last executing test programs: 6m59.587712197s ago: executing program 4 (id=12): ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)={0x9, 0x5, 0x6, 0x0, 0x7, 0x7, "509071fe1cd6f3b40011ffbbd28e5ff2", 0x81, 0x3, 0x1, 0x0, 0x3, 0x27, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/xfrm_stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) 6m58.809422201s ago: executing program 4 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000001400048024"], 0xc4}}, 0x0) 6m58.489099894s ago: executing program 4 (id=16): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8a945000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) copy_file_range(r1, &(0x7f0000000740)=0xb4c, r2, &(0x7f0000000780)=0x1400000000000000, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r8, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10001, 0x39}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20004001) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r12, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x318, r12, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x53, 0x3, "7ccaafd5b373cec023e52f30bd4ff103ba7b8d1c6e7386bb681ae58dfcb69dc2bb74d37af5bcb82890ee42e10194fe94c4d9fb6554b6cf1c5bdab6ed22dd05d8e1e21d55212770498682263589c29e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "5fab661e4f4b9c53ce31a73649958e82a43273d47717bd8819b618a9a3aea0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a5568dcd94359bc22392d4bc66aaf405c8a61530"}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff0f2}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffacd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x40040}, 0x810) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r10, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) mremap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 6m56.593098768s ago: executing program 4 (id=19): r0 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x0, 0xf0}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) open(0x0, 0x400141042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 6m55.65275882s ago: executing program 4 (id=20): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) 6m55.20026033s ago: executing program 4 (id=24): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 6m40.105642929s ago: executing program 32 (id=24): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1m30.954462827s ago: executing program 1 (id=871): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1m25.612212094s ago: executing program 1 (id=885): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) 1m21.474575145s ago: executing program 2 (id=895): fsmount(0xffffffffffffffff, 0x0, 0x9) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000004100)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044005}, 0x20000040) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000009180)=@md0, 0x0, 0x0) truncate(0x0, 0x4) 1m19.667942069s ago: executing program 2 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000ec0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$system_posix_acl(r3, &(0x7f0000000700)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) 1m17.143846833s ago: executing program 2 (id=900): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="05000000020000000800000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYBLOB="040000407a194bece369170200e12bde986b196b6e6c750dea3e7d5fb4970d0917058424c0c2acd6243b9e872ad1aca93a4a9c58eb6bd9512af3d9d7d391db1232e58a07856d449fa6a3ff883973f2edb5f502e76eaafeb52205df93527d1c268fdd6b29ae3e22294d604c043d7a5ff9"], 0x48}, 0x1, 0x0, 0x0, 0x4c050}, 0x4004080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0x7c81, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x50, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x75}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r11, &(0x7f00000001c0)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) 1m15.741104325s ago: executing program 2 (id=903): syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}]}}}}}}}, 0x0) 1m14.408501564s ago: executing program 2 (id=907): fsmount(0xffffffffffffffff, 0x0, 0x9) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000004100)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044005}, 0x20000040) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000009180)=@md0, 0x0, 0x0) truncate(0x0, 0x4) 1m14.374902524s ago: executing program 1 (id=908): r0 = socket$inet(0x2, 0x2, 0x1) syslog(0x4, &(0x7f0000000180)=""/210, 0xd2) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x200, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x22020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$inet(r1, &(0x7f0000000900), 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x891b, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') close(r4) 1m13.395741852s ago: executing program 2 (id=909): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x3b, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) 1m13.150497444s ago: executing program 1 (id=912): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x839}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@generic={0x0, 0xc, "ee0dd9de36ed4bcc5b4e"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x4}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setfsuid(0xee00) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xa0, &(0x7f0000000100)=""/160, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x4, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x1, 0x1, 0xc}], 0x10, 0x99, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000480), 0x81, 0x0, 0xd5, 0x0, &(0x7f0000000680)="5d4b15460107bfb393a8552a24f259346264b26ff970e57dd31039bc6f6f984360c08018a8892697ae43afd53983f0d7b39a4ffe2c32b43c656b18fbbead945f16d8efd2031e351af28794be08ed735e62c2a4750b092504e6477029bfb3f2e2692474528426f48e1c550c5d64d3001a12474cdf0dd2f3910b4478002eebd8277d3e3059aa44796202d9049e11172f32b58d62f69f015e1eb7e9502f113d0f9aa3e35a16304e210b2c3b199fb8e82a0bf7d874f40257786e99e9dc9f24a949206e4dc75fbeb0b048eb940c823ef642e0acf5dbc868", &(0x7f00000005c0), 0x1, 0x0, 0x3}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 1m11.536619486s ago: executing program 1 (id=915): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x8080e, 0x1) rt_sigqueueinfo(0x0, 0x21, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x2fd1, 0x1, 0x0, 0x335}, &(0x7f0000000080), &(0x7f0000000440)) capset(&(0x7f0000000080)={0x20071026}, 0x0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m9.795564523s ago: executing program 1 (id=918): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) 57.99650467s ago: executing program 33 (id=909): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x3b, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) 54.481100655s ago: executing program 34 (id=918): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) 10.24116606s ago: executing program 6 (id=1042): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x42000) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x7}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) sendmmsg$unix(r2, &(0x7f00000024c0), 0x0, 0x40000000) preadv2(r4, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 9.987801202s ago: executing program 7 (id=1043): socket$nl_route(0x10, 0x3, 0x0) getpriority(0x0, 0x5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES16, @ANYBLOB="0000000000000500000000000000"], 0x48) 9.680176182s ago: executing program 0 (id=1046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b400000000000000dd0a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.562808246s ago: executing program 0 (id=1048): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) pselect6(0x40, &(0x7f0000000600)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 8.409703135s ago: executing program 6 (id=1049): ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61121800000000006113140000000000bf1000000000000025000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700004c0040001f75"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r6 = shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r6) 8.397061404s ago: executing program 3 (id=1050): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x3b, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) 8.320083145s ago: executing program 5 (id=1051): prlimit64(0x0, 0xe, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x181182, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40b340) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) 8.2758857s ago: executing program 3 (id=1052): fsopen(&(0x7f0000000040)='rootfs\x00', 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = io_uring_setup(0x38dc, &(0x7f0000000600)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000000c0), 0x4f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000540)={0x2, 0x80}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) setgroups(0x1, &(0x7f0000000080)=[0x0]) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/122) r5 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}], 0x1, 0x0) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) 8.052003156s ago: executing program 7 (id=1053): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, 0x0, 0x0, 0x3834, 0xfffffffffffffffc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 7.913734776s ago: executing program 5 (id=1054): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x1000000, 0xffffffff, 0x290, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @private, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00'}, 0x0, 0x1c8, 0x238, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8001, 0x0, 0x0, 0x0, "4d93300e9ddd69f9a8bf031d5b32564b7a48bc973dff0fa696189af20d33bff9c1ccec6dc08f69478f499163eeff981716ff9cad6ae4abbad2152c5241817082"}}}, {{@ip={@rand_addr=0x64010101, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd7127cfc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029c1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4ed842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 6.451018716s ago: executing program 5 (id=1055): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f0000001880)="0aee62", 0x3, 0x4000, &(0x7f0000001980)={0x2, 0x4e22, @local}, 0x10) 6.067593929s ago: executing program 7 (id=1056): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r5, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000004540)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bond0\x00', {0x2, 0x4e21, @remote}}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.066323817s ago: executing program 6 (id=1057): pipe(0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045519, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.785878055s ago: executing program 3 (id=1058): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) 5.406836847s ago: executing program 5 (id=1059): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4040}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r9) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f00000000c0)=0x9) 4.707388846s ago: executing program 0 (id=1060): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x42000) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x7}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) sendmmsg$unix(r2, &(0x7f00000024c0), 0x0, 0x40000000) preadv2(r4, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 4.679716753s ago: executing program 3 (id=1061): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.049193438s ago: executing program 7 (id=1062): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x20, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x0) 3.595650219s ago: executing program 0 (id=1063): socket$nl_route(0x10, 0x3, 0x0) getpriority(0x0, 0x5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES16, @ANYBLOB="0000000000000500000000000000"], 0x48) 3.594868763s ago: executing program 6 (id=1064): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x181182, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40b340) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) 3.551231262s ago: executing program 7 (id=1065): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x1000000, 0xffffffff, 0x290, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @private, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00'}, 0x0, 0x1c8, 0x238, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8001, 0x0, 0x0, 0x0, "4d93300e9ddd69f9a8bf031d5b32564b7a48bc973dff0fa696189af20d33bff9c1ccec6dc08f69478f499163eeff981716ff9cad6ae4abbad2152c5241817082"}}}, {{@ip={@rand_addr=0x64010101, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd7127cfc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029c1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4ed842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 3.344096151s ago: executing program 3 (id=1066): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000240)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) fadvise64(r4, 0x18, 0x0, 0x4) write$binfmt_register(r5, &(0x7f0000000540)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4d, 0x3a, '/dev/urandom\x00', 0x3a, '/dev/nullb0\x00', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x4f, 0x50, 0x43, 0x4f, 0x46]}, 0x47) 3.319406929s ago: executing program 6 (id=1067): personality(0x400000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_init(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x4d, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.804954876s ago: executing program 3 (id=1068): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x84c, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x81c, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x2, 0x606, 0x1ff, 0x5, 0x1bbcefac, 0xfffffffd, 0xfffffff8, 0xfffff36b, 0x6, 0x7, 0xffffffc0, 0xfffffff7, 0xffff9997, 0x40, 0x8, 0x183, 0x5c, 0x9, 0x7fffffff, 0x7, 0x9, 0x5, 0x0, 0xffffff36, 0x3, 0x1000, 0x84aa, 0x1, 0x6, 0x800, 0xd20, 0xaf, 0x2, 0xd, 0x9, 0x3, 0x3, 0x8, 0x8, 0x8, 0xc8, 0xf2c, 0x0, 0x200, 0x6, 0x5, 0xffffffff, 0x7fff, 0x6, 0x401, 0x8, 0xfffffffa, 0xfffffffb, 0x400, 0xf, 0x2, 0x0, 0x101, 0xfffffff7, 0x0, 0x4, 0x8, 0xb, 0x2, 0x401, 0x5, 0x7, 0x8, 0x0, 0x0, 0x5, 0x0, 0xb870, 0x7, 0xb, 0x0, 0x807b, 0x4, 0x101, 0xff, 0x7, 0x2, 0xfffffffa, 0x4, 0x7, 0x6, 0x6, 0x5, 0xf1b, 0x5, 0x5, 0xe3, 0x1, 0x9, 0x8, 0x6, 0x1ff, 0x1, 0xd, 0x74, 0x2, 0x10001, 0x2, 0xffff, 0x9, 0xfffffff8, 0x8000, 0x5, 0x8, 0x6, 0xfffffff7, 0xfffffff8, 0x9, 0x1, 0x7, 0xeb1c, 0x7, 0x1ff, 0xb97f, 0xfffff800, 0x2, 0x1, 0x1, 0xc, 0x3, 0x4, 0x6, 0x3d16c0, 0x7, 0x4, 0x400, 0x5, 0xd, 0x7bdd67a9, 0xf, 0xe0000000, 0x7, 0x9, 0x5, 0xeff, 0xfffffffd, 0x5, 0x200, 0xa52, 0x1d19, 0x401, 0x2, 0x9, 0xf, 0x9232, 0x8, 0x8, 0x5, 0x1000, 0xfffffffa, 0x0, 0x98, 0x1, 0x7, 0x3, 0x1, 0xd207, 0xa025, 0x4, 0x1, 0x9, 0x8, 0x6, 0xa2b, 0x5, 0x800, 0x1, 0x7, 0x0, 0x80, 0x4, 0x7, 0x953b, 0xb, 0xfff, 0x8, 0x5f4, 0x5, 0xfffffffd, 0xffff, 0x7, 0x10000, 0x800, 0x0, 0x100, 0x7, 0xfffffff7, 0x80, 0x2, 0x9, 0x5, 0x1, 0x5, 0xffffff6b, 0x1, 0x100010, 0x6, 0x5, 0x1, 0x5, 0x9, 0xd679, 0x8, 0x4, 0x44c3c0ee, 0x4, 0x1, 0x0, 0xc, 0x7, 0x6, 0x100, 0x7, 0x8a6f, 0x7, 0xfffffffb, 0x1, 0x1ff, 0x0, 0x7d, 0x6, 0x2, 0x26, 0x40, 0x6, 0xf, 0x0, 0xff, 0x3, 0x8000, 0x3, 0x3, 0x3ff, 0xf000, 0xfffffff9, 0x6, 0x7, 0x61c, 0xff, 0x6, 0x5, 0xb, 0x3, 0x4, 0x5, 0x200, 0x6, 0x6, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x8, 0x5, 0x8, 0x85, 0x9b8, 0x4, 0x80, 0x8, 0x80, 0x61f2, 0x208, 0x7, 0x1, 0x5, 0x6, 0x3, 0x6, 0x9dc, 0x5, 0x2, 0xfffffffa, 0x9, 0x9, 0xd, 0x4, 0x7, 0x3, 0x81, 0x9, 0x2, 0x2, 0x3, 0x4, 0xa, 0x9, 0x7ff, 0x5, 0x914, 0xfffffff3, 0x401, 0x5, 0x54, 0x4cb8, 0x7, 0x4, 0xd50, 0xa, 0x23e98, 0x4, 0xffffff80, 0x1, 0x6, 0x7, 0x2, 0x7fff, 0x42d7be59, 0x2, 0x3, 0x200, 0x101, 0x4, 0x7fff, 0x7, 0x80000001, 0x0, 0x1, 0xfff, 0x5, 0x0, 0xc35, 0x10, 0x9, 0xb6, 0x9, 0x10, 0x1, 0x0, 0x1, 0x7f, 0x2, 0x40, 0x9, 0x790, 0x2, 0x5, 0x1, 0x7, 0x400, 0x8, 0x7cf0c765, 0xb, 0xf5ae, 0x8, 0xfee, 0x1, 0x879, 0x7, 0x3, 0x40, 0x8000, 0x6, 0x7ab3, 0x7, 0x9, 0x860, 0x5, 0x8, 0x3ff, 0xd, 0x800, 0x4, 0xffffff88, 0x8, 0x5d1d, 0x1, 0x1ff, 0x10000, 0x8, 0x9, 0x1, 0xb8c, 0x2, 0x63c7bd91, 0x7, 0x8, 0x1, 0x80000000, 0x9, 0x2, 0x2, 0x8, 0x8, 0x0, 0xffffffff, 0xcc, 0x1, 0x0, 0x7f, 0x5, 0x9, 0x1, 0x5, 0x0, 0x3, 0x0, 0x0, 0x1, 0xa62, 0x1, 0xa, 0x69319b6b, 0x1000, 0x3ff, 0x0, 0x1, 0x3, 0x8, 0x7, 0x9, 0x7, 0x3, 0x800, 0x6, 0x9, 0x10000, 0x0, 0x4, 0xfff, 0x0, 0x7, 0x2, 0xffffff6e, 0x6, 0x3, 0xffffffff, 0x6, 0x7, 0x2, 0x2, 0x2, 0x6, 0x0, 0x6, 0xd, 0x994d, 0x0, 0xffff7fff, 0x5, 0x1004000, 0x776, 0x7, 0x3ef92a03, 0x7ff, 0x47, 0x6, 0x6, 0x4, 0x3, 0x6, 0x8, 0x200, 0x7ff, 0xa8f3, 0xa4, 0xffffff7f, 0x9, 0x7, 0xffff, 0xffffff01, 0x81, 0x5, 0x8001, 0x7, 0x4, 0x1, 0x1, 0xffffffff, 0x9, 0x8000, 0x401, 0x3, 0x2, 0x7a, 0x8, 0x8, 0x5, 0x6, 0x5, 0x0, 0x2, 0x7fffffff, 0x3, 0x2, 0x1, 0x0, 0xef95, 0x1, 0xd, 0x80, 0x460, 0xfea, 0x80000000, 0x6, 0x401, 0x100, 0x6, 0x1, 0x5, 0x8d1a, 0x9, 0x2, 0x9, 0x7, 0x5]}]}]}}]}, 0x84c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, 0x0, 0x44014) writev(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f"], 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c6361636865bf463d6d6d61702e6b"]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x82c02, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000008c0)={0x150, 0x1403, 0x300, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0xffffffffffffff2e, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0xffffffffffffff56}}, 0x4010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081", @ANYRESOCT], 0x44}}, 0x0) 1.784317203s ago: executing program 0 (id=1069): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="05000000020000000800000000000000", @ANYRES64=0x77359400, @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYBLOB="040000407a194bece369170200e12bde986b196b6e6c750dea3e7d5fb4970d0917058424c0c2acd6243b9e872ad1aca93a4a9c58eb6bd9512af3d9d7d391db1232e58a07856d449fa6a3ff883973f2edb5f502e76eaafeb52205df93527d1c268fdd6b29ae3e22294d604c043d7a5ff9b15b3e"], 0x48}, 0x1, 0x0, 0x0, 0x4c050}, 0x4004080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0x7c81, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x50, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x75}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r11, &(0x7f00000001c0)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) 1.588001009s ago: executing program 5 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ec0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r3, &(0x7f0000000c80)=[{{&(0x7f0000000240)=@generic, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/140, 0x8c}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000000700)=""/222, 0xde}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/67, 0x43}], 0x7, &(0x7f0000000bc0)=""/147, 0x93}, 0x2}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/164, 0xa4}], 0x1, &(0x7f0000000d00)=""/134, 0x86}, 0x2}], 0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540), 0x60002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000580)={0x0, 0x2, 0x3ff, 0x9, 0x5, 0xa987, 0xffd1, 0x10001, {0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0xd, 0x4, 0x8, 0x4, 0x100}}, &(0x7f0000000980)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000009c0)={0x3, 0x2, 0x2, 0x8, 0xc, 0xfe1, 0x2, 0x1, r6}, 0x20) read(r3, &(0x7f0000000f40)=""/87, 0x57) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=@canfd={{0x3}, 0x35, 0x4, 0x0, 0x0, "edc426d7808c0f22c7303b0efc701341cd975854b39e79c1b80e83ba4c77a986680970565daf14987a164b8ec117d0ebddd0e99d72e057e86ee2460a9380669c"}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') 533.431659ms ago: executing program 7 (id=1071): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) 532.372819ms ago: executing program 6 (id=1072): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r5, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000004540)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bond0\x00', {0x2, 0x4e21, @remote}}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 31.639127ms ago: executing program 0 (id=1073): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000240)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r4, 0x18, 0x0, 0x4) write$binfmt_register(r5, &(0x7f0000000540)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4d, 0x3a, '/dev/urandom\x00', 0x3a, '/dev/nullb0\x00', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x4f, 0x50, 0x43, 0x4f, 0x46]}, 0x47) 0s ago: executing program 5 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ave_1: entered promiscuous mode [ 63.707920][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.739856][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.764640][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.772499][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.779826][ T5836] bridge_slave_0: entered allmulticast mode [ 63.786527][ T5836] bridge_slave_0: entered promiscuous mode [ 63.795594][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.802891][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.810596][ T5836] bridge_slave_1: entered allmulticast mode [ 63.817176][ T5836] bridge_slave_1: entered promiscuous mode [ 63.843230][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.858215][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.915488][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.927948][ T5831] team0: Port device team_slave_0 added [ 63.936572][ T5831] team0: Port device team_slave_1 added [ 63.942692][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.952766][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.960137][ T5844] bridge_slave_0: entered allmulticast mode [ 63.966696][ T5844] bridge_slave_0: entered promiscuous mode [ 63.974622][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.981794][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.989094][ T5844] bridge_slave_1: entered allmulticast mode [ 63.995958][ T5844] bridge_slave_1: entered promiscuous mode [ 64.014425][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.052471][ T5840] team0: Port device team_slave_0 added [ 64.080222][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.087206][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.114049][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.136625][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.147664][ T5840] team0: Port device team_slave_1 added [ 64.169920][ T5836] team0: Port device team_slave_0 added [ 64.176316][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.183592][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.209852][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.223476][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.252960][ T5836] team0: Port device team_slave_1 added [ 64.283927][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.290997][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.317443][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.330099][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.337068][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.363214][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.394423][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.401460][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.427484][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.438389][ T5833] Bluetooth: hci0: command tx timeout [ 64.447141][ T5844] team0: Port device team_slave_0 added [ 64.456086][ T5844] team0: Port device team_slave_1 added [ 64.476116][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.483289][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.509669][ T5833] Bluetooth: hci1: command tx timeout [ 64.512854][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.565765][ T5831] hsr_slave_0: entered promiscuous mode [ 64.573297][ T5831] hsr_slave_1: entered promiscuous mode [ 64.580039][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.587856][ T5831] Cannot create hsr debugfs directory [ 64.593661][ T5833] Bluetooth: hci2: command tx timeout [ 64.605917][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.612973][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.639604][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.672374][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.679411][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.705521][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.734850][ T5840] hsr_slave_0: entered promiscuous mode [ 64.741705][ T5840] hsr_slave_1: entered promiscuous mode [ 64.747659][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.750164][ T5833] Bluetooth: hci3: command tx timeout [ 64.755423][ T5829] Bluetooth: hci4: command tx timeout [ 64.768108][ T5840] Cannot create hsr debugfs directory [ 64.794599][ T5836] hsr_slave_0: entered promiscuous mode [ 64.801258][ T5836] hsr_slave_1: entered promiscuous mode [ 64.807350][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.814979][ T5836] Cannot create hsr debugfs directory [ 64.840359][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.851868][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.863800][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.916602][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.951787][ T5844] hsr_slave_0: entered promiscuous mode [ 64.957984][ T5844] hsr_slave_1: entered promiscuous mode [ 64.965600][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.973419][ T5844] Cannot create hsr debugfs directory [ 65.248144][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.275547][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.285656][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.296404][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.342326][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.353558][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.363423][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.387429][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.430736][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.452189][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.481879][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.495537][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.524373][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.534022][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.548042][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.560778][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.572311][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.630346][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.666272][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.673560][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.699350][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.706446][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.724784][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.812076][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.843241][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.850398][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.861570][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.868716][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.911961][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.926436][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.952490][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.984918][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.014178][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.050831][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.057956][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.067116][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.074232][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.112266][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.119417][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.136364][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.157965][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.165114][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.177659][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.192671][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.222142][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.229300][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.277260][ T267] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.284506][ T267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.330989][ T5827] veth0_vlan: entered promiscuous mode [ 66.356192][ T5827] veth1_vlan: entered promiscuous mode [ 66.397081][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.509987][ T5833] Bluetooth: hci0: command tx timeout [ 66.563653][ T5827] veth0_macvtap: entered promiscuous mode [ 66.589676][ T5833] Bluetooth: hci1: command tx timeout [ 66.607616][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.631301][ T5827] veth1_macvtap: entered promiscuous mode [ 66.661830][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.670064][ T5833] Bluetooth: hci2: command tx timeout [ 66.680330][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.780493][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.806168][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.815284][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.824372][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.829164][ T5833] Bluetooth: hci4: command tx timeout [ 66.838568][ T5829] Bluetooth: hci3: command tx timeout [ 66.843372][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.856665][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.965214][ T5844] veth0_vlan: entered promiscuous mode [ 66.978536][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.002105][ T5844] veth1_vlan: entered promiscuous mode [ 67.087556][ T5844] veth0_macvtap: entered promiscuous mode [ 67.103914][ T5836] veth0_vlan: entered promiscuous mode [ 67.113932][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.118369][ T5844] veth1_macvtap: entered promiscuous mode [ 67.133769][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.172113][ T5831] veth0_vlan: entered promiscuous mode [ 67.185579][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.196546][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.209411][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.234212][ T5831] veth1_vlan: entered promiscuous mode [ 67.241087][ T5836] veth1_vlan: entered promiscuous mode [ 67.252889][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.263613][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.265253][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.284038][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.294810][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.303718][ T5840] veth0_vlan: entered promiscuous mode [ 67.317044][ T5840] veth1_vlan: entered promiscuous mode [ 67.336669][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.347397][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.357409][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.367056][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.409953][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.414719][ T5831] veth0_macvtap: entered promiscuous mode [ 67.433511][ T5831] veth1_macvtap: entered promiscuous mode [ 67.484496][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.505026][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.532255][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.541807][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.549959][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.552713][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.569535][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.580380][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.592963][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.611349][ T5840] veth0_macvtap: entered promiscuous mode [ 67.634545][ T5836] veth0_macvtap: entered promiscuous mode [ 67.644133][ T5836] veth1_macvtap: entered promiscuous mode [ 67.658198][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.668762][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.678606][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.689119][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.699017][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.709639][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.720618][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.732698][ T5840] veth1_macvtap: entered promiscuous mode [ 67.740520][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.752282][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.764086][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.774640][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.827028][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.839073][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.850218][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.863060][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.875484][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.885662][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.896445][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.913148][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.927222][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.936867][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.947251][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.962676][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.995557][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.021129][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.046515][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.061593][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.131595][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.142115][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.151996][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.162503][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.172393][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.182901][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.192885][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.203372][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.214315][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.260399][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.270990][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.280864][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.291367][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.301235][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.311750][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.321650][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.332225][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.344053][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.367409][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 68.436598][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.446472][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.451546][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.464068][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.488315][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.502623][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.533009][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.544522][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.599005][ T5829] Bluetooth: hci0: command tx timeout [ 68.669190][ T5829] Bluetooth: hci1: command tx timeout [ 68.745117][ T5920] netlink: 6 bytes leftover after parsing attributes in process `syz.0.10'. [ 68.758740][ T5829] Bluetooth: hci2: command tx timeout [ 68.808970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.817535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.821611][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.826018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.900781][ T5924] openvswitch: netlink: Duplicate key (type 32). [ 68.909774][ T5829] Bluetooth: hci3: command tx timeout [ 68.915207][ T5833] Bluetooth: hci4: command tx timeout [ 69.017938][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.028473][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.226194][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.237325][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.258968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.712207][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.729705][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.751079][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.761686][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.080836][ T5921] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.102817][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13'. [ 70.278158][ T5921] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.380809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.390263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.475333][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.487005][ T5921] usb 1-1: config 0 has no interfaces? [ 70.504983][ T5921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.514363][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.675181][ T5953] warning: `syz.3.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.213277][ T5921] usb 1-1: Product: syz [ 71.217467][ T5921] usb 1-1: Manufacturer: syz [ 71.222274][ T5921] usb 1-1: SerialNumber: syz [ 71.258976][ T5833] Bluetooth: hci0: command tx timeout [ 71.264423][ T5833] Bluetooth: hci1: command tx timeout [ 71.269966][ T5833] Bluetooth: hci2: command tx timeout [ 71.275379][ T5833] Bluetooth: hci4: command tx timeout [ 71.280803][ T5833] Bluetooth: hci3: command tx timeout [ 71.466523][ T5921] usb 1-1: config 0 descriptor?? [ 71.597077][ T5956] tipc: Started in network mode [ 71.602235][ T5956] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 71.615008][ T5956] tipc: Enabled bearer , priority 10 [ 71.647988][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.654748][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.271344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.179054][ T8] tipc: Node number set to 4269801491 [ 73.194940][ T8] usb 1-1: USB disconnect, device number 2 [ 75.682154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.281325][ T5995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.294340][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 76.319922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.361611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.363746][ T5997] Cannot find map_set index 0 as target [ 76.457070][ T5999] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 76.469298][ T5999] Cannot find add_set index 0 as target [ 77.738780][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.264600][ T6009] tipc: Started in network mode [ 78.272029][ T6009] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 78.284307][ T6009] tipc: Enabled bearer , priority 10 [ 78.357997][ T5878] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 78.408030][ T5878] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 78.429422][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 78.448221][ T5878] usb 4-1: Product: syz [ 78.458477][ T5878] usb 4-1: Manufacturer: syz [ 78.498989][ T5878] usb 4-1: SerialNumber: syz [ 78.536044][ T5878] usb 4-1: config 0 descriptor?? [ 78.638491][ T5878] ims_pcu 4-1:0.0: Zero length descriptor [ 78.655882][ T5878] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 79.134609][ T5878] usb 4-1: USB disconnect, device number 2 [ 79.142926][ T6018] netlink: 172 bytes leftover after parsing attributes in process `syz.1.33'. [ 79.414694][ T6021] netlink: 'syz.1.33': attribute type 3 has an invalid length. [ 79.422384][ T6021] netlink: 224 bytes leftover after parsing attributes in process `syz.1.33'. [ 80.164895][ T5876] tipc: Node number set to 4269801491 [ 80.421441][ T6028] Zero length message leads to an empty skb [ 80.573465][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 80.585282][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 81.910347][ T119] cfg80211: failed to load regulatory.db [ 82.629890][ T29] audit: type=1326 audit(1732696031.967:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff510b80809 code=0x7ffc0000 [ 82.754286][ T29] audit: type=1326 audit(1732696031.967:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff510b80809 code=0x7ffc0000 [ 82.785296][ T29] audit: type=1326 audit(1732696031.967:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7ff510b80809 code=0x7ffc0000 [ 82.807936][ T29] audit: type=1326 audit(1732696031.967:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff510b80809 