ee2352cf4886123757c7b7f759aa06a65fdfbf1da74f74968c47ef679ae843f9a331159d490578ae0d7c314a833bc31dbcda6bb0c019f189a2f999c29bbeb2586744d2f2682f3336516a92740d031029b83b3d38844390165bf6517521db3d89d016192b916bd9ac2ee5a3c2059d76cca7eddffdc3ac38bba3112298cb2ac79c686027621b212cb2165de3849f217d8e01885c05e4278491585ecd9633335769a431e82d809f4c378f1fe1f6b3560745fc9c9b2ba0f095b27513e3d6e6263c8298c0dab4819e8d170db1f42df4a2aee0a05d5422eb8fe61e7fbcf3ac8b568d2d6e0bd0ebfeed6fda0f8783dd797ebb2978a0e92fb9610d0ff465515adaeccf7d84bf7f90cf0867de6ef4a1102050928f5416fefa01af66779964011532b8abdf30b24dd76988699f6f8f139cb3628a94aaaf80baebb86d27d970cc17a298473cd80657c641c94ab4ca99336d1a95c27b47da153a0787002ea830c29db176b0f5539b40500986f206cdbbbc843ac148e1f583de9db549354cf681162483bf55704d548f523f1f4ce7b42abc127ff33fb70d4f129cc355b19eef3f6a19f903419b63b2f535e70a1e42bb85c94615bf2e2a640264e0a9712f69ed4a3ebfec61083a65096619b5c91f17eea4cc1e709b6b958be70656fc0086dde58cdfcf2f881abe9e26d185fef6b4c4726646ee47733de0645a5a204be01132c8ea667562625550035d0053267f4f80fcd9e827410c9bbcc4e8dcadb6fd603d709450749941fe5a4419b1f11764dbd0dbb251fcdc92acf7ef19eb65effcc2b8f563825a148b33747bd71fe7904d3946f60cee531131cc847e9c030922296f0578653d304501eda09e9aa95dc019be57e660282c47b81d00d502a8f7af8e2d8e5ead13577c7ecaec231b1117932de732c937db995056cd124ab9155f6c30a8efe14dfd47c1324b970be0317abbf68c130971a3672d093cf9c6a0fb897987107a490cfaeb114348fe308d3df65c732d5e5f910c344d632db028350739c5ee84b229114d97493827d405b349117818b29d2bd9117ee09d061c46fa2cb5ad83880d23300c7a11aeece2125c87eacf88279052bad129cb69b841fcae78a153cc31b494e0b0de4d8d9f347dafad6e4c44146def64c255173822aea7983cad710d734b9ddf5edd4369c00af3bff5ea434fd6d23079410bc8dfb4ac2554f6d9589d4d3dbc5757c93fe0bf5143ee2cc2118a07ddfa29756d80d78131c79d84ab0d269147bbf7756ad4e3875db312ea1270091d8d1d6249c6b9f703659bb3c60cc00055b0b3854f7e31a793a518927f5718b6f5738914bb07ed83ad8371111a48f1bc252443cc1f54ddee0e909506f0f5107b9dde26059135bc6a253e721f1ae34f81c023df75c58ff392d37b04a797365902d638ecd523cd8a78ff351318401c6729b7a1cc85f30a72223869df4c2013bfcbc64382fc8612393fd950f4874d215bfef214ea816acd8ad3a41d4b52b83e7a62d42069610f2169b9132b2b73f6a96ec31209facf23f1dd21f6c0c5892e3b9435c1f5b1d4bd9650814a34654de031da54729fbca6feb36e2e3fb80925b82d58982e4a17947ea8d5db9d743a108be3cf71c788625aae1eaf8f31d54b798eac0fd9076cfa0de451fd81eb7667ae88ca1f42c212f09fbc6e51fd7b8f3cbb9b664a09575bcda1e860bffe2c02411baba18087bc7dd8b6550019cb344c2e1a7eda52b0040b847bf8570cfaeed3934e0e90734df9ec8b495d1da4775658599326be1126c4995bab0f25d6c0b52e241a06f376f1f2b786da2cf4ffc61ffb1554930c02f34cc1136ffd1013bf2bff1adad5a9aad0360f508dd79765723e19de228d99a4895d51b5e6c5a820b883cc42529c8e1cff24fd31a7085869818d28de64956ec221603dd30c4e148ee34e3dbaf24ecbbf2c32f535be5ecf453d736c90ed28bfca01f4c54a9dd0ba2d16602c5681d70be98a5cc32ac862cc2675101b23e77ed827e3efb6ed34afb546d22dd96d88170fa98324953c58eb37bbcd9cdf366d88cc09e615029c41ab853e06a990e43394e3f3873703a3256b28416f4f6fe06dedbd2b9865b6974e13d5d7ab0cfbd9a2c57c00f407c002f9d6cd4a9458a1f67d507ea990db074ec5100714b7dce20c1f9ff6ce76d7882eab2930dd6a75cdb0a3712fba6c757bdc31e21a88ad59911c3f9d94c82817808d22b4dafe124fc1060bcfe61538ae5c04f1b394019ab0b028f915cd1b74ad3cc78b66b94af4339873e988e580f32801d2556482c168b690312e710c9889c32cc3c616b046c75d2d89eb160e97756fc5e1bbd0880f1e9e77e3de1e84becc16df56b55b6b9dc123bb8f1ec0417ebdaab62439f9dc7549903b9f1a90ed9b39edea8611268ce74d92f3629bb3bb357b78d669e9ef3bc8f5f1f22d16af63208c85c1b98af509a36dceb2c69c60ed8c21c15ea821ce40f3eee389807c51bd3ef310d811456cc36509705865584ed545085101ddf75bd44f260ab0407f476fb16bb3cba70b2361f4804719ad9775e9f015c2952a070bd93ef96cb6e96c4501b776da4e3221420be5bce977bb8b19f044dc339c0c8579c1c5ecf5e30f049c43241f1539a5520f580b67e30a435fb726e3d00e08e7d6a14d89f01257a28aed0fe773aaaedc0f5a6458e163dbe4d43a83ffd54ae69cb0e62a7f72b667f85f84b0decd84b043c943360a3d287c9a7167b30e0c2ddcc61c6d7c14119d760e1b9ced30a3baec6d3c82635e02726ea02489630f0b77b0e6c435b560358b5df5a16762d77860ae94b8b934794c6282ef45d669652551c05f8a451220138a25449da84a77d8e4fc171aedf4b613fa07710f4479912eba0e0cb0faa39582e2edd08c67e858799d9d5ab93f0791dbf5312dd94b5145c66e401d42805178ae212b5d328b7971371975ba952f5d387e694d24d71970aa1d3d719c560719a6e2a8b32a70f71ae44cac4695d342c4561e8eec605f8335e3ff1663feb569141fe859ef29e346759dcb682ca401177eb7ffcdd30b23aa976c5cff76e0ce19d301b272700b726902bc0765d809518be44cbf33cc63c845a9e97d2999a1f75d54c0caed5165a03e8337bb38f5582cd5a87057aa116f97012dd058a59d31c1cf53cc1492a39d213111ecd2284b76fd847c7cbd6305390baffee8373e525a6540c85317b44660fdda85357c04b885aae5d2e353cf094404df2708228f193600e7534e464f891201fcefb37f09302f234de1f1388645798437ad53d150078749f5080d83de1257cd3c7bedcb9817cb025c23bf3750e7b7be10079b4285c19788d6233c2c07f9c976845873bae54eb6f9196c23273b1e0b79464c23454e7a3de1b791ea60dedf6ba7cf44a197cacd6f22276d9456f1f786afcd468b50608233bfda467814a6a74f5035520e46ab21a822ca0f9feb3a2dfb1562addeffa3725d831351c1429232c1001b79b90eb6cefba15f68bcb3d530a11cd7226345b410cbf97a6fa892bf5c9c4c96e8917b07819c9c2628352ff08787c7a520f737b8b4fc6d27f3ff23256b64cdbc7ebc6cf7822badab4af58b845ec7c8b0d8815358cad4e32709e480c9dd14e0e21fcac30eec45b8744565b0b4efbdab74fbeb3b3feff454e8ae277c967bf6e0e70f15c48fe4c0407e7e446016cd683e36a1913f9be7a200247c37495c9585600897e0803eacdc758d8c37362379090df025772dc8e20fb1acbeff16150baa7361aec5c0d299337cf9497defa20cb8a6f9150b0fd7e80fff83900bc5825f2a02193e7da4c62b27630d12c4e161db7e58d0df7f3bb83777af4c60e2489e64aef23056fa7b363955a0477970503ef2925435ff78df62b58454c57f4106a2ff13e78264fdcb725811d378225f7675ba7046d4034590f1e84fb67f37dab7affc09e0ca51386d0fc206884164a322ff8923aa77a5fbd606a97989027c15e2dcea0f064bf893ca48a0f7ba9ba7519e922964260eb268705040be051c3059f8645200eebd51de1376a6ed88d1556b8a71df8796dfcf465426da4a0108c18608b677cb32b36c1da5f8219297e317c00642a09a548710ba6f9974bdb3d8cbd286bf458af5eda394705de8154d939df7856b9e9fd210c58015c859e33874f6dd5c0209c9f512d6d0a327a2fa6c2342d75cad4a0d4a19b48103666db3fd86493edcdb2b4202b1449a547a6f20911b6f982d66a9ddf54e539c48f5742b0d3221ea5f3f9a9a5198d797439cd1d7bbc269d6430e299ee12e1dc56e4da607fc29e047061db51ab5a8d249e0b2aa0b09b60f1314e5ab117c9ea940ebdf6d4529ea02b73565b0894f1420a4a2a4f25ac8e1cf2feb137e06d638af3e47db14aa721a343a00eb3e660b0ea03d6ff1ecdce42d41605a8fec19b61fb49986c87304057cc08880e5d6ad44158c3c3dd64287e55c0e4d0a577e408c1b44cf6670cd04c9a1d79899d367818c7451d3b95bef3d21f93e7c87667ce10fe1d8dec460523cfdfbbb0a8e01527f86e1268a0ffa98aa51a6b966e4196a37f096b4167c9ac9b31ed85a8c33f222aa15d1fa34cfa042d33189cd7f6255d4393228386253367a10cd501a85ad39011d3fa404146ee228e11446a0118c5be841936693e77f2bacc15b4bde2f58a2283bb82fabb29b897509151efed1a8d19c1deb85181e02183a49477a9857b179849d41c389248715350d9ca35a62e637f804cf3e8cf007582957104832c5c2da3765894b267aa0affcf8129469aabfcb6b854a1e54313f5841a34c1c0809004689cce4175811a958defb457a2ff3781a198114ea016232d74fcb8a5161f129f456848c74bf0f081778779060f3662ac3478d804edcc2340a19e449525336d0e9775bae61cfec557b4ddb0e5357458c6d88e94f46378aa0ea4499a3233cc22d6bd4aceb6cb46a0e9e2d619636a860ced49c8731268c69de345df6abfd5c443eb7e0da26e5bca8c03b5bc7b46b479fe14bc8e33df52419ecc8c551561b140c138625ed647a47471f121608e4ae233adc92bf62556ca0af28f94d629f5e5dcbbcd4239ecf202f7c886148db64b702c5be5b4779db955fd229fb40324fbe8db99270c2599da6d5c09cd93fd5197a1e85c3fc791883a71084c846a7f91202db6fc864d6113e1c5834f3d9634b595b2f1ceeab67f65b9d5833f1069e08d55821655938a35895458eb407352218ad49815d1497fb3cbd3ba2f6da2cb1ea81d4ab04416939528c208c4cc420d6fe119ac2adb6ccf32d7b52fb56b4c88f4357dedbe83b630acd0edb826550e36239f5a1703719abac50c8202c2adacba2e7036dcf42342656190b930a45c5bd617fffea79e3baab98e0bbffc48109127849b37f65d59133bb4fc4548f2414756327081f7208158dbe26742880c3d1e8c534e14f2a572d0f4cc5345fa1604f6bdc7eec5ccdc011911d55c6f79272a30282162b7f3cbffebf78871defb9cec442dc5488efc00a158ac265c0319e44fc39aa9b20f7996727fc2821383f69bc1e3d5fbd0810e484416482b196463a6a4d2e22bab5f1a2e0866348a9c9e4c1df5926042aac3fcb179d514d62972245961c308c4250e01f44274bfd8477d3a64396c714d47efb8f5adfacee7360d061bba505c4230a1993d2f43089e734c36494af93b3d4cd77c2540244e41fb7103db54ca0beec9b67a29a2b702028c5772f34325343335806c3fa058ba3e657e8554e5fdfa1aad253114acd220737428bdc1a0c56fd86ad1ab4f2332a2d0a960bdf300e591f164a34d1af63fa2aa98328829f61ff4a6b6b89afe93bb9967dfbc0b97f949d62886c4890fc77f26b344b83a052be0eda4671730f2dfbc792a67c41f9969789a4227facfbe3903b6826d01788ad5702428f3954227609d75e7d9dd8de82a55b9fef1b65dc9168650351e1b5b2b2db96098771c8b7614bdded244f29c6ebda995843e939f96d986fbadb196cf2d27f5c15a5bc7f65e340a054812b88686e9a4ec036d75a5b57cfb5be1c9fc915559508512d8e3936728e5c26e5849cf7559b4d9c993cfedd1b8ca59d895535d444ea7eb96c361cb4b72226acdd64787e0950e43dc517f30b15534ede3006d425296f36cdb3459500c817c05f729a4dd290d28baa55558902f0553df72bd618713013708304c7ba7bfb4b004af2c9af436d6b04e64dd92adbe41f91d2920106167f3d061d6262d62c5ba810e327240004b97536488dc5d758a051a717670b0b760e0c0aa0bc41e1a501614e51ec4f50eb5a862c3723ce53bb4f75469c92cd4f491dfe81ca8c4bd925fe2275caca49843865c56dac2506be78b610b454fb0408e88b3ea6fdd133b9340ef85ac58b1ca7b1ef1c19f7369d55d68ddf68d19cb0853486abfa0bc847bbdeacbc42675462ca236283b7b3171f3129bce5c705f0da567c408baf7848d8f8067a7cda0834bb9adbe07576b11a4c4560ebf32fab24b11acc14d065b8bcb0a75deab241b24f10789fda3f2359d7dcd96804f8a1b79445fed28224965067cd17dd0535495dae3c13ddbdd0d26d1e6c6a44a76b7b391079f8d375b0ae484e449d24d16fc3783a7a6644664edeb0efb57420f97daf4825a3001a010072bcf5a87ad98bda8eb1ad72ea3b84672b10fae1239118fb9be7e504c1f04d59d08792bd6e4ce7090bc4986386beedbb510a36d4dcd59df09daa064df9d6f6649fa41da815dc647db36ad14d0d9f8014e2d96d7e2f9cc43a50719592954508e15e99209abfcbe0553de67f758f07e9d23bd9173e245d4701bf94591a258d0ef88d4f24dfd692658ac2fb551aa14246e9d3f36172c2559eda27a52191be7d4b4c8b2c7d89a238a18c57a0c6bd2989566390ac90171bff2d90706e520835ce24e28040e811035be6512f974c314d547dcfb13f8d66aa3369aad2d2a2e40058c83c9a3e933b211166ce1848ad98e8023469fe7360415fb288104e037f1eaf9fa39d1c81f674c64c48b9dd21e26385a0fc9caac8027eab7b2ec9c1ba87c5e41a5ef4ea2fe8a55d1edc19468eb184483f5b42401e50bd89526c78db9dd59e8a05ebe3c8b36d1cf1287daee3b4de0652a35c2cbd2d69f4f0b63e1b852a75dcb31bab9ab59f1b5f23310e129c4cb0f67dffdb3528726784460f4136f1c0b3bebead066bacc814f054227fbcdc89eddd429b526c94a255e3489cb329dfcdff5df32c70fdd7b5272ab6c14de9afa2c1c943ad896533c1b9c36030080a6df4515bf1a025506f68f45bf5c8bb6007c4c12c3b9841ec959760193ac031bd67106192bd9dd01d37fa18756d24a033b3078e4dbff0ce4efda48ae89c0d1486694d09b8550cd2aa22ab2407af4a74c9d29d23e7ae79ced6f6e46ecfeccb44ea617167d14607c592ed12952a5bb0a078176ff6aba391fb2152089c42fa048a47525708ba67cdeff99a8e62fde26ac22fe106184be2e054ca94b878e14deaa62cf70967ee2063b3ded9b2c5e4ce7c90bcdd329d50083772c6abb0704ee03c2c9a0a714182e6cb49abccbb3fd5c12d184cfb8a343a7dac685775e39cf1c5f2130d66d2c7e7b4490fe200b25a6bbfbd0a6684b10b0cfd833153c7353356c78b0bae6b3545671e5c9ed7fe645c799f409535f0dd69e063eb826129869718a93cca7b0450eef6a93a80cf3bca7746bb904b04a8bc2b12d50477b400a97ceadb0bfed7e8d4a94cbafb4d496b6b3e3d113d997c373ffa2341bb607346b2b24006ccdae52834a559b5d35c5f27ef05722bd32c7471ada2b535b3d786d27a794f5db55b834aba43f6f46bde855ff533cd6450c2a2900ffff0bc9c37ee6cfacfc2b06a7b10336014b7db868d615c9b3d4f3d86a4834ed97ced9f2cf06e96ec21715ffd46527754f8717a672c6cf69455dd5dcc557328cc0599b2420d89ca2d78c9283da5e3ead128be306980211ae3009e2a339106c244e92a9b1065cd0f7ab74b21edd89f910a8dbe28991df6f2e2946697c59da7eb1c3bc356e991b75a65e89288d0878706a49c289d6a573f394e76eb3b28f9a6f4f23e3181fb97257181adcfd36eba2ad2a81a2e3f45f25f7937c423bc28f59e8aba9dfcea3450711b152eae6d29480760988bfbd3670bdfdc3b1ea808b23cd2b9f950e0e1f7cff1e6880830326d808394e340504315d11f80eaffe6640df91e8ad907f3f7b2aacc39eaedcfca78e73bef99b844fd9f365a9990f26f0d25245dad5757c321aa6d8455bb5b1a0a727115f4b6bac2f554cfdd712c067d2200655db26e009c1375888e7582d74fd1e803b7da21866d57a23ba8183d2b5b23ea6d96fa031d0b9e952424e993d45e88d05098002a33198e4eef4f7fd55f75c7b2aaa5d23e6a95e59b6fc9b763217492b45fa8193caf228ea0955e628a3bb9cf912d73113aef09c4f5b1cd12c6404cdd5e365089bcd9e27a81eda7d7cbfd6d7cedd54eebdda507b170a9c994bc9e8baeb7c750d3c011bc59790c5ed5679ecdfef26f48e4ca88efd755c835566353b7e4d32d313398e00a1b72c70bcc6dceb3c08d62294fcff61554cac9e1b8fdd5cae252e5d1f33415b2ff450c06277817ff0d63e52e6be9ccf9f06e028d1d5bd0f93bd80a5c8242b10da68df985635b2d86ed26e6e2b3976be076ccdb9257fa6b64328d83b0180664f507f20ae883a9404ba0a48aa3b7ca1233099f80a892d7ffdbb5af0a90f71ebaf8922bf670b016d301e52d53af718d17c2467ebd863b9146bf730e05120acabfe4fd1208565e0d408f30f83778742ec651649c2a6f7beb4363e77575185449e92f735526dca023647a807e54f8a562d76502e05efd128f171f5b557d7649699bcda0df779cac291326414c6fb27d0f837895eb2066c4ce0a179e768965ed70f3164a2e84f183dd5e9ed0de7a122371ca7205b298389d7a2d92228ab844d169fe356b571a43197d1181e3e7f1609c9120fff75fc6272b56167528557b55b6f7e590610c3deeb82bf3d9bb68bac455e3239305668fe00d6b8b6fe47dba8bc603f7bef657dc6c8d47d0df722b9c1e891ffa5cb7b2be34c361791ac497d07a4d600f1fd24fea1a399546fcf0e9fca7f85ed1eca2ffa05c3c1b30ed74564358562c500d17065c3eb2421e68bfd86bc7700b66d35a85a07de9355d226744a001a9fa8c2df39034329c9736675e450c7f1b614587b4a77a00607471fd5ae1066522d88c65b3e23fcec27204eed1f60b4fa4a40f816900992f0fddadb5eaa0e478ef1c2202193b4992e0f077c9b8cbf9aaa0cc8ac80c0bfba7c7c42a3bfd072ef3df0d644503e36a70048ad79a7007c994128661afb61510af0fb7f8c049bb48d530be4d8a68f3beab8eca240577879e50103fd7bce6393194520bd3e8bcd899fe5d45ed4f05cc624c4ddc2f5bed56a70a4bcc195c79c039955a5302c332580d8f429ed2f9a1b3b8e5acdb60868ea9b64c640a6a0f7dd4cd07661a9e82d50b468efaa96c787a9c7513b769922e146b3906ffc21cd6d9f2a8a4292da640e6438883cdd4f07ec5556e241739710dd6f1e857cbcc2d95bd8448d71a8c72fc1658e6038dd669e7b3bb183a274386571abe8077f23a9ac2d461786b60093177ece718061a64990ca37166f73c505cdeae12295897a57d96ae439ab57e34546f4f3de44de489ec0e1d22e8abcb3c4eaaba51ffd466b662672552d08d0f1baa32fffd7e030dbe54127f2db1ccd812de4a0ca97dc5d4c426d365996a736998e1b27c00fd8bd1134621eb7b3ab571b09ab4b726facd6027b7f301adf4ffb66b7e51d6a59b786439f174a3841343027be4f6bb23b89a10739eca5967dae44bb35088ebf9ff7d3449aadb0babc3852369f449eb9fcf9c622e4c61eefa8c828f42c9869bcee70f0af771032eb65f35ec09fd287c82521193c831b821839a318590543595a76c25c7dadc0fd5a79e826c618963e602f0de526fb30cd76407545558210aad6e06e6a45247b1d920902aad7e61f15058ae98118137e38243ef403c8982c4235e13c34323d37136d276275cb4aba2b44bacffaf3a11a0a5973349204d29999bb0c722ace31c26595521a30f03fa7c28fb4d22b70d3fbd13185cb19a75d8b8eaf1125ce206c6401eaf2c4b73d1629a8e65bb9e586bdb523de71302899bec87bbe62ac9cac46ccbd66c1e098a9e05fe599039bdfed5e9b789b43312fb0b3c2eb1f3f8f9486dfe07ce180369be6fc8d8107a5a1fbd0c0691044d4015810742a122858e2ce25f6d522e5136da5ebe9eb6ed32d932cb1443ead3584bb998fedd2f707a11a4a076c1d36bea69371cf616d2ef5be3d03031da49e4a2aef49d0ae45e7f2c91fb87bed83da94c77cebde7764565e664f6b8b12911b481d4c94853cf5834e8dc6c7d11fffd38f0680679ad9759b60bb5ef8f70c980f57fa990b3dfa0b1fb9a4f2ad61911c55bcdc15a9ca69444481c38b95d47b5f087c1c081ac308be753410157874009e33e8a1f8911f75486db0459ba025f9d7483a964aa8fc840a1c862a3a0284469e8751682ee3ec84696d9bbba81703d3b922eb6e92d1524c0f5ebd7a3376c42e868d53b710b35d95548c82fb9ddbd7f316391288b6cf2902234d90e062b33033df20c4f02b1c62bbc09d81d42fe54aa426ef02350fd35cd00755c78ab3d6ccc98e77ee6ab5e357df58843390422283f311b4b46dea4fa6d8ef2dceed92819db1ce5f5a827d26e8154dffe4ec8f419c420c72825df0", 0x2000, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x3, {0x0, 0x0, 0x7, 0x3, 0xfffffff0, 0x4, {0x0, 0xb43d, 0x3, 0x9, 0x8000000000000001, 0x9, 0x4, 0x800, 0x40, 0x4000, 0x4, 0x0, r2, 0xffffffff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdeb176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, {0x0, 0x2, 0x7f, 0x1b7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.055066672s ago: executing program 9 (id=5058): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') read$FUSE(r3, &(0x7f0000019080)={0x2020}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(0x0, 0x0, 0x0) 6.946392124s ago: executing program 4 (id=5059): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002", @ANYRES16], 0x80}}, 0x4008844) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 5.870898104s ago: executing program 9 (id=5060): socket$inet6_dccp(0xa, 0x6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x6, 0xd0, 0x6, 0x2, 0x0, 0x2, 0x6, 0x0, 0x8], 0x2000, 0x98302}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bca) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x50, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8927, &(0x7f0000000140)={'gretap0\x00', 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.773406086s ago: executing program 3 (id=5062): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000b00)=0x3) 5.153962249s ago: executing program 3 (id=5063): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f000092e000/0x2000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000700), &(0x7f0000000740)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x70000, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 3.57668539s ago: executing program 3 (id=5065): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x48, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000261f", 0x2e}], 0x1}, 0x0) 3.55687784s ago: executing program 9 (id=5067): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYBLOB="00db000000400000200012800b00010065"], 0x40}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240)="02e19d2dfa8f6e35b50f080d91ef49d3d9d43c03e74949522ff7b13a19c3886aaa71445dad1d7c85287332e046c59debce995da0b96973bd013b2e749981d1e1e556e3f35b9651bc9b6229f2a989695c475f6f2e43d168d4b020eb7bd8ddac0575419d06", 0x0, 0x64}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.527362767s ago: executing program 4 (id=5068): io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) 3.493156751s ago: executing program 0 (id=5069): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x24) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) 3.438270412s ago: executing program 5 (id=5070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.392838431s ago: executing program 4 (id=5071): r0 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close_range(r3, r3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x41203, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 3.281533342s ago: executing program 3 (id=5072): mkdirat(0xffffffffffffff9c, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$setopts(0x4206, 0x0, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 2.745600404s ago: executing program 9 (id=5073): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000b00)=0x3) 2.050161605s ago: executing program 4 (id=5074): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.950891165s ago: executing program 5 (id=5075): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x24) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.888624142s ago: executing program 3 (id=5076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4c, 0x3}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x180, 0xe000060, 0xffffff6a, 0x180, 0x4, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'wg2\x00', 'rose0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.867694617s ago: executing program 0 (id=5077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) 1.639975896s ago: executing program 3 (id=5078): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002", @ANYRES16], 0x80}}, 0x4008844) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 876.737018ms ago: executing program 0 (id=5079): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0xd, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xb14) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000180)={0x0, r5}) close_range(r3, 0xffffffffffffffff, 0x0) 728.527303ms ago: executing program 0 (id=5080): mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffb, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, 0x0, 0x0) 258.615166ms ago: executing program 9 (id=5081): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) mkdir(&(0x7f0000000300)='./file0\x00', 0x99) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = syz_open_procfs(r2, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x2a, 0x3, 0x9) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 252.113938ms ago: executing program 0 (id=5082): r0 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) 243.166408ms ago: executing program 5 (id=5083): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) unshare(0x20000400) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x3) r6 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x3) 33.941817ms ago: executing program 0 (id=5084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x3, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x20ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x4, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) clock_settime(0x0, &(0x7f00000002c0)={0x77359400}) shutdown(0xffffffffffffffff, 0x2) 0s ago: executing program 5 (id=5085): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x24) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) kernel console output (not intermixed with test programs): process `syz.7.3545'. [ 480.803389][T15318] input: syz0 as /devices/virtual/input/input12 [ 480.812672][T15318] input: failed to attach handler leds to device input12, error: -6 [ 480.909174][T15324] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.974600][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 481.084949][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 482.977994][ T29] audit: type=1400 audit(1740812766.882:1664): avc: denied { bind } for pid=15334 comm="syz.7.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 483.060115][T15348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3558'. [ 483.116305][T15348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3558'. [ 483.191315][ T5819] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 483.359609][ T5819] usb 8-1: device descriptor read/64, error -71 [ 483.681112][ T5819] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 484.032904][ T5819] usb 8-1: device descriptor read/64, error -71 [ 484.151807][ T5819] usb usb8-port1: attempt power cycle [ 484.996212][ T5819] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 485.042989][ T5819] usb 8-1: device descriptor read/8, error -71 [ 485.514785][T15378] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 486.354196][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 486.386403][ T29] audit: type=1400 audit(1740812770.832:1665): avc: denied { write } for pid=15389 comm="syz.6.3574" name="usbmon3" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 487.905157][T15396] 9pnet_fd: Insufficient options for proto=fd [ 492.227093][T15436] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3586'. [ 492.836194][T15442] 9pnet_fd: Insufficient options for proto=fd [ 493.272541][T15425] Set syz1 is full, maxelem 65536 reached [ 493.366671][T15446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3587'. [ 493.572180][T15453] fuse: Bad value for 'fd' [ 494.211122][T15464] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3594'. [ 494.751337][ T8280] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 495.161208][ T8280] usb 7-1: Using ep0 maxpacket: 8 [ 495.686812][ T8280] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.710441][ T8280] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 495.723288][ T8280] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 495.733431][ T8280] usb 7-1: SerialNumber: syz [ 495.740208][ T8280] usb 7-1: config 0 descriptor?? [ 496.267615][T15491] 9pnet_fd: Insufficient options for proto=fd [ 497.481614][ T8280] usb 7-1: USB disconnect, device number 4 [ 497.703602][T15509] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3606'. [ 499.755189][T15525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3609'. [ 499.782906][T15525] bridge1: entered promiscuous mode [ 499.788189][T15525] bridge1: entered allmulticast mode [ 501.433632][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.037022][T15548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3617'. [ 502.595275][T15559] 9pnet_fd: Insufficient options for proto=fd [ 502.898490][T15562] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3621'. [ 502.997426][T15563] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3621'. [ 504.690301][ T29] audit: type=1400 audit(1740812789.132:1666): avc: denied { map } for pid=15584 comm="syz.3.3629" path="socket:[46668]" dev="sockfs" ino=46668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.374510][T15601] fuse: Invalid rootmode [ 506.228786][T11781] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.389661][T11781] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.516258][T11781] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.691357][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3642'. [ 506.771493][T11781] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.814719][T15622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3645'. [ 506.887732][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3645'. [ 506.939496][ T29] audit: type=1400 audit(1740812791.382:1667): avc: denied { connect } for pid=15625 comm="syz.1.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 507.112768][T11781] bridge_slave_1: left allmulticast mode [ 507.148055][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.162623][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 507.172857][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.180196][T11781] bridge_slave_1: left promiscuous mode [ 507.189300][T11781] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.196978][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.364202][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 507.377224][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.753636][T11781] bridge_slave_0: left allmulticast mode [ 507.759829][T11781] bridge_slave_0: left promiscuous mode [ 507.782389][T11781] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.579124][ T5132] Bluetooth: hci0: command tx timeout [ 510.233777][T15667] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3656'. [ 510.428254][T11781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.439093][T11781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.448760][T11781] bond0 (unregistering): Released all slaves [ 510.470578][T15644] mkiss: ax0: crc mode is auto. [ 510.962705][T15684] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3660'. [ 511.594068][ T5132] Bluetooth: hci0: command tx timeout [ 513.451601][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3670'. [ 513.738047][ T5132] Bluetooth: hci0: command tx timeout [ 514.041151][ T29] audit: type=1326 audit(1740812798.432:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.3.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 514.251982][ T29] audit: type=1326 audit(1740812798.452:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.3.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 514.286023][ T29] audit: type=1326 audit(1740812798.452:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.3.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 514.330520][ T29] audit: type=1326 audit(1740812798.452:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.3.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 514.370028][ T29] audit: type=1326 audit(1740812798.452:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.3.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 514.571474][ T29] audit: type=1326 audit(1740812798.452:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.3.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 514.601920][ T29] audit: type=1326 audit(1740812798.452:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.3.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 514.638033][ T29] audit: type=1326 audit(1740812798.452:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.3.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 514.704053][ T29] audit: type=1326 audit(1740812798.452:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.3.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 514.758168][ T29] audit: type=1326 audit(1740812798.452:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.3.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 515.755160][ T5132] Bluetooth: hci0: command tx timeout [ 516.828104][T11781] hsr_slave_0: left promiscuous mode [ 516.834185][T11781] hsr_slave_1: left promiscuous mode [ 516.839955][T11781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.847537][T11781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.856767][T11781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.890644][T11781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.940563][T11781] veth1_macvtap: left promiscuous mode [ 516.958287][T11781] veth0_macvtap: left promiscuous mode [ 516.970726][T11781] veth1_vlan: left promiscuous mode [ 516.982073][T11781] veth0_vlan: left promiscuous mode [ 517.607668][T15747] 9pnet_fd: Insufficient options for proto=fd [ 517.759066][T15753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3687'. [ 517.947502][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3687'. [ 518.272438][T11781] team0 (unregistering): Port device team_slave_1 removed [ 518.327741][T11781] team0 (unregistering): Port device team_slave_0 removed [ 518.874153][ T5132] Bluetooth: hci3: command 0x0406 tx timeout [ 519.244804][T15627] chnl_net:caif_netlink_parms(): no params data found [ 519.246250][T15780] 9pnet_fd: Insufficient options for proto=fd [ 520.458212][T15783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3697'. [ 520.656189][T15627] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.701249][T15627] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.708485][T15627] bridge_slave_0: entered allmulticast mode [ 520.768229][T15627] bridge_slave_0: entered promiscuous mode [ 520.775727][T15627] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.791214][T15627] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.851265][T15627] bridge_slave_1: entered allmulticast mode [ 520.858120][T15627] bridge_slave_1: entered promiscuous mode [ 520.940140][T15627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.973032][T15627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.019514][T15627] team0: Port device team_slave_0 added [ 521.047287][T15627] team0: Port device team_slave_1 added [ 521.088396][T15627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.101199][T15627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.152587][T15627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.174488][T15627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.186380][T15627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.218228][T15627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.256193][T15627] hsr_slave_0: entered promiscuous mode [ 521.263563][T15627] hsr_slave_1: entered promiscuous mode [ 521.277013][T15627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.285082][T15627] Cannot create hsr debugfs directory [ 522.284369][T15627] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 522.302783][T15627] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 522.316509][T15627] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 522.325932][T15627] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 522.432217][T15627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.482687][T15627] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.161248][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.168472][T11781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.248731][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'. [ 523.285242][T11781] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.292423][T11781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.443260][T15838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3717'. [ 523.572213][T15848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3717'. [ 523.586358][T15847] 9pnet_fd: Insufficient options for proto=fd [ 524.165044][ T8279] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 525.025464][T15627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.764192][T15873] capability: warning: `syz.3.3727' uses deprecated v2 capabilities in a way that may be insecure [ 526.110913][T15886] 9pnet_fd: Insufficient options for proto=fd [ 526.141876][T15889] fuse: Unknown parameter 'user_i00000000000000000000' [ 526.221868][T15627] veth0_vlan: entered promiscuous mode [ 526.250825][T15627] veth1_vlan: entered promiscuous mode [ 526.286913][T15627] veth0_macvtap: entered promiscuous mode [ 526.307942][T15627] veth1_macvtap: entered promiscuous mode [ 526.506767][T15627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.517396][T15627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.527354][T15627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.537909][T15627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.547897][T15627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.343097][T15627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.431467][T15627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.442059][T15627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.453186][T15627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.482906][T15627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.515182][T15627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.541063][T15627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.573628][T15627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.595502][T15627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.639910][T15627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.663200][T15627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.517466][T15627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.568728][T15627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.613690][T15627] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.630978][T15627] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.640841][T15627] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.652213][T15627] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.782520][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.840027][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.849294][T11759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.859803][T11759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.497934][T15932] fuse: Unknown parameter 'user_i00000000000000000000' [ 531.698562][T11742] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.825049][T11742] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.838900][T15967] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3760'. [ 531.977163][T11742] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.087212][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 532.099527][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 532.211352][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 532.226368][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 532.235806][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 532.245546][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 532.460935][T11742] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.847758][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 532.847775][ T29] audit: type=1326 audit(1740812817.292:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.7.