code=0x7ffc0000 [ 83.490332][ T6064] syz.0.49 uses obsolete (PF_INET,SOCK_PACKET) [ 83.558850][ T5877] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.089377][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 84.572886][ T5877] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 84.581606][ T5877] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 84.590437][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 84.599505][ T5877] usb 4-1: config 1 has no interface number 0 [ 84.605588][ T5877] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.618256][ T5877] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 84.631361][ T5877] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 84.641111][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.661550][ T6069] Cannot find map_set index 0 as target [ 84.679230][ T5877] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 84.949381][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.339638][ T5877] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 85.389699][ T25] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 85.497108][ T25] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 85.516936][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 85.525247][ T25] usb 1-1: Product: syz [ 85.529474][ T25] usb 1-1: Manufacturer: syz [ 85.534107][ T25] usb 1-1: SerialNumber: syz [ 85.576087][ T5877] usb 4-1: USB disconnect, device number 3 [ 85.584441][ T5877] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 85.639968][ T25] usb 1-1: config 0 descriptor?? [ 85.674408][ T25] ims_pcu 1-1:0.0: Zero length descriptor [ 85.681271][ T25] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 86.517823][ T119] usb 1-1: USB disconnect, device number 3 [ 89.126110][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.203252][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.215562][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.243008][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.256437][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.434035][ T5877] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.473430][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.858895][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 89.887708][ T5877] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 89.939130][ T5877] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 89.978876][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 90.009175][ T5877] usb 3-1: config 1 has no interface number 0 [ 90.035806][ T5877] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.155627][ T5877] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 90.199210][ T5877] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 90.199244][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.243977][ T6131] Cannot find map_set index 0 as target [ 90.255145][ T6117] chnl_net:caif_netlink_parms(): no params data found [ 90.285277][ T5877] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 90.478986][ T119] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.679554][ T119] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 90.693483][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.707481][ T119] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 90.714684][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.717000][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 90.732992][ T6117] bridge_slave_0: entered allmulticast mode [ 90.772641][ T119] usb 2-1: Product: syz [ 90.776858][ T119] usb 2-1: Manufacturer: syz [ 90.781566][ T119] usb 2-1: SerialNumber: syz [ 90.789839][ T119] usb 2-1: config 0 descriptor?? [ 90.795006][ T6117] bridge_slave_0: entered promiscuous mode [ 90.798142][ T119] ims_pcu 2-1:0.0: Zero length descriptor [ 90.807116][ T119] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 90.855991][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.871042][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.879787][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.961261][ T6117] bridge_slave_1: entered allmulticast mode [ 90.965173][ T5877] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 90.972849][ T6117] bridge_slave_1: entered promiscuous mode [ 91.129043][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 91.156477][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 91.175639][ T5841] usb 2-1: USB disconnect, device number 2 [ 91.296834][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.422706][ T25] usb 1-1: Product: syz [ 91.484945][ T5877] usb 3-1: USB disconnect, device number 2 [ 91.504395][ T25] usb 1-1: Manufacturer: syz [ 91.507242][ T5877] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 91.516144][ T25] usb 1-1: SerialNumber: syz [ 91.534657][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.572946][ T25] usb 1-1: config 0 descriptor?? [ 91.639936][ T5833] Bluetooth: hci5: command tx timeout [ 91.648331][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.714751][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.750786][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.793590][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.816747][ T25] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 91.888115][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.916387][ T6117] team0: Port device team_slave_0 added [ 91.931036][ T6117] team0: Port device team_slave_1 added [ 91.959364][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.966375][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.246759][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.740222][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.765795][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.899742][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.159755][ T6117] hsr_slave_0: entered promiscuous mode [ 93.173241][ T6117] hsr_slave_1: entered promiscuous mode [ 93.181958][ T6117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.190823][ T6117] Cannot create hsr debugfs directory [ 93.737084][ T5833] Bluetooth: hci5: command tx timeout [ 94.158980][ T52] bridge_slave_1: left allmulticast mode [ 94.164996][ T52] bridge_slave_1: left promiscuous mode [ 94.173314][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.204177][ T25] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 94.226508][ T25] usb 1-1: USB disconnect, device number 4 [ 94.236932][ T52] bridge_slave_0: left allmulticast mode [ 94.244449][ T52] bridge_slave_0: left promiscuous mode [ 94.254756][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.798727][ T5833] Bluetooth: hci5: command tx timeout [ 96.822337][ T6187] Cannot find map_set index 0 as target [ 97.091717][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.244628][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.260957][ T5878] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 97.282649][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.295549][ T5878] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 97.307486][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 97.319780][ T52] bond0 (unregistering): Released all slaves [ 97.326018][ T5878] usb 1-1: Product: syz [ 97.330529][ T5878] usb 1-1: Manufacturer: syz [ 97.335470][ T5878] usb 1-1: SerialNumber: syz [ 97.357566][ T5878] usb 1-1: config 0 descriptor?? [ 97.371701][ T5878] ims_pcu 1-1:0.0: Zero length descriptor [ 97.378080][ T5878] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 97.409866][ T6165] Process accounting resumed [ 97.420706][ T52] tipc: Disabling bearer [ 97.442971][ T52] tipc: Left network mode [ 97.574160][ T8] usb 1-1: USB disconnect, device number 5 [ 97.872381][ T5833] Bluetooth: hci5: command tx timeout [ 98.056387][ T6117] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.129809][ T6117] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.189780][ T6117] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.248434][ T6117] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.478188][ T52] hsr_slave_0: left promiscuous mode [ 98.843832][ T52] hsr_slave_1: left promiscuous mode [ 98.999160][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.108504][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.133859][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.150662][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.385162][ T52] veth1_macvtap: left promiscuous mode [ 99.403615][ T52] veth0_macvtap: left promiscuous mode [ 99.436621][ T52] veth1_vlan: left promiscuous mode [ 99.495038][ T52] veth0_vlan: left promiscuous mode [ 100.728418][ T6243] kernel profiling enabled (shift: 17) [ 100.950811][ T6249] netlink: 104 bytes leftover after parsing attributes in process `syz.1.99'. [ 101.274018][ T6256] Cannot find map_set index 0 as target [ 101.578800][ T119] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.763627][ T119] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 101.793355][ T119] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 101.803673][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 101.812303][ T119] usb 3-1: Product: syz [ 101.815906][ T52] team0 (unregistering): Port device team_slave_1 removed [ 101.817830][ T119] usb 3-1: Manufacturer: syz [ 101.830839][ T119] usb 3-1: SerialNumber: syz [ 101.838257][ T119] usb 3-1: config 0 descriptor?? [ 101.846842][ T119] ims_pcu 3-1:0.0: Zero length descriptor [ 101.854555][ T119] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 101.887463][ T52] team0 (unregistering): Port device team_slave_0 removed [ 102.292858][ T6240] bridge_slave_1: left allmulticast mode [ 102.345683][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.437551][ T5873] usb 3-1: USB disconnect, device number 3 [ 102.609634][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.639346][ T6117] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.718096][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.725305][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.774482][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.781669][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.820966][ T6117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.018953][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.160643][ T6301] hub 6-0:1.0: USB hub found [ 104.199710][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 104.200627][ T6301] hub 6-0:1.0: 1 port detected [ 104.219927][ T25] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 104.244064][ T25] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 104.260683][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.273625][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 104.318239][ T25] usb 2-1: config 1 has no interface number 0 [ 104.347685][ T25] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.446240][ T25] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 105.098730][ T25] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 105.107821][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.141378][ T25] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 105.894519][ T25] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 106.141465][ T5876] usb 2-1: USB disconnect, device number 3 [ 106.148273][ T5876] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 106.188058][ T6117] veth0_vlan: entered promiscuous mode [ 106.273365][ T6117] veth1_vlan: entered promiscuous mode [ 106.390540][ T6117] veth0_macvtap: entered promiscuous mode [ 106.410247][ T6329] netlink: 224 bytes leftover after parsing attributes in process `syz.0.113'. [ 106.437370][ T6329] @: renamed from vlan0 (while UP) [ 106.456064][ T6117] veth1_macvtap: entered promiscuous mode [ 106.476251][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.507110][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.525960][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.539569][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.549458][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.567991][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.588944][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.608927][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.624953][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.647556][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.672175][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.714093][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.725559][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.738674][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.758700][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.768572][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.810544][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.827509][ T6310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.960576][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.975567][ T6117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.984456][ T6117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.993297][ T6117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.003505][ T6117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.654898][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.688968][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.779154][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.791878][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.860094][ T6358] Cannot find map_set index 0 as target [ 108.118877][ T5876] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.279611][ T5876] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 