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c9d8d169 code=0x7fc00000 [ 533.110915][T11742] bridge_slave_1: left allmulticast mode [ 533.129388][T11742] bridge_slave_1: left promiscuous mode [ 533.145289][T11742] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.328499][T11742] bridge_slave_0: left allmulticast mode [ 533.338827][T11742] bridge_slave_0: left promiscuous mode [ 533.344724][T11742] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.386381][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.397795][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.407381][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.418034][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.425914][ T5132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 533.436911][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.782335][T16005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3775'. [ 534.318509][ T5828] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 534.471118][ T5828] Bluetooth: hci0: command tx timeout [ 534.556590][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3777'. [ 534.842318][T11742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.853468][T11742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.882525][T11742] bond0 (unregistering): Released all slaves [ 535.054658][T15975] chnl_net:caif_netlink_parms(): no params data found [ 535.362672][ T5828] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 535.372088][ T5828] Bluetooth: hci4: Injecting HCI hardware error event [ 535.389273][ T5828] Bluetooth: hci4: hardware error 0x00 [ 535.512594][ T5132] Bluetooth: hci2: command tx timeout [ 536.024919][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.024965][T15975] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.025099][T15975] bridge_slave_0: entered allmulticast mode [ 536.025839][T15975] bridge_slave_0: entered promiscuous mode [ 536.027062][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.027102][T15975] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.027214][T15975] bridge_slave_1: entered allmulticast mode [ 536.039736][T15975] bridge_slave_1: entered promiscuous mode [ 536.114805][T11742] hsr_slave_0: left promiscuous mode [ 536.136245][T11742] hsr_slave_1: left promiscuous mode [ 536.148987][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.173813][T11742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.199650][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.228739][T11742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.261527][T11742] veth1_macvtap: left promiscuous mode [ 536.267814][T11742] veth0_macvtap: left promiscuous mode [ 536.276025][T11742] veth1_vlan: left promiscuous mode [ 536.281544][T11742] veth0_vlan: left promiscuous mode [ 536.563953][ T5132] Bluetooth: hci0: command tx timeout [ 536.719081][T11742] team0 (unregistering): Port device team_slave_1 removed [ 536.770236][T11742] team0 (unregistering): Port device team_slave_0 removed [ 537.236721][T15975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.264823][T16039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3786'. [ 537.285373][T15975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.385019][T15975] team0: Port device team_slave_0 added [ 537.416351][T15975] team0: Port device team_slave_1 added [ 537.508476][T15975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.515870][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.549337][T15975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.565328][T15975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.581186][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.611140][ T5132] Bluetooth: hci2: command tx timeout [ 537.641691][T15975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.682177][T15996] chnl_net:caif_netlink_parms(): no params data found [ 537.729724][T15975] hsr_slave_0: entered promiscuous mode [ 537.739356][T15975] hsr_slave_1: entered promiscuous mode [ 537.751279][T15975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.759003][T15975] Cannot create hsr debugfs directory [ 537.831750][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 537.903448][T15996] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.910698][T15996] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.921366][T15996] bridge_slave_0: entered allmulticast mode [ 537.928458][T15996] bridge_slave_0: entered promiscuous mode [ 537.950886][T15996] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.958852][T15996] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.966345][T15996] bridge_slave_1: entered allmulticast mode [ 537.974495][T15996] bridge_slave_1: entered promiscuous mode [ 538.010687][T11742] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.081563][T16051] 9pnet_virtio: no channels available for device 127.0.0.1 [ 538.336927][T11742] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.382698][T15996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.407570][T15996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.453309][T11742] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.631664][ T5828] Bluetooth: hci0: command tx timeout [ 538.785554][T11742] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.897437][T15996] team0: Port device team_slave_0 added [ 538.909988][T15996] team0: Port device team_slave_1 added [ 538.938263][T15975] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 538.964313][T15975] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 538.994838][T15975] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 539.016265][T15975] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 539.073085][T15996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.083181][T15996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.110725][T15996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.123076][T15996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.130075][T15996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.171290][T15996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.253015][T11742] bridge_slave_1: left allmulticast mode [ 539.258798][T11742] bridge_slave_1: left promiscuous mode [ 539.266790][T11742] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.287549][T11742] bridge_slave_0: left allmulticast mode [ 539.298846][T11742] bridge_slave_0: left promiscuous mode [ 539.309835][T11742] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.681130][ T5828] Bluetooth: hci2: command tx timeout [ 539.780586][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 539.795180][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 539.808781][ T5132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 539.816642][ T5132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 539.824239][ T5132] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 539.831910][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 540.038818][T11742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.048845][T11742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.058565][T11742] bond0 (unregistering): Released all slaves [ 540.069469][T15996] hsr_slave_0: entered promiscuous mode [ 540.077086][T15996] hsr_slave_1: entered promiscuous mode [ 540.089134][T15996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.096799][T15996] Cannot create hsr debugfs directory [ 540.396137][T16083] 9pnet_fd: Insufficient options for proto=fd [ 540.551814][T11742] hsr_slave_0: left promiscuous mode [ 540.559008][T11742] hsr_slave_1: left promiscuous mode [ 540.571463][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.578959][T11742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.591815][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.599259][T11742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.616623][T16090] 9pnet_virtio: no channels available for device 127.0.0.1 [ 540.653483][T11742] veth1_macvtap: left promiscuous mode [ 540.664516][T11742] veth0_macvtap: left promiscuous mode [ 540.676511][T11742] veth1_vlan: left promiscuous mode [ 540.686281][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3801'. [ 540.695862][T11742] veth0_vlan: left promiscuous mode [ 540.711536][ T5828] Bluetooth: hci0: command tx timeout [ 541.756956][ T5828] Bluetooth: hci2: command tx timeout [ 541.864014][T16104] 9pnet_fd: Insufficient options for proto=fd [ 541.903070][T11742] team0 (unregistering): Port device team_slave_1 removed [ 541.911730][ T5828] Bluetooth: hci1: command tx timeout [ 541.998057][T11742] team0 (unregistering): Port device team_slave_0 removed [ 542.791195][ T5828] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 542.801487][ T5828] Bluetooth: hci3: Injecting HCI hardware error event [ 542.812537][ T5828] Bluetooth: hci3: hardware error 0x00 [ 543.620114][T16125] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3814'. [ 543.706012][T16127] 9pnet_fd: Insufficient options for proto=fd [ 543.944425][T15975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.962036][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3816'. [ 543.996146][ T5132] Bluetooth: hci1: command tx timeout [ 544.047241][T15975] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.112908][T11731] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.119980][T11731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.145400][T11731] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.152551][T11731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.163442][T16078] chnl_net:caif_netlink_parms(): no params data found [ 544.281148][T16078] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.291995][T16078] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.299228][T16078] bridge_slave_0: entered allmulticast mode [ 544.332202][T16078] bridge_slave_0: entered promiscuous mode [ 544.356484][T16078] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.373120][T16078] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.380326][T16078] bridge_slave_1: entered allmulticast mode [ 544.387158][T16078] bridge_slave_1: entered promiscuous mode [ 544.434979][T16078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.459188][T16078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.524790][T11742] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.555910][T16078] team0: Port device team_slave_0 added [ 544.575099][T16078] team0: Port device team_slave_1 added [ 544.620245][T11742] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.636159][T15996] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 544.644615][T16078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.655381][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.682206][T16078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.694140][T16078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.702167][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.729735][T16078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.742616][T15996] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 544.763549][T11742] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.789283][T15975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.796536][T15996] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 544.807169][T15996] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 544.860755][T11742] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.879417][T16078] hsr_slave_0: entered promiscuous mode [ 544.887556][T16078] hsr_slave_1: entered promiscuous mode [ 544.894395][T16078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.904860][T16078] Cannot create hsr debugfs directory [ 544.952989][ T5828] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 545.069879][T11742] bridge_slave_1: left promiscuous mode [ 545.076106][T11742] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.086657][T11742] bridge_slave_0: left allmulticast mode [ 545.092735][T11742] bridge_slave_0: left promiscuous mode [ 545.098436][T11742] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.218453][T16154] fuse: Unknown parameter '0x0000000000000003' [ 546.010903][T11742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.021520][T11742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.032542][T11742] bond0 (unregistering): Released all slaves [ 546.071296][ T5132] Bluetooth: hci1: command tx timeout [ 546.088603][T15996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.257433][T15996] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.325193][T11745] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.332308][T11745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.373721][T11731] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.380954][T11731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.445776][T15975] veth0_vlan: entered promiscuous mode [ 546.476769][T11742] hsr_slave_0: left promiscuous mode [ 546.538536][T11742] hsr_slave_1: left promiscuous mode [ 546.553216][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.576479][T11742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.584454][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.596203][T11742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.629520][T11742] veth1_macvtap: left promiscuous mode [ 546.638443][T11742] veth0_macvtap: left promiscuous mode [ 546.647787][T11742] veth1_vlan: left promiscuous mode [ 546.655918][T11742] veth0_vlan: left promiscuous mode [ 547.986312][T11742] team0 (unregistering): Port device team_slave_1 removed [ 548.059193][T11742] team0 (unregistering): Port device team_slave_0 removed [ 548.162752][ T5132] Bluetooth: hci1: command tx timeout [ 548.720468][T15975] veth1_vlan: entered promiscuous mode [ 548.877335][T15975] veth0_macvtap: entered promiscuous mode [ 548.954213][T15975] veth1_macvtap: entered promiscuous mode [ 549.105521][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.130373][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.150415][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.171957][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.188191][T15975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.211872][T16078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 549.236891][T16078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 549.254136][T15996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.270867][T16078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 549.287612][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.302680][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.320016][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.348282][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.370337][T15975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.388352][T16078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 549.410488][T15975] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.432402][T15975] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.450213][T15975] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.469114][T15975] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.532134][T15996] veth0_vlan: entered promiscuous mode [ 549.607840][T15996] veth1_vlan: entered promiscuous mode [ 549.682229][T15996] veth0_macvtap: entered promiscuous mode [ 549.735273][T15996] veth1_macvtap: entered promiscuous mode [ 549.775312][T11735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.787795][T11735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.818697][T11781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.829677][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.845841][T11781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.854728][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.870129][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.881160][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.892220][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.903656][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.915206][T15996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.935159][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.956146][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.966565][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.979451][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.989429][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.000497][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.011765][T15996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.035783][T16078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.056854][T15996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.073612][T15996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.082621][T15996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.091404][T15996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.168664][T16078] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.213876][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.221054][T11781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.302286][T11735] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.309432][T11735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.568343][T11742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.577286][T11742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.630473][T11742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.659412][T11742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.805562][T16078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.859196][T16078] veth0_vlan: entered promiscuous mode [ 550.880686][T16078] veth1_vlan: entered promiscuous mode [ 550.925475][T16078] veth0_macvtap: entered promiscuous mode [ 550.937247][T16078] veth1_macvtap: entered promiscuous mode [ 550.993233][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.013320][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.023350][T16208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3833'. [ 551.024499][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.056787][ T29] audit: type=1400 audit(1740812835.502:1698): avc: denied { map } for pid=16209 comm="syz.5.3834" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 551.082349][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.261557][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.311362][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.448880][T16221] fuse: Unknown parameter '0x0000000000000003' [ 551.471802][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.489432][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.502256][T16078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.517279][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.529410][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.539830][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.592468][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.610387][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.635268][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.656177][T16078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.689736][T16078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.712114][T16078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.749995][T16078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.769218][T16078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.789086][T16078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.808952][T16078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.279766][T11729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.301942][T11729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.350718][T11729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.375329][T11729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.811145][T15633] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 552.972447][T15633] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 552.986661][T15633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.997181][T15633] usb 1-1: config 0 descriptor?? [ 553.248667][T15633] hackrf 1-1:0.0: usb_control_msg() failed -32 request 0e [ 553.272012][T15633] hackrf 1-1:0.0: Could not detect board [ 553.286407][T15633] hackrf 1-1:0.0: probe with driver hackrf failed with error -32 [ 553.294883][T16260] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3849'. [ 553.305998][T15633] usb 1-1: USB disconnect, device number 21 [ 554.642844][T16287] 9pnet_virtio: no channels available for device 127.0.0.1 [ 555.164590][T16292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3861'. [ 556.393861][T16309] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3867'. [ 556.832006][T16321] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3872'. [ 558.246417][T16341] 9pnet_virtio: no channels available for device 127.0.0.1 [ 559.268520][T16355] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3883'. [ 559.780881][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 559.888391][T16381] fuse: Unknown parameter 'fd0x0000000000000003' [ 560.001471][T16384] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3891'. [ 560.482337][T16394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3894'. [ 562.165739][ T29] audit: type=1400 audit(1740812846.612:1699): avc: denied { getopt } for pid=16416 comm="syz.5.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 562.202527][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3903'. [ 562.808443][T16421] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 562.878095][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.953717][T16431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3906'. [ 564.313705][ T5132] Bluetooth: hci0: command 0x0401 tx timeout [ 565.405509][T16465] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3918'. [ 565.575284][T16470] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3920'. [ 565.621140][ T8288] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 565.637093][T16471] 9pnet_virtio: no channels available for device 127.0.0.1 [ 565.932477][ T8288] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 565.945001][ T8288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.960062][ T8288] usb 1-1: config 0 descriptor?? [ 565.970109][ T8288] cp210x 1-1:0.0: cp210x converter detected [ 566.515968][ T8288] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 566.670423][T16488] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 567.002123][ T8288] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 567.009755][ T8288] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 567.019243][ T8288] usb 1-1: cp210x converter now attached to ttyUSB0 [ 567.027167][ T8288] usb 1-1: USB disconnect, device number 22 [ 567.035503][ T8288] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 567.043531][ T8288] cp210x 1-1:0.0: device disconnected [ 567.178726][T16499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3929'. [ 567.285672][T16507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3933'. [ 567.511179][ T8288] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 567.682589][ T8288] usb 10-1: config 0 has an invalid interface number: 91 but max is 0 [ 567.997777][ T8288] usb 10-1: config 0 has no interface number 0 [ 568.026786][ T8288] usb 10-1: config 0 interface 91 has no altsetting 0 [ 568.056555][ T8288] usb 10-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 568.077911][ T8288] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.143164][ T8288] usb 10-1: config 0 descriptor?? [ 568.206997][T16531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3942'. [ 568.362268][ T8288] usb 10-1: string descriptor 0 read error: -71 [ 568.389884][ T8288] usb 10-1: Found UVC 0.00 device (174f:5212) [ 568.414439][ T8288] usb 10-1: No valid video chain found. [ 568.431364][ T8288] usb 10-1: USB disconnect, device number 2 [ 568.823300][T16548] 9pnet_virtio: no channels available for device 127.0.0.1 [ 569.371394][ T29] audit: type=1400 audit(1740812853.812:1700): avc: denied { append } for pid=16549 comm="syz.5.3949" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 569.845242][T16565] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3955'. [ 570.448130][T16578] 9pnet_fd: Insufficient options for proto=fd [ 570.930912][T16590] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 571.112856][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3967'. [ 571.356992][T16608] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3969'. [ 571.476436][T16613] 9pnet_virtio: no channels available for device 127.0.0.1 [ 573.368320][T16635] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 573.608885][T16640] 9pnet_virtio: no channels available for device 127.0.0.1 [ 575.608093][ T5132] Bluetooth: hci0: command 0x0401 tx timeout [ 576.551075][T16675] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 576.803040][T16680] trusted_key: encrypted_key: insufficient parameters specified [ 577.087689][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4006'. [ 577.277597][T16705] 9pnet_virtio: no channels available for device 127.0.0.1 [ 577.993588][T16712] 9pnet_virtio: no channels available for device 127.0.0.1 [ 578.780491][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 579.189860][T16724] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 580.642468][T15633] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 580.703809][T16756] 9pnet_virtio: no channels available for device 127.0.0.1 [ 581.084944][T15633] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 581.109509][T15633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.117673][T15633] usb 1-1: Product: syz [ 581.123398][T15633] usb 1-1: Manufacturer: syz [ 581.128052][T15633] usb 1-1: SerialNumber: syz [ 581.133129][ T5828] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 581.136849][T15633] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 581.196694][ T8280] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 581.420118][T16742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.432872][T16742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.485887][T15633] usb 1-1: USB disconnect, device number 23 [ 582.241040][ T8280] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 582.269391][ T8280] ath9k_htc: Failed to initialize the device [ 582.314541][T15633] usb 1-1: ath9k_htc: USB layer deinitialized [ 582.743638][T16802] 9pnet_virtio: no channels available for device 127.0.0.1 [ 583.631179][ T1772] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 583.801341][ T1772] usb 1-1: Using ep0 maxpacket: 32 [ 583.814401][ T1772] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 583.824856][ T1772] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 583.839563][ T1772] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 583.850638][ T1772] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 583.859106][ T1772] usb 1-1: Product: syz [ 583.868481][ T1772] usb 1-1: Manufacturer: syz [ 583.876404][ T1772] hub 1-1:4.0: bad descriptor, ignoring hub [ 583.887222][ T1772] hub 1-1:4.0: probe with driver hub failed with error -5 [ 583.896091][ T1772] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 583.998187][T16831] syzkaller1: entered promiscuous mode [ 584.003913][T16831] syzkaller1: entered allmulticast mode [ 584.691171][T15633] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 584.851080][T15633] usb 3-1: Using ep0 maxpacket: 8 [ 584.857276][T15633] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 584.868948][T15633] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 584.879214][T15633] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 584.889605][T15633] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.902607][T15633] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 584.911693][T15633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.130516][T15633] usb 3-1: GET_CAPABILITIES returned 0 [ 585.140397][T15633] usbtmc 3-1:16.0: can't read capabilities [ 585.359300][ T1772] usb 3-1: USB disconnect, device number 9 [ 585.898684][T16881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4071'. [ 585.961341][T16882] 9pnet_virtio: no channels available for device 127.0.0.1 [ 586.631357][ T29] audit: type=1326 audit(1740812871.052:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 586.953706][ T865] usb 1-1: USB disconnect, device number 24 [ 586.974587][ T29] audit: type=1326 audit(1740812871.052:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 587.002114][ T29] audit: type=1326 audit(1740812871.052:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 587.026402][ T29] audit: type=1326 audit(1740812871.062:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 587.055843][ T29] audit: type=1326 audit(1740812871.062:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 587.080290][ T29] audit: type=1326 audit(1740812871.072:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 587.103999][ T29] audit: type=1326 audit(1740812871.072:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 587.148086][ T29] audit: type=1326 audit(1740812871.072:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 589.025440][T16934] 9pnet_virtio: no channels available for device 127.0.0.1 [ 589.981436][T16974] 9pnet_virtio: no channels available for device 127.0.0.1 [ 592.392947][T17017] 9pnet_virtio: no channels available for device 127.0.0.1 [ 593.319489][ T8282] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 593.481331][ T8282] usb 10-1: Using ep0 maxpacket: 32 [ 593.497222][ T8282] usb 10-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 593.529795][ T8282] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 593.548206][ T8282] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 593.575063][ T8282] usb 10-1: Product: syz [ 593.586854][ T8282] usb 10-1: Manufacturer: syz [ 593.629825][ T8282] hub 10-1:4.0: bad descriptor, ignoring hub [ 593.667603][ T8282] hub 10-1:4.0: probe with driver hub failed with error -5 [ 593.746587][ T8282] usbhid 10-1:4.0: couldn't find an input interrupt endpoint [ 593.924408][T17038] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4129'. [ 593.941003][ T29] audit: type=1326 audit(1740812878.362:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.3.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 594.034903][ T29] audit: type=1326 audit(1740812878.362:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.3.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 594.170225][ T29] audit: type=1326 audit(1740812878.362:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.3.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 594.275535][ T29] audit: type=1326 audit(1740812878.362:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.3.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 594.329887][ T29] audit: type=1326 audit(1740812878.362:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.3.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 594.404283][ T29] audit: type=1326 audit(1740812878.372:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.3.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 594.490714][ T29] audit: type=1326 audit(1740812878.372:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.3.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 594.530019][ T29] audit: type=1326 audit(1740812878.372:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.3.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 594.566314][ T29] audit: type=1326 audit(1740812878.372:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.3.