108.306905][ T5876] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 108.328756][ T5877] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 108.365961][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 108.429226][ T5876] usb 3-1: Product: syz [ 108.443440][ T5876] usb 3-1: Manufacturer: syz [ 108.456190][ T5876] usb 3-1: SerialNumber: syz [ 108.512584][ T5876] usb 3-1: config 0 descriptor?? [ 108.547613][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.585299][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 108.618777][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.645321][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.658724][ T5877] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.667797][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.683827][ T5876] ims_pcu 3-1:0.0: Zero length descriptor [ 108.689798][ T5876] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 108.709704][ T5877] usb 6-1: config 0 descriptor?? [ 108.731194][ T6365] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 108.775227][ T25] usb 3-1: USB disconnect, device number 4 [ 109.626190][ T5877] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 109.638949][ T5877] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 109.886986][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.364108][ T5877] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 110.387968][ T5877] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 110.421919][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.494060][ T5876] usb 6-1: USB disconnect, device number 2 [ 111.200866][ T5829] Bluetooth: hci1: sending frame failed (-49) [ 111.210080][ T5833] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 111.221609][ T6413] hub 6-0:1.0: USB hub found [ 111.249224][ T6413] hub 6-0:1.0: 1 port detected [ 111.758244][ T6425] netlink: 224 bytes leftover after parsing attributes in process `syz.5.127'. [ 111.769546][ T6425] @: renamed from vlan0 (while UP) [ 114.767835][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.134'. [ 115.512844][ T6476] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 115.521187][ T6476] netlink: 2 bytes leftover after parsing attributes in process `syz.1.140'. [ 115.530772][ T6476] team0: entered promiscuous mode [ 115.536107][ T6476] team_slave_0: entered promiscuous mode [ 115.551601][ T6476] team_slave_1: entered promiscuous mode [ 115.571087][ T6476] bridge0: port 3(team0) entered blocking state [ 115.582963][ T6476] bridge0: port 3(team0) entered disabled state [ 115.596188][ T6476] team0: entered allmulticast mode [ 115.601709][ T6476] team_slave_0: entered allmulticast mode [ 115.607958][ T6476] team_slave_1: entered allmulticast mode [ 115.649663][ T6476] bridge0: port 3(team0) entered blocking state [ 115.656313][ T6476] bridge0: port 3(team0) entered forwarding state [ 116.321631][ T6484] netlink: 224 bytes leftover after parsing attributes in process `syz.3.141'. [ 116.333140][ T6484] @: renamed from vlan0 (while UP) [ 119.755640][ T6511] team0: left allmulticast mode [ 119.779543][ T6511] team_slave_0: left allmulticast mode [ 119.785510][ T6511] team_slave_1: left allmulticast mode [ 119.791688][ T6511] bridge0: port 3(team0) entered disabled state [ 120.234923][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.151'. [ 121.413871][ T6511] bridge_slave_0: left allmulticast mode [ 121.435577][ T6511] bridge_slave_0: left promiscuous mode [ 121.441962][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.481882][ T6511] bridge_slave_1: left allmulticast mode [ 121.497455][ T6511] bridge_slave_1: left promiscuous mode [ 121.544956][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.576933][ T6511] bond0: (slave bond_slave_0): Releasing backup interface [ 121.616527][ T6511] bond0: (slave bond_slave_1): Releasing backup interface [ 121.677590][ T6511] team_slave_0: left promiscuous mode [ 121.733316][ T6511] team0: Port device team_slave_0 removed [ 121.740080][ T6511] team_slave_1: left promiscuous mode [ 121.794449][ T6511] team0: Port device team_slave_1 removed [ 121.810925][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.818364][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.989317][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.004815][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.605044][ T6586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 129.711188][ T6616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.173'. [ 130.936649][ T6645] netlink: 'syz.2.180': attribute type 10 has an invalid length. [ 130.975042][ T6645] netlink: 2 bytes leftover after parsing attributes in process `syz.2.180'. [ 131.004223][ T6645] team0: entered promiscuous mode [ 131.048678][ T6645] team_slave_0: entered promiscuous mode [ 131.083369][ T6645] team_slave_1: entered promiscuous mode [ 131.103847][ T6645] bridge0: port 3(team0) entered blocking state [ 131.115566][ T6645] bridge0: port 3(team0) entered disabled state [ 131.158108][ T6645] team0: entered allmulticast mode [ 131.178818][ T6645] team_slave_0: entered allmulticast mode [ 131.198795][ T6645] team_slave_1: entered allmulticast mode [ 131.252166][ T6645] bridge0: port 3(team0) entered blocking state [ 131.258533][ T6645] bridge0: port 3(team0) entered forwarding state [ 131.897300][ T5841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 131.948805][ T5877] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.135266][ T5877] usb 4-1: config 1 interface 0 has no altsetting 0 [ 132.138730][ T5841] usb 6-1: Using ep0 maxpacket: 8 [ 132.152723][ T5877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 132.153318][ T5841] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 132.167551][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.204653][ T5877] usb 4-1: Product: syz [ 132.218741][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.224142][ T5877] usb 4-1: Manufacturer: syz [ 132.252026][ T5841] usb 6-1: Product: syz [ 132.253484][ T5877] usb 4-1: SerialNumber: syz [ 132.256226][ T5841] usb 6-1: Manufacturer: syz [ 132.256245][ T5841] usb 6-1: SerialNumber: syz [ 132.297599][ T5841] usb 6-1: config 0 descriptor?? [ 132.509713][ T119] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.531188][ T5841] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 132.533161][ T5877] usb 4-1: USB disconnect, device number 4 [ 132.726154][ T6694] capability: warning: `syz.0.198' uses deprecated v2 capabilities in a way that may be insecure [ 132.730447][ T119] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.841315][ T119] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 132.887743][ T119] usb 3-1: config 8 has no interface number 0 [ 132.931268][ T119] usb 3-1: config 8 interface 223 has no altsetting 0 [ 132.991116][ T119] usb 3-1: New USB device found, idVendor=1385, idProduct=4251, bcdDevice=46.eb [ 133.002578][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.019311][ T119] usb 3-1: Product: syz [ 133.074188][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.084595][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.105756][ T119] usb 3-1: Manufacturer: syz [ 133.113622][ T119] usb 3-1: SerialNumber: syz [ 133.437257][ T119] usb 3-1: Could not find all expected endpoints [ 133.553017][ T119] usb 3-1: USB disconnect, device number 5 [ 133.793180][ T29] audit: type=1804 audit(1732696083.167:6): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.201" name="/newroot/48/file0/bus" dev="ramfs" ino=11761 res=1 errno=0 [ 134.529100][ T5841] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 134.559735][ T5841] usb 6-1: USB disconnect, device number 3 [ 136.658017][ T29] audit: type=1800 audit(1732696086.027:7): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.201" name="bus" dev="ramfs" ino=11761 res=0 errno=0 [ 137.900478][ T6764] kAFS: Can only specify source 'none' with -o dyn [ 138.058465][ T6775] Cannot find map_set index 0 as target [ 138.308981][ T119] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.469889][ T119] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 138.490608][ T119] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 138.508049][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 138.508878][ T5877] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.528995][ T119] usb 3-1: Product: syz [ 138.533206][ T119] usb 3-1: Manufacturer: syz [ 138.538106][ T119] usb 3-1: SerialNumber: syz [ 138.559674][ T119] usb 3-1: config 0 descriptor?? [ 138.576447][ T119] ims_pcu 3-1:0.0: Zero length descriptor [ 138.618849][ T119] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 138.730600][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 138.748329][ T5877] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 138.769001][ T5877] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 138.773383][ T5841] usb 3-1: USB disconnect, device number 6 [ 138.804392][ T5877] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 138.849161][ T5877] usb 1-1: config 1 has no interface number 0 [ 138.868808][ T5877] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.904247][ T5877] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 138.946949][ T5877] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 138.976545][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.017599][ T5877] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 139.420051][ T6798] hub 6-0:1.0: USB hub found [ 139.425000][ T6798] hub 6-0:1.0: 1 port detected [ 140.136059][ T5877] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 140.538954][ T5841] usb 1-1: USB disconnect, device number 6 [ 140.545715][ T5841] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 140.701452][ T6810] netlink: 108 bytes leftover after parsing attributes in process `syz.5.231'. [ 140.746048][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.231'. [ 140.798777][ T5877] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.979237][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 141.110391][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 141.127701][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.137941][ T5877] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.298779][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 141.553093][ T5877] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 141.638771][ T5877] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 141.647864][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.718070][ T5877] usb 4-1: config 0 descriptor?? [ 141.815681][ T6832] netlink: 68 bytes leftover after parsing attributes in process `syz.0.235'. [ 142.709281][ T6805] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.796903][ T6837] Cannot find map_set index 0 as target [ 143.006555][ T25] usb 4-1: USB disconnect, device number 5 [ 143.007533][ T5829] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 144.010030][ T5841] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 144.017618][ T5833] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 145.389388][ T5841] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 145.415916][ T5841] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 145.425639][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 145.461734][ T5841] usb 6-1: Product: syz [ 145.466162][ T5841] usb 6-1: Manufacturer: syz [ 145.493998][ T6876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.183705][ T5841] usb 6-1: SerialNumber: syz [ 146.191154][ T5841] usb 6-1: config 0 descriptor?? [ 146.235461][ T5841] usb 6-1: can't set config #0, error -71 [ 146.242747][ T5841] usb 6-1: USB disconnect, device number 4 [ 146.852064][ T6891] netlink: 68 bytes leftover after parsing attributes in process `syz.1.248'. [ 149.276927][ T6913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.253'. [ 149.542176][ T6911] vxcan1: entered promiscuous mode [ 149.548219][ T6912] vxcan1: left promiscuous mode [ 149.832279][ T6918] blktrace: Concurrent blktraces are not allowed on sg0 [ 151.180822][ T6932] xt_nat: multiple ranges no longer supported [ 152.802220][ T6949] netlink: 68 bytes leftover after parsing attributes in process `syz.5.261'. [ 153.071723][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 162.521376][ T5833] Bluetooth: hci1: command 0x1003 tx timeout [ 162.527554][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 162.849747][ T5873] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.074374][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 163.119008][ T5873] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 163.127530][ T5873] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 163.136585][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 163.145722][ T5873] usb 2-1: config 1 has no interface number 0 [ 163.152295][ T5873] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.163815][ T5873] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 163.177220][ T5873] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 163.187033][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.279307][ T5873] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 164.970379][ T5873] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 165.398586][ T5876] usb 2-1: USB disconnect, device number 4 [ 165.405724][ T5876] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 166.422247][ T7078] netlink: 28 bytes leftover after parsing attributes in process `syz.5.283'. [ 166.999067][ T7095] netlink: 68 bytes leftover after parsing attributes in process `syz.0.289'. [ 167.656319][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 169.473379][ T6145] Bluetooth: hci1: Frame reassembly failed (-84) [ 171.037546][ T7143] Cannot find add_set index 0 as target [ 171.843205][ T5833] Bluetooth: hci1: command 0x1003 tx timeout [ 171.850245][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 173.347788][ T7163] netlink: 224 bytes leftover after parsing attributes in process `syz.0.297'. [ 174.240389][ T7183] No control pipe specified [ 174.683688][ T7188] Cannot find map_set index 0 as target [ 174.938980][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 175.613926][ T5876] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.779377][ T5876] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 175.796108][ T5876] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 175.809347][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 175.878740][ T5876] usb 3-1: Product: syz [ 175.891520][ T5876] usb 3-1: Manufacturer: syz [ 175.906586][ T5876] usb 3-1: SerialNumber: syz [ 175.935568][ T5876] usb 3-1: config 0 descriptor?? [ 175.970216][ T5876] ims_pcu 3-1:0.0: Zero length descriptor [ 175.987876][ T5876] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 176.177561][ T5876] usb 3-1: USB disconnect, device number 7 [ 176.646489][ T77] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 176.675957][ T77] Bluetooth: hci1: Frame reassembly failed (-84) [ 176.839093][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 178.846755][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 178.852192][ T5833] Bluetooth: hci1: command 0x1003 tx timeout [ 178.861078][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 178.868535][ T8] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 178.877351][ T8] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 179.156789][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 179.166111][ T8] usb 2-1: config 1 has no interface number 0 [ 179.175906][ T8] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.187174][ T8] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 179.202635][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 179.300665][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.328211][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 179.690206][ T8] snd_usb_pod 2-1:1.1: set_interface failed [ 179.696310][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 179.704641][ T8] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 179.728289][ T8] usb 2-1: USB disconnect, device number 5 [ 181.316269][ T7255] Cannot find map_set index 0 as target [ 181.480126][ T7259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.321'. [ 181.531658][ T7259] @: renamed from vlan0 (while UP) [ 181.588771][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 181.755738][ T8] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 181.798958][ T8] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 181.828778][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 181.836995][ T8] usb 3-1: Product: syz [ 181.868948][ T8] usb 3-1: Manufacturer: syz [ 181.883809][ T8] usb 3-1: SerialNumber: syz [ 181.896730][ T8] usb 3-1: config 0 descriptor?? [ 181.908186][ T8] ims_pcu 3-1:0.0: Zero length descriptor [ 181.924521][ T8] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 182.249969][ T5841] usb 3-1: USB disconnect, device number 8 [ 183.146272][ T12] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 183.253874][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 183.828272][ T7277] Cannot find add_set index 0 as target [ 185.041768][ T975] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 185.271579][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 185.606806][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 185.615342][ T975] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 185.639098][ T975] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 185.647928][ T975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 185.657257][ T975] usb 4-1: config 1 has no interface number 0 [ 185.663511][ T975] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.674555][ T975] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 185.689471][ T975] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 185.698790][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.049552][ T7286] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 186.204289][ T975] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 186.534311][ T7306] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING [ 186.615891][ T975] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 186.830641][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 186.837035][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 186.845269][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 187.203523][ T5841] usb 4-1: USB disconnect, device number 6 [ 187.210403][ T5841] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 187.309914][ T5873] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 187.516566][ T5873] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 187.621814][ T5873] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 187.648502][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 187.760489][ T5873] usb 6-1: Product: syz [ 187.797326][ T5873] usb 6-1: Manufacturer: syz [ 187.845798][ T5873] usb 6-1: SerialNumber: syz [ 187.985454][ T5873] usb 6-1: config 0 descriptor?? [ 188.014801][ T5873] ims_pcu 6-1:0.0: Zero length descriptor [ 188.349203][ T5873] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 188.641118][ T25] usb 6-1: USB disconnect, device number 5 [ 188.956468][ T6145] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 188.972327][ T6998] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 188.985839][ T6145] Bluetooth: hci1: Frame reassembly failed (-84) [ 189.332076][ T7332] veth0_to_team: entered promiscuous mode [ 189.448892][ T7332] veth0_to_team: entered allmulticast mode [ 189.900708][ T7339] hub 6-0:1.0: USB hub found [ 189.905638][ T7339] hub 6-0:1.0: 1 port detected [ 190.350125][ T5144] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 190.379371][ T5841] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 190.641330][ T5841] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.654711][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.729847][ T5841] usb 1-1: config 0 has no interfaces? [ 190.771372][ T5841] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.812554][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.826903][ T5841] usb 1-1: Product: syz [ 190.833844][ T5841] usb 1-1: Manufacturer: syz [ 190.838582][ T5841] usb 1-1: SerialNumber: syz [ 190.900285][ T5841] usb 1-1: config 0 descriptor?? [ 190.910566][ T5144] Bluetooth: hci1: command 0x1003 tx timeout [ 190.991501][ T5833] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 192.138073][ T25] usb 1-1: USB disconnect, device number 7 [ 194.362380][ T7374] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING [ 195.556660][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.565551][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.939399][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 196.178387][ T8] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 196.328335][ T8] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 196.400195][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 196.561303][ T8] usb 6-1: Product: syz [ 196.565517][ T8] usb 6-1: Manufacturer: syz [ 196.670140][ T8] usb 6-1: SerialNumber: syz [ 196.700046][ T8] usb 6-1: config 0 descriptor?? [ 196.708415][ T8] ims_pcu 6-1:0.0: Zero length descriptor [ 196.720344][ T8] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 196.984842][ T8] usb 6-1: USB disconnect, device number 6 [ 197.022089][ T3593] Bluetooth: hci1: Frame reassembly failed (-84) [ 197.116800][ T6145] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 197.846243][ T7404] veth0_to_team: entered promiscuous mode [ 197.867136][ T7404] veth0_to_team: entered allmulticast mode [ 199.025932][ T5833] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 199.682570][ T5833] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 200.699914][ T5877] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 200.904137][ T5877] usb 6-1: unable to get BOS descriptor or descriptor too short [ 200.913486][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.976587][ T5877] usb 6-1: config 0 has no interfaces? [ 201.007761][ T5877] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.020259][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.095141][ T5877] usb 6-1: Product: syz [ 201.123563][ T5877] usb 6-1: Manufacturer: syz [ 201.164059][ T5877] usb 6-1: SerialNumber: syz [ 201.372318][ T5877] usb 6-1: config 0 descriptor?? [ 202.102135][ T5876] usb 6-1: USB disconnect, device number 7 [ 203.749988][ T5833] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 203.758958][ T5833] Bluetooth: hci4: Injecting HCI hardware error event [ 203.780533][ T5144] Bluetooth: hci4: hardware error 0x00 [ 204.465156][ T7444] Process accounting resumed [ 204.977068][ T12] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 205.092882][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 205.168859][ T5876] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 205.538781][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 205.545643][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 205.578957][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.598710][ T5876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.608406][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 205.631831][ T5876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 205.642083][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 205.653575][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.675862][ T5876] usb 2-1: config 0 descriptor?? [ 205.681667][ T7456] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.229734][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 206.268808][ T54] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 206.384575][ T5841] usb 2-1: USB disconnect, device number 6 [ 206.414557][ T54] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 206.989819][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 206.997624][ T5833] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 210.479522][ T5833] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 210.488163][ T5833] Bluetooth: hci0: Injecting HCI hardware error event [ 210.569469][ T54] Bluetooth: hci0: hardware error 0x00 [ 211.200027][ T6998] Bluetooth: hci1: Frame reassembly failed (-84) [ 211.535736][ T7503] netlink: 104 bytes leftover after parsing attributes in process `syz.3.394'. [ 212.416618][ T6998] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 212.430252][ T6998] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 212.447131][ T267] Bluetooth: hci6: Frame reassembly failed (-84) [ 212.592472][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 212.758806][ T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 213.238856][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 213.323153][ T5144] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 214.463275][ T5834] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 216.679886][ T7551] netlink: 104 bytes leftover after parsing attributes in process `syz.5.406'. [ 217.219897][ T7555] veth0_to_team: entered promiscuous mode [ 217.227356][ T7555] veth0_to_team: entered allmulticast mode [ 219.493971][ T7580] Cannot find add_set index 0 as target [ 219.640382][ T7582] hub 6-0:1.0: USB hub found [ 219.648907][ T7582] hub 6-0:1.0: 1 port detected [ 220.741919][ T3593] Bluetooth: hci1: Frame reassembly failed (-84) [ 221.148737][ T5841] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 221.309067][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 221.316454][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 221.328145][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.342679][ T5841] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.371370][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 221.382995][ T5841] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 221.394548][ T5841] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 221.403972][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.424101][ T5841] usb 1-1: config 0 descriptor?? [ 221.429974][ T7591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 221.656248][ T5841] usb 1-1: USB disconnect, device number 8 [ 221.660597][ T5834] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 221.971277][ T7606] xt_SECMARK: invalid mode: 2 [ 222.683853][ T7613] bridge_slave_0: left allmulticast mode [ 222.699125][ T7613] bridge_slave_0: left promiscuous mode [ 222.721533][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.748889][ T5144] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 222.900634][ T7613] bridge_slave_1: left allmulticast mode [ 222.906348][ T7613] bridge_slave_1: left promiscuous mode [ 222.968481][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.412377][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.428'. [ 223.620231][ T7632] hub 6-0:1.0: USB hub found [ 223.627225][ T7632] hub 6-0:1.0: 1 port detected [ 224.549747][ T7613] bond0: (slave bond_slave_0): Releasing backup interface [ 224.730131][ T7613] bond0: (slave bond_slave_1): Releasing backup interface [ 224.837462][ T12] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 224.958240][ T3593] Bluetooth: hci1: Frame reassembly failed (-84) [ 224.966007][ T3593] Bluetooth: hci1: Frame