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 594.646107][ T29] audit: type=1326 audit(1740812878.372:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17037 comm="syz.3.4129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x7ffc0000 [ 595.066954][T17059] 9pnet_virtio: no channels available for device 127.0.0.1 [ 596.598470][ T8282] usb 10-1: USB disconnect, device number 3 [ 596.660372][T17084] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 597.162677][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4155'. [ 598.156584][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 598.208115][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'. [ 598.221143][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'. [ 598.314892][T17130] 9pnet_virtio: no channels available for device 127.0.0.1 [ 599.093792][T17141] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4166'. [ 599.763602][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4174'. [ 600.111894][T17170] 9pnet_virtio: no channels available for device 127.0.0.1 [ 603.431260][ T1772] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 603.611233][ T1772] usb 3-1: Using ep0 maxpacket: 32 [ 603.629096][ T1772] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 603.637921][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4209'. [ 603.664487][ T1772] usb 3-1: config 0 has no interface number 0 [ 603.671152][ T1772] usb 3-1: config 0 interface 184 has no altsetting 0 [ 603.697845][ T1772] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 603.777437][T17246] 9pnet_virtio: no channels available for device 127.0.0.1 [ 604.214068][ T1772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.228591][ T1772] usb 3-1: Product: syz [ 604.233071][ T1772] usb 3-1: Manufacturer: syz [ 604.237686][ T1772] usb 3-1: SerialNumber: syz [ 604.267440][ T1772] usb 3-1: config 0 descriptor?? [ 604.281690][ T1772] smsc75xx v1.0.0 [ 604.738977][ T1772] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 604.802805][ T1772] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 604.828094][ T1772] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 604.849148][ T1772] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 605.566737][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 605.566750][ T29] audit: type=1326 audit(1740812890.012:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17268 comm="syz.0.4216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84c8d8d169 code=0x0 [ 606.020590][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4222'. [ 606.196933][T17295] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4225'. [ 606.230413][ T8282] usb 3-1: USB disconnect, device number 10 [ 607.853999][T17368] netlink: 'syz.9.4257': attribute type 6 has an invalid length. [ 607.867129][T17368] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.4257'. [ 609.351134][ T8279] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 609.507171][ T8279] usb 3-1: Using ep0 maxpacket: 8 [ 609.524566][ T8279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 609.543279][ T8279] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 609.556650][ T8279] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 609.570670][ T8279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.588105][ T8279] usb 3-1: Product: syz [ 609.594090][ T8279] usb 3-1: Manufacturer: syz [ 609.598715][ T8279] usb 3-1: SerialNumber: syz [ 609.609067][ T8279] usb 3-1: config 0 descriptor?? [ 609.818000][T17396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.842826][T17396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.862939][T17419] netlink: 'syz.5.4276': attribute type 1 has an invalid length. [ 609.872491][T17396] program syz.2.4267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 609.883398][T17396] tipc: Can't bind to reserved service type 1 [ 609.903682][T17419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 609.931112][T17419] bond1: (slave veth7): Enslaving as an active interface with a down link [ 609.969712][T17419] bond1: (slave ip6erspan0): making interface the new active one [ 610.006589][T17419] ip6erspan0: entered promiscuous mode [ 610.014732][T17419] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 610.038353][T17417] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 610.044899][T17417] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 610.094337][T17417] vhci_hcd vhci_hcd.0: Device attached [ 610.103416][ T1772] usb 3-1: USB disconnect, device number 11 [ 610.120332][T17423] vhci_hcd: connection closed [ 610.122958][T11745] vhci_hcd: stop threads [ 610.135452][T11745] vhci_hcd: release socket [ 610.145730][T11745] vhci_hcd: disconnect device [ 611.385288][T17442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4281'. [ 611.722297][T17452] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 611.727601][T17462] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4290'. [ 611.745499][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4290'. [ 612.822516][ T8280] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 613.151148][ T8280] usb 3-1: Using ep0 maxpacket: 32 [ 613.164346][ T8280] usb 3-1: config 0 interface 0 has no altsetting 0 [ 613.830170][ T8280] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 613.911876][ T8280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.920349][ T8280] usb 3-1: Product: syz [ 613.925378][ T8280] usb 3-1: Manufacturer: syz [ 613.929990][ T8280] usb 3-1: SerialNumber: syz [ 613.936328][ T8280] usb 3-1: config 0 descriptor?? [ 614.325742][T17522] 9pnet_virtio: no channels available for device 127.0.0.1 [ 614.535190][ T8280] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 614.753844][ T8280] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 614.771469][ T8280] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 614.956994][ T8280] usb 3-1: USB disconnect, device number 12 [ 615.189866][ T29] audit: type=1400 audit(1740812899.632:1738): avc: denied { map } for pid=17535 comm="syz.0.4320" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 615.551075][ T29] audit: type=1400 audit(1740812899.632:1739): avc: denied { execute } for pid=17535 comm="syz.0.4320" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 617.846351][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4337'. [ 618.414909][ T29] audit: type=1400 audit(1740812902.832:1740): avc: denied { read } for pid=17597 comm="iou-wrk-17600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 619.351112][ T865] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 619.545153][ T865] usb 1-1: device descriptor read/64, error -71 [ 619.801046][ T865] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 619.961113][ T865] usb 1-1: device descriptor read/64, error -71 [ 620.073590][ T865] usb usb1-port1: attempt power cycle [ 620.431116][ T865] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 620.619376][ T865] usb 1-1: device descriptor read/8, error -71 [ 620.871160][ T865] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 620.921659][ T865] usb 1-1: device descriptor read/8, error -71 [ 621.042935][ T865] usb usb1-port1: unable to enumerate USB device [ 621.551711][T17654] 9pnet_virtio: no channels available for device 127.0.0.1 [ 622.511263][ T1772] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 622.671116][ T1772] usb 1-1: Using ep0 maxpacket: 16 [ 622.680207][ T1772] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 622.694341][ T1772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.703133][ T1772] usb 1-1: Product: syz [ 622.709381][ T1772] usb 1-1: Manufacturer: syz [ 622.716866][ T1772] usb 1-1: SerialNumber: syz [ 622.732283][ T1772] usb 1-1: config 0 descriptor?? [ 622.744057][ T1772] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 622.757214][ T1772] usb 1-1: Detected FT232H [ 622.981254][ T29] audit: type=1326 audit(1740812907.342:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17669 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 623.246017][ T29] audit: type=1326 audit(1740812907.342:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17669 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 623.354560][ T1772] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 623.381112][ T1772] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 623.382502][T17570] ip6erspan0: left promiscuous mode [ 623.391668][ T1772] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 623.405985][ T1772] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 623.424371][ T29] audit: type=1326 audit(1740812907.342:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17669 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 623.448277][ T1772] usb 1-1: USB disconnect, device number 29 [ 623.474469][ T1772] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 623.501381][ T1772] ftdi_sio 1-1:0.0: device disconnected [ 623.666057][ T29] audit: type=1326 audit(1740812907.342:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17669 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 623.690422][ T29] audit: type=1326 audit(1740812907.342:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17669 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 623.714377][ T29] audit: type=1326 audit(1740812907.352:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17669 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 623.763010][ T29] audit: type=1326 audit(1740812907.352:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17669 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 623.863479][ T29] audit: type=1326 audit(1740812907.352:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17669 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feb58d169 code=0x7ffc0000 [ 624.235360][T17698] 9pnet_virtio: no channels available for device 127.0.0.1 [ 624.313587][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.432608][ T29] audit: type=1326 audit(1740812909.832:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17708 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c8d8d169 code=0x7ffc0000 [ 625.924425][ T29] audit: type=1326 audit(1740812909.832:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17708 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c8d8d169 code=0x7ffc0000 [ 625.947974][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.688408][T17731] 9pnet_virtio: no channels available for device 127.0.0.1 [ 627.325346][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4390'. [ 628.165922][ T1772] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 628.351123][ T1772] usb 1-1: Using ep0 maxpacket: 32 [ 628.363197][ T1772] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.377589][ T1772] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.413440][ T1772] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 628.424900][ T1772] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 628.440725][ T1772] usb 1-1: Product: syz [ 628.445153][ T1772] usb 1-1: Manufacturer: syz [ 628.466242][ T1772] hub 1-1:4.0: USB hub found [ 628.686533][T17780] 9pnet_virtio: no channels available for device 127.0.0.1 [ 629.184993][ T1772] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 629.373064][T17788] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.948230][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 630.948247][ T29] audit: type=1400 audit(1740812915.392:1757): avc: denied { bind } for pid=17812 comm="syz.3.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 631.007017][T17828] 9pnet_virtio: no channels available for device 127.0.0.1 [ 632.145086][ T1772] usb 1-1: USB disconnect, device number 30 [ 635.531398][ T5878] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 635.727917][ T5878] usb 10-1: Using ep0 maxpacket: 32 [ 635.758419][ T5878] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.803141][ T5878] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.837259][ T5878] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 635.860289][ T5878] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 635.885521][ T5878] usb 10-1: Product: syz [ 635.896477][ T5878] usb 10-1: Manufacturer: syz [ 635.916967][ T5878] hub 10-1:4.0: USB hub found [ 636.124130][ T5878] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 636.272673][T17884] overlayfs: failed to resolve './file1': -2 [ 636.321627][T17884] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 636.321627][T17884] program syz.5.4440 not setting count and/or reply_len properly [ 637.570147][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4444'. [ 638.616893][ T865] usb 10-1: USB disconnect, device number 4 [ 639.094624][ T29] audit: type=1400 audit(1740812923.512:1758): avc: denied { read append } for pid=17908 comm="syz.9.4448" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 639.201061][ T29] audit: type=1400 audit(1740812923.512:1759): avc: denied { open } for pid=17908 comm="syz.9.4448" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 639.321150][ T29] audit: type=1400 audit(1740812923.532:1760): avc: denied { ioctl } for pid=17908 comm="syz.9.4448" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 640.504371][T17936] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4453'. [ 641.221549][ T865] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 641.288516][T17944] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4456'. [ 641.392316][ T865] usb 1-1: Using ep0 maxpacket: 32 [ 641.398988][ T865] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.410723][ T865] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.440234][ T865] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 641.449706][ T865] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 641.561674][ T865] usb 1-1: Product: syz [ 641.566943][ T865] usb 1-1: Manufacturer: syz [ 642.173475][ T865] hub 1-1:4.0: USB hub found [ 642.378143][ T865] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 643.104802][T17969] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 644.073532][ T865] usb 1-1: USB disconnect, device number 31 [ 644.592559][ T29] audit: type=1400 audit(1740812929.032:1761): avc: denied { remount } for pid=17995 comm="syz.9.4474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 644.618298][T17996] option changes via remount are deprecated (pid=17995 comm=syz.9.4474) [ 644.633280][ T29] audit: type=1400 audit(1740812929.082:1762): avc: denied { read } for pid=17997 comm="syz.3.4475" name="file0" dev="tmpfs" ino=1780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 644.773938][T17998] block device autoloading is deprecated and will be removed. [ 645.004820][T18008] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4478'. [ 645.241101][ T8288] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 645.294555][T18018] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4481'. [ 645.611575][ T8288] usb 3-1: Using ep0 maxpacket: 32 [ 645.681754][T18021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4483'. [ 645.917154][ T8288] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.933253][ T8288] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.976830][ T8288] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 645.998925][ T8288] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 646.007785][ T8288] usb 3-1: Product: syz [ 646.016615][ T8288] usb 3-1: Manufacturer: syz [ 646.033132][ T8288] hub 3-1:4.0: USB hub found [ 646.251969][ T8288] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 648.118862][ T8288] usb 3-1: USB disconnect, device number 13 [ 648.651306][T18061] 9pnet_virtio: no channels available for device 127.0.0.1 [ 649.141160][T18065] syzkaller1: entered promiscuous mode [ 649.146719][T18065] syzkaller1: entered allmulticast mode [ 649.370019][T18067] fuse: Bad value for 'fd' [ 649.741111][ T8282] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 649.901113][ T8282] usb 1-1: Using ep0 maxpacket: 32 [ 649.947754][ T8282] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.971628][ T8282] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.999964][ T8282] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 650.019643][ T8282] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 650.055925][ T8282] usb 1-1: Product: syz [ 650.070381][ T8282] usb 1-1: Manufacturer: syz [ 650.091596][ T8282] hub 1-1:4.0: USB hub found [ 650.311602][ T8282] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 650.465956][ T29] audit: type=1400 audit(1740812934.912:1763): avc: denied { relabelfrom } for pid=18086 comm="syz.2.4508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 650.529102][ T29] audit: type=1400 audit(1740812934.942:1764): avc: denied { relabelto } for pid=18086 comm="syz.2.4508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 651.357028][T18099] 9pnet_virtio: no channels available for device 127.0.0.1 [ 653.041540][ T865] usb 1-1: USB disconnect, device number 32 [ 653.129432][T18108] fuse: Bad value for 'fd' [ 653.468511][ T8282] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 654.521104][ T8282] usb 1-1: device descriptor read/64, error -71 [ 656.131103][ T8282] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 656.990091][T18137] 9pnet_virtio: no channels available for device 127.0.0.1 [ 657.591359][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 657.597606][T18119] Bluetooth: hci2: command 0x0406 tx timeout [ 657.692281][T18143] fuse: Bad value for 'fd' [ 659.291293][ T8279] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 659.431209][ T8279] usb 1-1: device descriptor read/64, error -71 [ 659.861440][ T8279] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 660.163681][ T8279] usb 1-1: device descriptor read/64, error -71 [ 660.278827][ T8279] usb usb1-port1: attempt power cycle [ 660.621304][ T8279] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 660.644756][ T8279] usb 1-1: device descriptor read/8, error -71 [ 661.008460][ T8279] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 661.031703][ T8279] usb 1-1: device descriptor read/8, error -71 [ 661.129094][T18181] 9pnet_virtio: no channels available for device 127.0.0.1 [ 661.176251][ T8279] usb usb1-port1: unable to enumerate USB device [ 662.724082][T18189] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 663.564520][T18199] 9pnet_fd: Insufficient options for proto=fd [ 663.609237][T18203] option changes via remount are deprecated (pid=18196 comm=syz.5.4542) [ 664.238770][ T5132] Bluetooth: hci0: command 0x0401 tx timeout [ 666.785251][ T5878] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 667.164208][ T5878] usb 1-1: no configurations [ 667.175219][ T5878] usb 1-1: can't read configurations, error -22 [ 667.184064][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 667.195557][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 667.205151][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 667.214134][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 667.223382][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 667.230574][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 667.319003][T18240] 9pnet_fd: Insufficient options for proto=fd [ 667.331252][ T5878] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 667.350372][T18235] ISOFS: Unable to identify CD-ROM format. [ 667.459752][T11745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.504001][T18236] chnl_net:caif_netlink_parms(): no params data found [ 667.513817][ T5878] usb 1-1: no configurations [ 667.540547][ T5878] usb 1-1: can't read configurations, error -22 [ 667.579934][ T5878] usb usb1-port1: attempt power cycle [ 667.618733][T11745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.941203][ T5878] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 668.271345][T18236] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.288892][T18236] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.330520][ T5878] usb 1-1: no configurations [ 668.331059][T18236] bridge_slave_0: entered allmulticast mode [ 668.335359][ T5878] usb 1-1: can't read configurations, error -22 [ 668.348917][T18236] bridge_slave_0: entered promiscuous mode [ 668.397988][T18260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4560'. [ 668.407183][T11745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.461270][T18236] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.468407][T18236] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.481447][ T5878] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 668.585456][T18236] bridge_slave_1: entered allmulticast mode [ 668.592364][T18236] bridge_slave_1: entered promiscuous mode [ 668.631648][T11745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.641947][ T5878] usb 1-1: no configurations [ 668.641968][ T5878] usb 1-1: can't read configurations, error -22 [ 668.642167][ T5878] usb usb1-port1: unable to enumerate USB device [ 669.353096][ T5132] Bluetooth: hci2: command tx timeout [ 669.439147][T18236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.462547][T18236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.513559][T18236] team0: Port device team_slave_0 added [ 669.520628][T18236] team0: Port device team_slave_1 added [ 669.579271][T18236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.588347][T18236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.971667][T18236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.018684][T18236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.029425][T18236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.055726][T18236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.159982][T11745] bridge_slave_1: left allmulticast mode [ 670.166089][T11745] bridge_slave_1: left promiscuous mode [ 670.173232][T11745] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.208838][T11745] bridge_slave_0: left allmulticast mode [ 670.218494][T11745] bridge_slave_0: left promiscuous mode [ 670.224334][T11745] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.414041][T18281] 9pnet_fd: Insufficient options for proto=fd [ 671.493121][ T5132] Bluetooth: hci2: command tx timeout [ 672.158145][T11745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.176666][T11745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.187602][T11745] bond0 (unregistering): Released all slaves [ 672.374690][T18236] hsr_slave_0: entered promiscuous mode [ 672.397001][T18236] hsr_slave_1: entered promiscuous mode [ 672.421733][T18236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.458381][T18236] Cannot create hsr debugfs directory [ 672.591132][T15633] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 672.644454][T11745] hsr_slave_0: left promiscuous mode [ 672.652464][T11745] hsr_slave_1: left promiscuous mode [ 672.658932][T11745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.667592][T11745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.677553][T11745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.686266][T11745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.712256][T11745] veth1_macvtap: left promiscuous mode [ 672.718934][T11745] veth0_macvtap: left promiscuous mode [ 672.725688][T11745] veth1_vlan: left promiscuous mode [ 672.734187][T11745] veth0_vlan: left promiscuous mode [ 672.762342][T15633] usb 1-1: Using ep0 maxpacket: 32 [ 672.786596][T15633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.815866][T15633] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 672.834826][T15633] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 672.856750][T15633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.930316][T15633] usb 1-1: config 0 descriptor?? [ 673.004327][T18301] ISOFS: Unable to identify CD-ROM format. [ 673.512016][ T5132] Bluetooth: hci2: command tx timeout [ 673.816292][T15633] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 673.889948][T11745] team0 (unregistering): Port device team_slave_1 removed [ 674.003860][T15633] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.040788][T15633] usb 10-1: config 0 has no interfaces? [ 674.050220][T15633] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 674.091366][T11745] team0 (unregistering): Port device team_slave_0 removed [ 674.098972][T15633] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.124074][T15633] usb 10-1: config 0 descriptor?? [ 675.309685][ T8288] usb 1-1: USB disconnect, device number 43 [ 675.601080][ T5132] Bluetooth: hci2: command tx timeout [ 677.080271][ T8288] usb 10-1: USB disconnect, device number 5 [ 677.222145][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4586'. [ 677.338624][T18347] ISOFS: Unable to identify CD-ROM format. [ 677.718223][T18236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 677.736447][T18236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 677.767312][T18236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 677.915961][T18236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 678.497937][T18236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.565838][T18236] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.596724][T11745] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.603848][T11745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.648961][T11745] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.656093][T11745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.157211][T18236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.567455][T18236] veth0_vlan: entered promiscuous mode [ 679.575982][T18236] veth1_vlan: entered promiscuous mode [ 679.592596][T18236] veth0_macvtap: entered promiscuous mode [ 680.568649][T18236] veth1_macvtap: entered promiscuous mode [ 680.720706][T18236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.752156][T18236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.765814][T18378] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 680.768714][T18236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.831140][T18236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.958826][T18236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.971869][T18236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.991106][T18236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.001812][T18236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.013183][T18236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.012423][T18236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.218522][T18236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.251099][T18236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.266636][T18236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.281097][T18236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.294208][T18236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.321013][T18236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.331788][T18236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.351888][T18236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.377747][T18236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.390980][T18236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.399698][T18236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.413655][T18236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.491453][ T5878] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 682.491865][T17570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.512336][T17570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.540822][T11781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.551324][T11781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.633436][ T5132] Bluetooth: hci0: command 0x0401 tx timeout [ 682.652656][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.669373][ T5878] usb 1-1: config 0 has no interfaces? [ 682.677969][ T5878] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 682.693235][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.705449][ T5878] usb 1-1: config 0 descriptor?? [ 683.288434][T18413] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4602'. [ 683.662646][T18418] 9pnet_virtio: no channels available for device 127.0.0.1 [ 685.372759][T18434] ISOFS: Unable to identify CD-ROM format. [ 685.507453][ T5878] usb 1-1: USB disconnect, device number 44 [ 685.774992][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.636617][T18447] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4613'. [ 686.784005][ T5878] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 687.091208][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 687.187961][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 687.319534][ T5878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 687.584268][ T5878] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 687.589811][T18455] overlayfs: failed to resolve './file0': -2 [ 687.599903][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.599931][ T5878] usb 1-1: Product: syz [ 687.599945][ T5878] usb 1-1: Manufacturer: syz [ 687.599961][ T5878] usb 1-1: SerialNumber: syz [ 687.613882][ T5878] usb 1-1: config 0 descriptor?? [ 688.127756][T18460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4618'. [ 688.524542][T18437] program syz.0.4610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.544414][ T29] audit: type=1400 audit(1740812972.992:1765): avc: denied { shutdown } for pid=18454 comm="syz.3.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 689.231526][ T29] audit: type=1326 audit(1740812973.222:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.9.4619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48fc78d169 code=0x0 [ 689.274721][ T8280] usb 1-1: USB disconnect, device number 45 [ 689.742393][ T1772] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 690.014957][ T1772] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.033852][ T1772] usb 10-1: config 0 has no interfaces? [ 690.039643][ T1772] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 690.051557][ T1772] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.070713][ T1772] usb 10-1: config 0 descriptor?? [ 690.233063][T18486] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4623'. [ 693.491705][ T29] audit: type=1326 audit(1740812976.892:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18497 comm="syz.4.4631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7139b8d169 code=0x0 [ 693.631068][ T865] usb 10-1: USB disconnect, device number 6 [ 698.032906][T18539] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 698.032906][T18539] program syz.4.4643 not setting count and/or reply_len properly [ 698.451598][ T1772] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 698.701613][ T1772] usb 5-1: Using ep0 maxpacket: 32 [ 698.719893][ T1772] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 698.743641][ T1772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.769712][ T1772] usb 5-1: config 0 descriptor?? [ 699.092556][T18548] ISOFS: Unable to identify CD-ROM format. [ 699.101245][ T865] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 699.211236][ T1772] usb 5-1: string descriptor 0 read error: -71 [ 699.227922][ T1772] usb 5-1: selecting invalid altsetting 3 [ 699.234086][ T1772] comedi comedi0: could not set alternate setting 3 in high speed [ 699.241970][ T1772] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 699.283993][ T1772] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22 [ 699.307848][ T1772] usb 5-1: USB disconnect, device number 8 [ 699.363027][ T865] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.391119][ T865] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 699.410474][ T865] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 699.429539][ T865] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.444856][ T865] usb 10-1: config 0 descriptor?? [ 701.474497][ T29] audit: type=1400 audit(1740812985.922:1768): avc: denied { mounton } for pid=18568 comm="syz.4.4653" path="/proc/37/task" dev="proc" ino=61678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 701.781181][ T8280] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 701.938552][ T865] usb 10-1: USB disconnect, device number 7 [ 701.961100][ T8280] usb 1-1: device descriptor read/64, error -71 [ 703.171037][ T8280] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 703.399794][ T8280] usb 1-1: device descriptor read/64, error -71 [ 704.231689][ T8280] usb usb1-port1: attempt power cycle [ 704.331577][T18597] 9pnet_fd: Insufficient options for proto=fd [ 705.714309][T18617] 9pnet_fd: Insufficient options for proto=fd [ 709.133044][T18651] 9pnet_fd: Insufficient options for proto=fd [ 711.501192][ T8280] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 711.654570][T18673] 9pnet_fd: Insufficient options for proto=fd [ 711.671452][ T8280] usb 1-1: Using ep0 maxpacket: 32 [ 711.834660][ T8280] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.141089][ T8280] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 712.258676][ T8280] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 712.271351][ T8280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.323298][ T8280] usb 1-1: config 0 descriptor?? [ 712.351902][ T8280] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 715.830487][ T865] usb 1-1: USB disconnect, device number 49 [ 715.981640][T18715] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 715.981640][T18715] program syz.9.4694 not setting count and/or reply_len properly [ 716.397531][ T1772] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 716.459868][T18720] 9pnet_fd: Insufficient options for proto=fd [ 717.475789][ T1772] usb 10-1: Using ep0 maxpacket: 32 [ 717.499907][ T1772] usb 10-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 717.525071][ T1772] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.033743][ T1772] usb 10-1: config 0 descriptor?? [ 718.671445][T18743] 9pnet_fd: Insufficient options for proto=fd [ 718.833044][ T1772] usb 10-1: string descriptor 0 read error: -71 [ 718.850619][ T1772] usb 10-1: selecting invalid altsetting 3 [ 718.860856][ T1772] comedi comedi0: could not set alternate setting 3 in high speed [ 718.877304][ T1772] usbduxsigma 10-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 718.993146][ T1772] usbduxsigma 10-1:0.0: probe with driver usbduxsigma failed with error -22 [ 719.527020][ T1772] usb 10-1: USB disconnect, device number 8 [ 721.051511][ T865] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 721.221148][ T865] usb 1-1: Using ep0 maxpacket: 32 [ 721.240763][ T865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.256905][ T865] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 721.291018][ T865] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 721.310290][ T865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.895862][ T865] usb 1-1: config 0 descriptor?? [ 721.903505][ T865] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 724.253513][T18803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4721'. [ 724.267588][ T8280] usb 1-1: USB disconnect, device number 50 [ 725.466925][T18824] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4728'. [ 727.208540][T18846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4734'. [ 728.451074][ T8280] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 728.542210][T15633] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 728.643214][ T8280] usb 10-1: Using ep0 maxpacket: 32 [ 728.677800][ T8280] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 728.688007][ T8280] usb 10-1: config 0 has no interface number 0 [ 728.703353][ T8280] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 728.723698][ T8280] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 728.733406][T15633] usb 5-1: Using ep0 maxpacket: 32 [ 728.738763][ T8280] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.748945][T15633] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.779674][T15633] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 728.793571][ T8280] usb 10-1: Product: syz [ 728.797838][ T8280] usb 10-1: Manufacturer: syz [ 728.809449][ T8280] usb 10-1: SerialNumber: syz [ 728.814631][T15633] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 728.836018][ T8280] usb 10-1: config 0 descriptor?? [ 728.985651][T15633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.009994][ T8280] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 729.048441][T15633] usb 5-1: config 0 descriptor?? [ 729.164697][ T8280] em28xx 10-1:0.132: Video interface 132 found: [ 729.177145][T15633] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 