reassembly failed (-84) [ 225.507153][ T7613] team0: Port device team_slave_0 removed [ 225.525166][ T7613] team0: Port device team_slave_1 removed [ 225.533983][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.541975][ T7613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.554499][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.562945][ T7613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.909722][ T5144] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 227.988736][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 228.148694][ T8] usb 2-1: device descriptor read/64, error -71 [ 228.158716][ T5841] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 228.718739][ T5841] usb 6-1: Using ep0 maxpacket: 8 [ 228.733713][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 228.759109][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 228.764823][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.812469][ T5841] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.864150][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 228.885720][ T5841] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 228.899244][ T8] usb 2-1: device descriptor read/64, error -71 [ 228.903121][ T5841] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 228.962751][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.002540][ T5841] usb 6-1: config 0 descriptor?? [ 229.009503][ T7669] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 229.020055][ T8] usb usb2-port1: attempt power cycle [ 229.355983][ T5877] usb 6-1: USB disconnect, device number 8 [ 229.364743][ T5144] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 229.380656][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.460222][ T8] usb 2-1: device descriptor read/8, error -71 [ 229.713590][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 229.750961][ T8] usb 2-1: device descriptor read/8, error -71 [ 229.870293][ T8] usb usb2-port1: unable to enumerate USB device [ 230.714383][ T5834] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 233.918849][ T5144] Bluetooth: hci1: command 0x1003 tx timeout [ 233.963171][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 234.419412][ T6998] Bluetooth: hci1: Frame reassembly failed (-84) [ 234.788870][ T5144] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 234.797926][ T5144] Bluetooth: hci3: Injecting HCI hardware error event [ 234.809816][ T5144] Bluetooth: hci3: hardware error 0x00 [ 236.022921][ T54] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 236.438813][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 236.460149][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 236.508754][ T5878] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 237.000509][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 237.290416][ T5144] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 237.531718][ T5878] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 237.541198][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.570639][ T5878] usb 6-1: Product: syz [ 237.574855][ T5878] usb 6-1: Manufacturer: syz [ 237.579994][ T5878] usb 6-1: SerialNumber: syz [ 237.600816][ T5878] usb 6-1: config 0 descriptor?? [ 238.379014][ T5878] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 240.873718][ T5878] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 240.899447][ T5834] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 240.908056][ T5834] Bluetooth: hci2: Injecting HCI hardware error event [ 240.917042][ T5834] Bluetooth: hci2: hardware error 0x00 [ 240.990059][ T5876] usb 6-1: USB disconnect, device number 9 [ 242.741576][ T5144] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 242.896174][ T6998] Bluetooth: hci1: Frame reassembly failed (-84) [ 243.989907][ T5834] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 244.986840][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 246.028909][ T5876] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 247.326543][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 247.337816][ T5876] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.348218][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.368441][ T5876] usb 6-1: Product: syz [ 247.435508][ T5876] usb 6-1: Manufacturer: syz [ 247.447505][ T5876] usb 6-1: SerialNumber: syz [ 247.636877][ T7834] netlink: 224 bytes leftover after parsing attributes in process `syz.3.479'. [ 247.660753][ T5876] usb 6-1: config 0 descriptor?? [ 247.754081][ T6998] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 247.862474][ T3447] Bluetooth: hci1: Frame reassembly failed (-84) [ 247.918042][ T3447] Bluetooth: hci1: Frame reassembly failed (-84) [ 248.361842][ T5876] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 248.758710][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 249.128997][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 249.144002][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.163156][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 249.931726][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 249.940925][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.963419][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 249.963416][ T5144] Bluetooth: hci1: command 0x1003 tx timeout [ 249.972854][ T8] usb 1-1: config 0 descriptor?? [ 249.985603][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 250.240683][ T8] usb 1-1: USB disconnect, device number 9 [ 251.892122][ T5876] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 251.921200][ T5876] usb 6-1: USB disconnect, device number 10 [ 254.695125][ T7862] Process accounting resumed [ 255.444009][ T52] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 255.476299][ T3447] Bluetooth: hci1: Frame reassembly failed (-84) [ 255.951126][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962120][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.369142][ T7915] netlink: 224 bytes leftover after parsing attributes in process `syz.3.493'. [ 256.713060][ T5876] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 256.880221][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 257.049339][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.169442][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 257.195432][ T5876] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.275706][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.326812][ T5876] usb 2-1: config 0 descriptor?? [ 257.347539][ T5876] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 257.468667][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 257.576060][ T5876] usb 2-1: USB disconnect, device number 11 [ 261.620775][ T3434] Bluetooth: hci1: Frame reassembly failed (-84) [ 261.941293][ T7940] Process accounting resumed [ 262.801627][ T7971] netlink: 224 bytes leftover after parsing attributes in process `syz.2.513'. [ 262.812923][ T7971] @: renamed from vlan0 (while UP) [ 262.959948][ T7972] fuse: Bad value for 'user_id' [ 262.966076][ T7972] fuse: Bad value for 'user_id' [ 264.011690][ T5833] Bluetooth: hci1: command 0x1003 tx timeout [ 264.035741][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 265.474618][ T5144] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 268.768532][ T8026] netlink: 224 bytes leftover after parsing attributes in process `syz.1.529'. [ 268.835175][ T8004] Process accounting resumed [ 270.188761][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 272.047375][ T5144] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 274.591466][ T8078] Process accounting resumed [ 274.667159][ T8081] netlink: 224 bytes leftover after parsing attributes in process `syz.5.546'. [ 279.685262][ T5834] Bluetooth: hci1: command 0x1003 tx timeout [ 279.716745][ T5144] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 281.532386][ T8142] netlink: 172 bytes leftover after parsing attributes in process `syz.1.563'. [ 281.664668][ T8147] netlink: 'syz.1.563': attribute type 3 has an invalid length. [ 281.672608][ T8147] netlink: 224 bytes leftover after parsing attributes in process `syz.1.563'. [ 282.264012][ T8150] netlink: 104 bytes leftover after parsing attributes in process `syz.3.566'. [ 287.746724][ T8200] netlink: 172 bytes leftover after parsing attributes in process `syz.0.579'. [ 287.811147][ T8201] netlink: 'syz.0.579': attribute type 3 has an invalid length. [ 287.819239][ T8201] netlink: 224 bytes leftover after parsing attributes in process `syz.0.579'. [ 288.895813][ T5834] Bluetooth: hci1: command 0x1003 tx timeout [ 288.983966][ T5144] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 291.514026][ T8228] Process accounting resumed [ 294.088544][ T8263] netlink: 224 bytes leftover after parsing attributes in process `syz.2.594'. [ 295.446329][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.5.600'. [ 296.267011][ T8271] ceph: No mds server is up or the cluster is laggy [ 296.346134][ T8288] fuse: Bad value for 'group_id' [ 296.351501][ T8288] fuse: Bad value for 'group_id' [ 296.547768][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 296.623473][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 298.829364][ T8301] Malformed UNC in devname [ 298.829364][ T8301] [ 298.837597][ T8301] CIFS: VFS: Malformed UNC in devname [ 300.579751][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'. [ 301.275865][ T8320] syz.0.614 (8320) used greatest stack depth: 18480 bytes left [ 301.317691][ T8329] team0: left allmulticast mode [ 301.921440][ T8336] netlink: 104 bytes leftover after parsing attributes in process `syz.5.616'. [ 302.099226][ T8329] team_slave_0: left allmulticast mode [ 302.104969][ T8329] team_slave_1: left allmulticast mode [ 302.113459][ T8329] bridge0: port 3(team0) entered disabled state [ 302.260494][ T8329] bridge_slave_0: left allmulticast mode [ 302.398197][ T8329] bridge_slave_0: left promiscuous mode [ 302.713999][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.842492][ T8329] bridge_slave_1: left allmulticast mode [ 302.893766][ T8329] bridge_slave_1: left promiscuous mode [ 302.935740][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.111717][ T8342] Process accounting resumed [ 303.989221][ T8329] bond0: (slave bond_slave_0): Releasing backup interface [ 304.178326][ T8329] bond0: (slave bond_slave_1): Releasing backup interface [ 305.349392][ T8329] team_slave_0: left promiscuous mode [ 305.757095][ T8366] netlink: 224 bytes leftover after parsing attributes in process `syz.3.623'. [ 306.880872][ T8353] fuse: Bad value for 'group_id' [ 306.885838][ T8353] fuse: Bad value for 'group_id' [ 307.035902][ T8372] blktrace: Concurrent blktraces are not allowed on sg0 [ 307.121806][ T8329] team0: Port device team_slave_0 removed [ 307.593579][ T8329] team_slave_1: left promiscuous mode [ 307.639816][ T8329] team0: Port device team_slave_1 removed [ 307.654024][ T8329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.671303][ T8329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.695911][ T8329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.703531][ T8329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.231705][ T8385] syz.3.629 (8385) used greatest stack depth: 18352 bytes left [ 311.211014][ T8394] Process accounting resumed [ 312.247584][ T8411] fuse: Bad value for 'group_id' [ 312.257428][ T8411] fuse: Bad value for 'group_id' [ 312.744099][ T8417] netlink: 104 bytes leftover after parsing attributes in process `syz.5.636'. [ 313.697773][ T8432] netlink: 172 bytes leftover after parsing attributes in process `syz.5.641'. [ 313.814170][ T8435] netlink: 'syz.5.641': attribute type 3 has an invalid length. [ 313.822027][ T8435] netlink: 224 bytes leftover after parsing attributes in process `syz.5.641'. [ 317.400443][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.406887][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.733346][ T8479] netlink: 104 bytes leftover after parsing attributes in process `syz.1.651'. [ 331.508947][ T8591] netlink: 224 bytes leftover after parsing attributes in process `syz.1.678'. [ 337.018827][ T5877] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 338.070535][ T5877] usb 3-1: device descriptor read/64, error -71 [ 338.699648][ T8659] netlink: 104 bytes leftover after parsing attributes in process `syz.1.699'. [ 342.761969][ T8686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.709'. [ 342.856985][ T8687] netlink: 224 bytes leftover after parsing attributes in process `syz.3.703'. [ 345.262589][ T8704] netlink: 104 bytes leftover after parsing attributes in process `syz.1.715'. [ 345.558660][ T5877] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 346.111911][ T5877] usb 4-1: device descriptor read/64, error -71 [ 346.191488][ T6145] Bluetooth: hci1: Frame reassembly failed (-84) [ 346.349787][ T5877] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 346.558759][ T5877] usb 4-1: device descriptor read/64, error -71 [ 346.921078][ T5877] usb usb4-port1: attempt power cycle [ 347.133136][ T8727] Process accounting resumed [ 348.298779][ T5144] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 350.707195][ T8773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.359475][ T8773] tty tty30: ldisc open failed (-12), clearing slot 29 [ 352.995720][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 353.368882][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 353.556815][ T25] usb 2-1: no configurations [ 353.561809][ T25] usb 2-1: can't read configurations, error -22 [ 354.568639][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 354.786146][ T8827] netlink: 