729.429720][ T8280] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 730.138812][ T8280] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 730.157935][ T8280] em28xx 10-1:0.132: board has no eeprom [ 730.231248][ T8280] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 730.337214][ T8280] em28xx 10-1:0.132: analog set to bulk mode. [ 730.356275][ T5869] em28xx 10-1:0.132: Registering V4L2 extension [ 730.525467][T18821] Set syz1 is full, maxelem 65536 reached [ 730.929637][ T8280] usb 10-1: USB disconnect, device number 9 [ 730.950451][ T8280] em28xx 10-1:0.132: Disconnecting em28xx [ 731.265859][T18881] overlayfs: failed to resolve './file1': -2 [ 732.043786][ T8279] usb 5-1: USB disconnect, device number 9 [ 732.265284][ T5869] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 732.284713][T18892] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4744'. [ 732.286527][ T5869] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 732.310136][ T5869] em28xx 10-1:0.132: No AC97 audio processor [ 732.485585][ T5869] usb 10-1: Decoder not found [ 732.490456][ T5869] em28xx 10-1:0.132: failed to create media graph [ 733.471120][ T5869] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 733.484525][ T5869] em28xx 10-1:0.132: Remote control support is not available for this card. [ 733.493615][ T8280] em28xx 10-1:0.132: Closing input extension [ 733.644057][ T8280] em28xx 10-1:0.132: Freeing device [ 737.298685][T18939] 9pnet_fd: Insufficient options for proto=fd [ 740.620495][T18963] overlayfs: failed to resolve './file1': -2 [ 740.647511][T18963] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 740.647511][T18963] program syz.9.4761 not setting count and/or reply_len properly [ 741.506262][T18969] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 743.154221][ T8280] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 743.511064][ T5132] Bluetooth: hci0: command 0x0401 tx timeout [ 743.745968][ T8280] usb 10-1: device descriptor read/64, error -71 [ 744.758129][T18996] 9pnet_virtio: no channels available for device 127.0.0.1 [ 745.253042][T18994] overlayfs: failed to clone upperpath [ 745.339229][T18992] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4770'. [ 746.962323][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4776'. [ 747.195483][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.295768][T19020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4777'. [ 747.489029][T19021] 9pnet_fd: Insufficient options for proto=fd [ 747.558554][T19013] 9pnet_fd: Insufficient options for proto=fd [ 747.610226][T19024] overlayfs: failed to resolve './file1': -2 [ 747.681276][T19024] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 747.681276][T19024] program syz.5.4779 not setting count and/or reply_len properly [ 749.714204][ T5132] Bluetooth: hci1: command 0x0406 tx timeout [ 749.715569][T19041] 9pnet_virtio: no channels available for device 127.0.0.1 [ 753.149831][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4788'. [ 753.450448][T19068] fuse: Invalid rootmode [ 753.753366][T19062] 9pnet_fd: Insufficient options for proto=fd [ 754.150880][T19075] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4792'. [ 754.230145][T19076] 9pnet_fd: Insufficient options for proto=fd [ 754.852814][T19090] option changes via remount are deprecated (pid=19082 comm=syz.9.4795) [ 755.533301][T19092] overlayfs: failed to resolve './file1': -2 [ 755.580208][T19092] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 755.580208][T19092] program syz.0.4796 not setting count and/or reply_len properly [ 756.215178][ T25] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 756.581134][ T25] usb 1-1: device descriptor read/64, error -71 [ 756.776585][T19104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4800'. [ 756.831066][ T25] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 757.520143][ T25] usb 1-1: device descriptor read/64, error -71 [ 757.651523][ T25] usb usb1-port1: attempt power cycle [ 759.027837][T19126] option changes via remount are deprecated (pid=19120 comm=syz.0.4807) [ 761.125306][ T29] audit: type=1326 audit(1740813044.942:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19135 comm="syz.4.4810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7139b8d169 code=0x0 [ 764.419698][T19163] overlayfs: failed to resolve './file1': -2 [ 764.442007][T19163] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 764.442007][T19163] program syz.4.4815 not setting count and/or reply_len properly [ 764.801015][ T5869] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 765.331034][ T5869] usb 5-1: device descriptor read/64, error -71 [ 765.682094][ T5869] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 765.993604][ T5869] usb 5-1: device descriptor read/64, error -71 [ 766.038903][T19172] 9pnet_fd: Insufficient options for proto=fd [ 766.101625][ T5869] usb usb5-port1: attempt power cycle [ 766.481405][ T5869] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 766.589544][ T5869] usb 5-1: device descriptor read/8, error -71 [ 767.681567][ T5869] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 767.765700][T19183] 9pnet_fd: Insufficient options for proto=fd [ 767.790849][ T5869] usb 5-1: device descriptor read/8, error -71 [ 768.021240][ T5869] usb usb5-port1: unable to enumerate USB device [ 769.201942][T19206] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4824'. [ 769.726574][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4827'. [ 770.593694][T19198] 9pnet_fd: Insufficient options for proto=fd [ 771.871613][ T1772] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 772.151169][ T1772] usb 5-1: Using ep0 maxpacket: 32 [ 772.163448][ T1772] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.582752][ T1772] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.594628][ T1772] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 772.604456][ T1772] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 772.614948][ T1772] usb 5-1: Product: syz [ 772.619131][ T1772] usb 5-1: Manufacturer: syz [ 772.627378][ T1772] hub 5-1:4.0: USB hub found [ 773.567427][ T1772] hub 5-1:4.0: 2 ports detected [ 773.616569][T19245] overlayfs: failed to resolve './file1': -2 [ 773.638362][T19248] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4838'. [ 773.878426][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4839'. [ 774.105540][T19249] 9pnet_fd: Insufficient options for proto=fd [ 774.423312][ T1772] usb 5-1: USB disconnect, device number 14 [ 776.504787][T19272] overlayfs: failed to resolve './file1': -2 [ 776.531336][T19259] 9pnet_fd: Insufficient options for proto=fd [ 779.349717][T19294] overlayfs: failed to resolve './file1': -2 [ 779.480664][T19299] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4853'. [ 780.739115][T19306] overlayfs: missing 'lowerdir' [ 780.974314][ T5878] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 781.681063][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 781.689123][ T5878] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.704953][ T5878] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.744563][ T5878] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 781.758243][ T5878] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 781.767508][ T5878] usb 5-1: Product: syz [ 781.772652][ T5878] usb 5-1: Manufacturer: syz [ 781.782025][ T5878] hub 5-1:4.0: USB hub found [ 782.230039][ T5878] hub 5-1:4.0: 2 ports detected [ 783.162072][ T29] audit: type=1326 audit(1740813066.962:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.0.4860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84c8d8d169 code=0x0 [ 784.524000][ T5878] usb 5-1: USB disconnect, device number 15 [ 786.646651][T19339] overlayfs: failed to resolve './file1': -2 [ 787.604921][T19339] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 787.604921][T19339] program syz.9.4864 not setting count and/or reply_len properly [ 787.827257][T19341] 9pnet_fd: Insufficient options for proto=fd [ 787.941024][ T8279] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 787.952497][ T5878] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 788.064049][T19348] 9pnet_virtio: no channels available for device 127.0.0.1 [ 788.081462][ T8279] usb 10-1: device descriptor read/64, error -71 [ 789.588972][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 789.654092][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.691046][ T8279] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 790.116361][ T5878] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 790.133166][ T5878] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 790.160991][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.179326][ T5878] usb 1-1: Product: syz [ 790.183697][ T5878] usb 1-1: Manufacturer: syz [ 790.188303][ T5878] usb 1-1: SerialNumber: syz [ 790.194700][ T5878] usb 1-1: config 0 descriptor?? [ 791.211657][ T29] audit: type=1326 audit(1740813075.122:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.3.4872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x0 [ 791.521051][ T8279] usb 10-1: device descriptor read/64, error -71 [ 791.590664][ T5878] usb 1-1: USB disconnect, device number 54 [ 791.604784][T19371] option changes via remount are deprecated (pid=19365 comm=syz.4.4873) [ 791.972045][ T8279] usb usb10-port1: attempt power cycle [ 792.866295][ T29] audit: type=1326 audit(1740813076.772:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19373 comm="syz.5.4874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22c358d169 code=0x0 [ 793.201028][ T8279] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 793.222281][ T8279] usb 10-1: Using ep0 maxpacket: 8 [ 793.231332][ T8279] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 793.241810][ T8279] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 794.993848][ T8279] usb 10-1: string descriptor 0 read error: -71 [ 795.032186][ T8279] usb 10-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 795.052662][ T8279] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.055919][T19394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4878'. [ 795.107507][ T8279] usb 10-1: config 0 descriptor?? [ 795.188645][ T8279] usb 10-1: can't set config #0, error -71 [ 795.238772][ T8279] usb 10-1: USB disconnect, device number 14 [ 795.403615][T19396] overlayfs: failed to resolve './file1': -2 [ 799.950531][T19439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4892'. [ 800.615423][T19441] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 800.641052][ T8279] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 800.871055][ T8279] usb 1-1: Using ep0 maxpacket: 8 [ 800.881471][ T8279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 800.892299][ T8279] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 800.911177][T19446] 9pnet_virtio: no channels available for device 127.0.0.1 [ 800.938838][ T8279] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 801.436074][ T8279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.445431][ T8279] usb 1-1: Product: syz [ 801.449668][ T8279] usb 1-1: Manufacturer: syz [ 801.457427][ T8279] usb 1-1: SerialNumber: syz [ 801.463598][ T8279] usb 1-1: config 0 descriptor?? [ 801.519221][T19449] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4894'. [ 801.703371][T19437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.781177][T19437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.816932][T19437] program syz.0.4891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.652834][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 802.839072][T19463] overlayfs: failed to resolve './file1': -2 [ 802.903721][ T5878] usb 1-1: USB disconnect, device number 55 [ 803.665283][T19468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4900'. [ 805.835014][T19486] overlayfs: failed to resolve './file1': -2 [ 805.996676][T19489] block device autoloading is deprecated and will be removed. [ 806.005209][T19486] sg_write: data in/out 4348/14 bytes for SCSI command 0x0-- guessing data in; [ 806.005209][T19486] program syz.0.4904 not setting count and/or reply_len properly [ 807.001818][ T5878] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 807.171926][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 807.500014][ T5878] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 807.536892][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.572522][ T5878] usb 1-1: config 0 descriptor?? [ 807.576666][T19499] 9pnet_fd: Insufficient options for proto=fd [ 807.718160][T19507] overlayfs: failed to resolve './file1': -2 [ 807.726507][T19507] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 807.726507][T19507] program syz.4.4910 not setting count and/or reply_len properly [ 807.796789][ T5878] usb 1-1: string descriptor 0 read error: -71 [ 807.808869][ T5878] usb 1-1: selecting invalid altsetting 3 [ 807.815557][ T5878] comedi comedi0: could not set alternate setting 3 in high speed [ 807.824402][ T5878] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 807.836272][ T5878] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 807.846189][ T5878] usb 1-1: USB disconnect, device number 56 [ 807.981006][ T865] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 808.111028][ T865] usb 5-1: device descriptor read/64, error -71 [ 808.351115][ T865] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 808.511068][ T865] usb 5-1: device descriptor read/64, error -71 [ 808.621768][ T865] usb usb5-port1: attempt power cycle [ 808.634150][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.970985][ T865] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 809.026327][ T865] usb 5-1: device descriptor read/8, error -71 [ 809.764315][ T865] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 809.852179][ T865] usb 5-1: device descriptor read/8, error -71 [ 809.936024][T19521] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4914'. [ 809.950547][T19521] fuse: Bad value for 'fd' [ 809.991200][ T865] usb usb5-port1: unable to enumerate USB device [ 810.098018][T19524] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4915'. [ 810.599830][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4917'. [ 811.575930][T19537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4919'. [ 812.905570][T19544] tmpfs: Unknown parameter 'usrquota_block_hardlimi' [ 812.970497][T19544] 9pnet_fd: Insufficient options for proto=fd [ 816.225764][T19558] 9pnet_fd: Insufficient options for proto=fd [ 816.654456][T19581] 9pnet_virtio: no channels available for device 127.0.0.1 [ 818.325821][ T8280] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 818.601374][ T8280] usb 5-1: device descriptor read/64, error -71 [ 819.611823][ T8280] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 819.731170][T19599] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4936'. [ 819.868276][ T8280] usb 5-1: device descriptor read/64, error -71 [ 820.099651][ T8280] usb usb5-port1: attempt power cycle [ 821.360996][ T8280] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 821.591043][ T5132] Bluetooth: hci2: command 0x0406 tx timeout [ 821.613792][ T8280] usb 5-1: device descriptor read/8, error -71 [ 821.854099][T19614] overlayfs: failed to resolve './file1': -2 [ 824.035730][T19626] fuse: Unknown parameter 'grou00000000000000000000' [ 826.517350][T19650] 9pnet_virtio: no channels available for device 127.0.0.1 [ 829.128133][T19667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4952'. [ 830.616835][T19680] fuse: Unknown parameter 'grou00000000000000000000' [ 831.504783][ T29] audit: type=1326 audit(1740813115.912:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19672 comm="syz.0.4955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84c8d8d169 code=0x0 [ 837.221618][T19728] fuse: Unknown parameter 'group_i00000000000000000000' [ 838.968909][T19744] overlayfs: failed to resolve './file1': -2 [ 839.341145][T19749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4975'. [ 840.367832][T19752] overlayfs: failed to resolve './file1': -2 [ 840.396525][T19752] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 840.396525][T19752] program syz.4.4976 not setting count and/or reply_len properly [ 840.457263][T19755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4977'. [ 841.383416][ T5869] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 841.531005][ T5869] usb 5-1: device descriptor read/64, error -71 [ 842.498488][T19774] fuse: Unknown parameter 'group_i00000000000000000000' [ 842.580124][ T5869] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 844.011065][ T29] audit: type=1326 audit(1740813127.492:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19783 comm="syz.9.4984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48fc78d169 code=0x0 [ 844.309356][T19796] 9pnet_virtio: no channels available for device 127.0.0.1 [ 846.329011][T19809] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4990'. [ 846.947989][ T29] audit: type=1326 audit(1740813131.362:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19810 comm="syz.3.4993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6099b8d169 code=0x0 [ 848.108369][T19825] fuse: Unknown parameter 'group_i00000000000000000000' [ 848.551237][ T5869] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 848.721590][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 848.737105][ T5869] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 848.750578][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 848.772586][ T5869] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 848.787942][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.798976][ T5869] usb 5-1: Product: syz [ 848.809577][ T5869] usb 5-1: Manufacturer: syz [ 848.814314][ T5869] usb 5-1: SerialNumber: syz [ 848.828142][ T5869] usb 5-1: config 0 descriptor?? [ 851.731304][ T1772] usb 5-1: USB disconnect, device number 26 [ 855.173720][T19909] fuse: Unknown parameter 'use00000000000000000000' [ 856.866849][T19913] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 857.791049][T19562] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 858.491045][T19562] usb 1-1: Using ep0 maxpacket: 32 [ 858.506075][T19562] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 858.558098][T19562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.574944][T19562] usb 1-1: config 0 descriptor?? [ 858.598031][T19562] gspca_main: sq930x-2.14.0 probing 041e:403c [ 860.321104][T19562] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 860.381828][T19562] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 860.403662][T19562] usb 1-1: USB disconnect, device number 57 [ 863.107689][T19988] fuse: Unknown parameter 'group_id00000000000000000000' [ 863.431003][T19989] netlink: 'syz.4.5036': attribute type 10 has an invalid length. [ 863.452996][T19989] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.460623][T19989] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.500262][T19989] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.507660][T19989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.515525][T19989] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.522968][T19989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.544327][T19989] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 864.075396][T19996] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5040'. [ 864.292850][T19998] fuse: Unknown parameter 'user_i00000000000000000000' [ 864.499993][T20002] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5042'. [ 866.273590][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'. [ 866.471338][T20033] 9pnet_virtio: no channels available for device 127.0.0.1 [ 866.867368][T20035] fuse: Unknown parameter 'user_i00000000000000000000' [ 867.168729][T20046] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5056'. [ 868.446515][T20032] 9pnet_virtio: no channels available for device 127.0.0.1 [ 868.463667][T20059] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2889887472 (184952798208 ns) > initial count (51438777216 ns). Using initial count to start timer. [ 868.672972][T20059] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 869.684310][T20070] xt_socket: unknown flags 0x50 [ 870.268478][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.602503][T20075] netlink: 'syz.3.5065': attribute type 10 has an invalid length. [ 870.611062][T20075] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.618202][T20075] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.632561][T20075] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.639641][T20075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.646953][T20075] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.654006][T20075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.662680][T20075] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 872.020124][ T5869] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 872.203049][ T5869] usb 10-1: Using ep0 maxpacket: 32 [ 872.228174][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.243328][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.261137][ T5869] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 872.270297][ T5869] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.278803][T15633] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 872.387259][ T5869] usb 10-1: config 0 descriptor?? [ 873.058909][ T5869] usbhid 10-1:0.0: can't add hid device: -71 [ 873.065072][ T5869] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 873.073083][T15633] usb 5-1: Using ep0 maxpacket: 32 [ 873.079673][T15633] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 873.135455][ T5869] usb 10-1: USB disconnect, device number 15 [ 873.142342][T15633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.155485][T15633] usb 5-1: config 0 descriptor?? [ 873.164148][T15633] gspca_main: sq930x-2.14.0 probing 041e:403c [ 873.701163][T15633] gspca_sq930x: reg_r 001f failed -110 [ 873.757005][T15633] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 873.843392][ T29] audit: type=1400 audit(1740813158.282:1776): avc: denied { map } for pid=20120 comm="syz.5.5083" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 873.960986][ T29] audit: type=1400 audit(1740813158.332:1777): avc: denied { execute } for pid=20120 comm="syz.5.5083" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 874.169630][T20128] 9pnet_virtio: no channels available for device 127.0.0.1 [ 979.470851][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 979.477830][ C1] rcu: 0-...!: (1 GPs behind) idle=59e4/1/0x4000000000000000 softirq=91543/91550 fqs=0 [ 979.488955][ C1] rcu: (detected by 1, t=10506 jiffies, g=80205, q=145 ncpus=2) [ 979.496851][ C1] Sending NMI from CPU 1 to CPUs 0: [ 979.496879][ C0] NMI backtrace for cpu 0 [ 979.496889][ C0] CPU: 0 UID: 0 PID: 20127 Comm: syz.0.5084 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 979.496905][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 979.496912][ C0] RIP: 0010:timerqueue_add+0xd6/0x330 [ 979.496936][ C0] Code: 01 00 00 00 49 bc 00 00 00 00 00 fc ff df eb 2b e8 1f 65 66 f6 4c 8d 7b 10 e8 16 65 66 f6 4c 89 fa 48 c1 ea 03 42 80 3c 22 00 <0f> 85 ca 01 00 00 49 8b 17 48 85 d2 74 40 48 89 d3 e8 f4 64 66 f6 [ 979.496949][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00000046 [ 979.496961][ C0] RAX: 0000000080010002 RBX: ffff88806581c340 RCX: ffffffff8b537ce1 [ 979.496970][ C0] RDX: 1ffff1100cb03869 RSI: ffffffff8b537c9a RDI: 0000000000000006 [ 979.496979][ C0] RBP: ffff88807b63d340 R08: 0000000000000006 R09: 182da5b97c000000 [ 979.496987][ C0] R10: 182da5b97c000000 R11: 0000000000000002 R12: dffffc0000000000 [ 979.496996][ C0] R13: 182da5b97c000000 R14: 0000000000000000 R15: ffff88806581c348 [ 979.497004][ C0] FS: 00007f84c9b3a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 979.497019][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 979.497028][ C0] CR2: 0000001b30717ff8 CR3: 0000000060b34000 CR4: 00000000003526f0 [ 979.497037][ C0] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 979.497044][ C0] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 979.497053][ C0] Call Trace: [ 979.497060][ C0] [ 979.497066][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 979.497087][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 979.497105][ C0] ? nmi_handle+0x1ac/0x5d0 [ 979.497125][ C0] ? timerqueue_add+0xd6/0x330 [ 979.497142][ C0] ? default_do_nmi+0x6a/0x160 [ 979.497162][ C0] ? exc_nmi+0x170/0x1e0 [ 979.497180][ C0] ? end_repeat_nmi+0xf/0x53 [ 979.497200][ C0] ? timerqueue_add+0x111/0x330 [ 979.497217][ C0] ? timerqueue_add+0xca/0x330 [ 979.497234][ C0] ? timerqueue_add+0xd6/0x330 [ 979.497252][ C0] ? timerqueue_add+0xd6/0x330 [ 979.497269][ C0] ? timerqueue_add+0xd6/0x330 [ 979.497287][ C0] [ 979.497291][ C0] [ 979.497296][ C0] ? __pfx_advance_sched+0x10/0x10 [ 979.497317][ C0] __hrtimer_run_queues+0x903/0xae0 [ 979.497334][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 979.497346][ C0] ? read_tsc+0x9/0x20 [ 979.497363][ C0] hrtimer_interrupt+0x392/0x8e0 [ 979.497377][ C0] ? irq_work_single+0x13a/0x260 [ 979.497399][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 979.497418][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 979.497433][ C0] [ 979.497437][ C0] [ 979.497441][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 979.497459][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 979.497474][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 dc 3c f6 48 89 df e8 de 5b 3d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 31 2e f6 65 8b 05 a6 13 aa 74 85 c0 74 16 5b [ 979.497486][ C0] RSP: 0018:ffffc9000deff818 EFLAGS: 00000246 [ 979.497497][ C0] RAX: 0000000000000006 RBX: ffff88807b8d7a80 RCX: 1ffffffff2de1c8c [ 979.497506][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cee00 RDI: ffffffff8bd35a60 [ 979.497514][ C0] RBP: 0000000000000282 R08: 0000000000000001 R09: fffffbfff2dd85b0 [ 979.497523][ C0] R10: ffffffff96ec2d87 R11: 0000000000000004 R12: 0000000000000002 [ 979.497531][ C0] R13: ffff88807b8d7ac0 R14: ffff88807b8d7468 R15: ffff88807b8d78e8 [ 979.497545][ C0] __unix_dgram_recvmsg+0x32a/0xe50 [ 979.497567][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 979.497586][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 979.497607][ C0] ? find_held_lock+0x2d/0x110 [ 979.497622][ C0] ? __might_fault+0x13b/0x190 [ 979.497640][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 979.497659][ C0] ____sys_recvmsg+0x5f8/0x6b0 [ 979.497675][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 979.497692][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 979.497710][ C0] ___sys_recvmsg+0x115/0x1a0 [ 979.497727][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 979.497744][ C0] ? find_held_lock+0x2d/0x110 [ 979.497761][ C0] ? __pfx___might_resched+0x10/0x10 [ 979.497780][ C0] ? __might_fault+0xe3/0x190 [ 979.497796][ C0] do_recvmmsg+0x2f8/0x740 [ 979.497819][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 979.497836][ C0] ? __pfx_lock_release+0x10/0x10 [ 979.497854][ C0] ? do_futex+0x123/0x350 [ 979.497874][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 979.497890][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 979.497909][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 979.497930][ C0] do_syscall_64+0xcd/0x250 [ 979.497947][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.497964][ C0] RIP: 0033:0x7f84c8d8d169 [ 979.497976][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 979.497987][ C0] RSP: 002b:00007f84c9b3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 979.497999][ C0] RAX: ffffffffffffffda RBX: 00007f84c8fa6080 RCX: 00007f84c8d8d169 [ 979.498007][ C0] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000003 [ 979.498015][ C0] RBP: 00007f84c8e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 979.498023][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 979.498030][ C0] R13: 0000000000000000 R14: 00007f84c8fa6080 R15: 00007ffdce89ea18 [ 979.498043][ C0] [ 979.498874][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g80205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 980.033973][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 980.043939][ C1] rcu: RCU grace-period kthread stack dump: [ 980.049819][ C1] task:rcu_preempt state:R running task stack:27488 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 980.063311][ C1] Call Trace: [ 980.066592][ C1] [ 980.069527][ C1] __schedule+0xf43/0x5890 [ 980.073946][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 980.079155][ C1] ? __pfx___schedule+0x10/0x10 [ 980.084004][ C1] ? schedule+0x298/0x350 [ 980.088329][ C1] ? __pfx_lock_release+0x10/0x10 [ 980.093368][ C1] ? lock_acquire+0x2f/0xb0 [ 980.097872][ C1] ? schedule+0x1fd/0x350 [ 980.102201][ C1] schedule+0xe7/0x350 [ 980.106268][ C1] schedule_timeout+0x124/0x280 [ 980.111124][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 980.116501][ C1] ? __pfx_process_timeout+0x10/0x10 [ 980.121789][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 980.127669][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 980.133189][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 980.137981][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 980.143265][ C1] ? rcu_gp_init+0xc82/0x1630 [ 980.147944][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 980.153144][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 980.158950][ C1] rcu_gp_kthread+0x271/0x380 [ 980.163628][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 980.168828][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 980.174024][ C1] ? __kthread_parkme+0x148/0x220 [ 980.179046][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 980.184333][ C1] kthread+0x3af/0x750 [ 980.188412][ C1] ? __pfx_kthread+0x10/0x10 [ 980.193027][ C1] ? __pfx_kthread+0x10/0x10 [ 980.197636][ C1] ret_from_fork+0x45/0x80 [ 980.202066][ C1] ? __pfx_kthread+0x10/0x10 [ 980.206658][ C1] ret_from_fork_asm+0x1a/0x30 [ 980.211430][ C1] [ 980.214442][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 980.220755][ C1] CPU: 1 UID: 0 PID: 14557 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 980.231778][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 980.241914][ C1] RIP: 0010:smp_call_function_many_cond+0x4ea/0x12c0 [ 980.248587][ C1] Code: 7c 0e 0c 00 f3 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 ff 83 e0 01 41 89 c5 89 c6 e8 56 09 0c 00 <45> 85 ed 75 d0 e8 4c 0e 0c 00 e8 47 0e 0c 00 44 8b 6c 24 04 bf 07 [ 980.268192][ C1] RSP: 0018:ffffc900046f78f8 EFLAGS: 00000293 [ 980.274259][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81add35a [ 980.282240][ C1] RDX: ffff88807f2b8000 RSI: 0000000000000000 RDI: 0000000000000005 [ 980.290209][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 980.298174][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170c8d41 [ 980.306139][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 980.314199][ C1] FS: 000055555d895500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 980.323564][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 980.330144][ C1] CR2: 00007f713a9f7ff0 CR3: 000000004eaa4000 CR4: 00000000003526f0 [ 980.338112][ C1] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 980.346076][ C1] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 980.354062][ C1] Call Trace: [ 980.357393][ C1] [ 980.360231][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 980.366573][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 980.371776][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 980.377242][ C1] ? timekeeping_advance+0x72e/0xa90 [ 980.382526][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 980.388180][ C1] ? __asan_memcpy+0x3c/0x60 [ 980.392791][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 980.398083][ C1] ? rcu_is_watching+0x12/0xc0 [ 980.402849][ C1] ? update_process_times+0x178/0x2d0 [ 980.408223][ C1] ? __pfx_update_process_times+0x10/0x10 [ 980.413945][ C1] ? update_wall_time+0x1c/0x40 [ 980.418800][ C1] ? tick_nohz_handler+0x376/0x530 [ 980.423912][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 980.429364][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 980.434766][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 980.440490][ C1] ? read_tsc+0x9/0x20 [ 980.444563][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 980.449682][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 980.455839][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 980.461642][ C1] [ 980.464603][ C1] [ 980.467528][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 980.473693][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 980.479757][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 980.485824][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 980.491895][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 980.497094][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 980.502220][ C1] flush_tlb_mm_range+0x271/0x4a0 [ 980.507246][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 980.512797][ C1] ? up_write+0x1b2/0x520 [ 980.517134][ C1] copy_process+0x70fb/0x8c50 [ 980.521823][ C1] ? __pfx_copy_process+0x10/0x10 [ 980.526843][ C1] ? __pfx_mark_lock+0x10/0x10 [ 980.531631][ C1] kernel_clone+0xfd/0x960 [ 980.536050][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 980.541261][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 980.546288][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 980.551664][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 980.556959][ C1] __do_sys_clone+0xcf/0x120 [ 980.561566][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 980.566796][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 980.572093][ C1] do_syscall_64+0xcd/0x250 [ 980.576619][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.582713][ C1] RIP: 0033:0x7f22c35839d3 [ 980.587133][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 980.606737][ C1] RSP: 002b:00007ffd9b002c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 980.615235][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f22c35839d3 [ 980.623202][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 980.631182][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 980.639169][ C1] R10: 000055555d8957d0 R11: 0000000000000246 R12: 0000000000000000 [ 980.647140][ C1] R13: 00000000000927c0 R14: 00000000000d55c2 R15: 00007ffd9b002e10 [ 980.655140][ C1]