'syz.0.744': attribute type 3 has an invalid length. [ 354.793943][ T8827] netlink: 224 bytes leftover after parsing attributes in process `syz.0.744'. [ 356.132947][ T5873] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 357.547976][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 357.594218][ T5873] usb 1-1: config 0 has no interfaces? [ 357.611117][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.847652][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.973826][ T5873] usb 1-1: Product: syz [ 357.978153][ T5873] usb 1-1: Manufacturer: syz [ 357.983056][ T5873] usb 1-1: SerialNumber: syz [ 358.784967][ T5873] usb 1-1: config 0 descriptor?? [ 359.186963][ T5873] usb 1-1: can't set config #0, error -71 [ 359.194766][ T5873] usb 1-1: USB disconnect, device number 10 [ 361.918948][ T5841] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 362.927571][ T8921] netlink: 104 bytes leftover after parsing attributes in process `syz.3.770'. [ 363.900970][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 363.915331][ T5841] usb 2-1: no configurations [ 363.920238][ T5841] usb 2-1: can't read configurations, error -22 [ 364.013761][ T8937] netlink: 28 bytes leftover after parsing attributes in process `syz.5.775'. [ 364.758674][ T5841] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 364.838906][ T5873] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 365.062976][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 365.257596][ T5873] usb 1-1: config 0 has no interfaces? [ 365.332295][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.356312][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.376275][ T5873] usb 1-1: Product: syz [ 365.395284][ T5873] usb 1-1: Manufacturer: syz [ 365.400402][ T5873] usb 1-1: SerialNumber: syz [ 365.415831][ T5873] usb 1-1: config 0 descriptor?? [ 365.683152][ T5877] usb 1-1: USB disconnect, device number 11 [ 369.592774][ T8982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.838653][ T5873] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 372.675052][ T5841] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 372.682683][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 372.689118][ T5873] usb 1-1: no configurations [ 372.693819][ T5873] usb 1-1: can't read configurations, error -22 [ 372.978743][ T5873] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 373.131811][ T5841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 373.163009][ T5841] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 373.178690][ T5841] usb 4-1: can't read configurations, error -71 [ 373.608668][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 373.615356][ T5873] usb 1-1: no configurations [ 373.621485][ T5873] usb 1-1: can't read configurations, error -22 [ 373.636403][ T5873] usb usb1-port1: attempt power cycle [ 374.048747][ T5873] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 374.259190][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 374.264972][ T5873] usb 1-1: no configurations [ 374.269857][ T5873] usb 1-1: can't read configurations, error -22 [ 374.599775][ T5873] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 375.802284][ T5873] usb 1-1: device descriptor read/8, error -71 [ 375.928962][ T5873] usb usb1-port1: unable to enumerate USB device [ 376.074586][ T9035] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.801'. [ 377.318931][ T5873] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 377.498927][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 377.631682][ T5873] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 377.715508][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.916902][ T5876] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 377.923971][ T5873] usb 1-1: Product: syz [ 378.005373][ T5873] usb 1-1: Manufacturer: syz [ 378.016649][ T5873] usb 1-1: SerialNumber: syz [ 378.072809][ T5876] usb 3-1: unable to get BOS descriptor or descriptor too short [ 378.079539][ T5873] usb 1-1: config 0 descriptor?? [ 378.130622][ T5873] gspca_main: se401-2.14.0 probing 047d:5003 [ 378.143599][ T5876] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 378.151608][ T5876] usb 3-1: can't read configurations, error -71 [ 379.379846][ T5873] gspca_se401: Bayer format not supported! [ 379.394842][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.402856][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.469440][ T5878] usb 1-1: USB disconnect, device number 16 [ 380.222824][ T9087] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.815'. [ 380.379014][ T5873] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 380.538733][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 380.545638][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.556691][ T5873] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.588606][ T5873] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 380.597772][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.647872][ T5873] usb 6-1: config 0 descriptor?? [ 380.938967][ T5878] usb 6-1: USB disconnect, device number 11 [ 382.040954][ T9108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.088720][ T5877] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 383.431436][ T5877] usb 6-1: unable to get BOS descriptor or descriptor too short [ 383.459825][ T5877] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 383.467592][ T5877] usb 6-1: can't read configurations, error -71 [ 384.107264][ T9124] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.826'. [ 384.254080][ T9126] bridge_slave_0: left allmulticast mode [ 384.278747][ T9126] bridge_slave_0: left promiscuous mode [ 384.499778][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.514350][ T9126] bond0: (slave bond_slave_0): Releasing backup interface [ 385.588055][ T9145] fuse: Unknown parameter 'group_i00000000000000000000' [ 385.719162][ T9126] bond0: (slave bond_slave_1): Releasing backup interface [ 385.885424][ T9126] team0: Port device team_slave_0 removed [ 385.992985][ T9126] team0: Port device team_slave_1 removed [ 386.020584][ T9126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.058757][ T9126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.119902][ T9126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.127527][ T9126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.154266][ T5877] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 386.429126][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 386.434740][ T9158] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.837'. [ 386.771320][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.787943][ T5877] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 386.812164][ T5877] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 386.848336][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.893126][ T5877] usb 4-1: config 0 descriptor?? [ 387.342350][ T5877] usb 4-1: USB disconnect, device number 12 [ 387.682466][ T9173] netlink: 224 bytes leftover after parsing attributes in process `syz.2.841'. [ 388.015098][ T9181] fuse: Unknown parameter 'group_id00000000000000000000' [ 389.134069][ T9194] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.848'. [ 391.750329][ T9221] fuse: Unknown parameter 'group_id00000000000000000000' [ 392.084394][ T9223] netlink: 224 bytes leftover after parsing attributes in process `syz.3.856'. [ 392.528613][ T5921] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 392.738922][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 393.196254][ T5877] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 393.241853][ T5921] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 393.251334][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.259836][ T5921] usb 1-1: Product: syz [ 393.264373][ T5921] usb 1-1: Manufacturer: syz [ 393.269286][ T5921] usb 1-1: SerialNumber: syz [ 393.276239][ T5921] usb 1-1: config 0 descriptor?? [ 393.288145][ T5921] gspca_main: se401-2.14.0 probing 047d:5003 [ 393.505064][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 393.516416][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.791182][ T5877] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.800532][ T5877] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 393.809788][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.823082][ T5921] gspca_se401: Bayer format not supported! [ 393.836260][ T5877] usb 2-1: config 0 descriptor?? [ 394.042297][ T5921] usb 1-1: USB disconnect, device number 17 [ 394.067689][ T5877] usb 2-1: USB disconnect, device number 16 [ 395.848120][ T9253] lo speed is unknown, defaulting to 1000 [ 395.923622][ T9253] lo speed is unknown, defaulting to 1000 [ 395.944734][ T9253] lo speed is unknown, defaulting to 1000 [ 396.239437][ T9260] fuse: Unknown parameter 'group_id00000000000000000000' [ 396.846806][ T9253] infiniband syz0: set active [ 396.851807][ T9253] infiniband syz0: added lo [ 396.859413][ T9253] syz0: rxe_create_cq: returned err = -12 [ 396.865582][ T9253] infiniband syz0: Couldn't create ib_mad CQ [ 396.872522][ T9253] infiniband syz0: Couldn't open port 1 [ 396.970753][ T5921] lo speed is unknown, defaulting to 1000 [ 397.178474][ T9270] binder: 9261:9270 ioctl c0306201 0 returned -14 [ 397.186403][ T9270] binder: 9261:9270 ioctl c0306201 0 returned -14 [ 397.769378][ T9253] RDS/IB: syz0: added [ 397.797669][ T9253] smc: adding ib device syz0 with port count 1 [ 397.815918][ T9253] smc: ib device syz0 port 1 has pnetid [ 397.852879][ T5876] lo speed is unknown, defaulting to 1000 [ 397.908421][ T9253] lo speed is unknown, defaulting to 1000 [ 398.308212][ T9280] netlink: 'syz.5.870': attribute type 3 has an invalid length. [ 398.316499][ T9280] netlink: 224 bytes leftover after parsing attributes in process `syz.5.870'. [ 398.506620][ T9253] lo speed is unknown, defaulting to 1000 [ 398.583118][ T9253] lo speed is unknown, defaulting to 1000 [ 398.688726][ T5921] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 398.868710][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 398.868825][ T5876] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 399.016285][ T5921] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 399.069132][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.145661][ T5921] usb 2-1: Product: syz [ 399.190957][ T5921] usb 2-1: Manufacturer: syz [ 399.243649][ T5921] usb 2-1: SerialNumber: syz [ 399.340049][ T5921] usb 2-1: config 0 descriptor?? [ 399.408667][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 399.430331][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.512091][ T9253] lo speed is unknown, defaulting to 1000 [ 399.513219][ T5876] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 400.208049][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.248736][ T5921] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 400.262015][ T5876] usb 4-1: config 0 descriptor?? [ 400.377983][ T9292] lo speed is unknown, defaulting to 1000 [ 400.523397][ T9253] lo speed is unknown, defaulting to 1000 [ 400.594969][ T9297] netlink: 224 bytes leftover after parsing attributes in process `syz.2.876'. [ 400.812687][ T5876] usb 4-1: USB disconnect, device number 13 [ 401.769858][ T5921] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 402.111576][ T9317] Process accounting resumed [ 402.356957][ T9324] binder: 9318:9324 ioctl c0306201 0 returned -14 [ 402.373339][ T9324] binder: 9318:9324 ioctl c0306201 0 returned -14 [ 403.068803][ T5878] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 403.371411][ T5921] usb 2-1: USB disconnect, device number 17 [ 403.738643][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 403.748302][ T5878] usb 3-1: unable to get BOS descriptor or descriptor too short [ 403.770389][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 403.781017][ T5878] usb 3-1: can't read configurations, error -71 [ 403.851446][ T9338] blktrace: Concurrent blktraces are not allowed on sg0 [ 404.988245][ T9345] lo speed is unknown, defaulting to 1000 [ 407.068746][ T5878] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 407.248750][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 408.081191][ T5878] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.091414][ T5878] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 408.113875][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.280558][ T5878] usb 6-1: config 0 descriptor?? [ 408.393455][ T9374] binder: 9369:9374 ioctl c0306201 0 returned -14 [ 409.089792][ T5876] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 409.250383][ T5878] usb 6-1: USB disconnect, device number 14 [ 409.388884][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 409.444603][ T5876] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 409.454495][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.464969][ T5876] usb 4-1: Product: syz [ 409.471741][ T5876] usb 4-1: Manufacturer: syz [ 409.477190][ T5876] usb 4-1: SerialNumber: syz [ 409.494036][ T5876] usb 4-1: config 0 descriptor?? [ 409.717732][ T5876] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 410.500076][ T9387] blktrace: Concurrent blktraces are not allowed on sg0 [ 411.356978][ T5876] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 412.283446][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 413.007362][ T5877] usb 4-1: USB disconnect, device number 14 [ 414.008232][ T9404] netlink: 224 bytes leftover after parsing attributes in process `syz.3.904'. [ 414.565352][ T9415] binder: 9410:9415 ioctl c0306201 0 returned -14 [ 415.447491][ T9417] Process accounting resumed [ 416.338742][ T9432] blktrace: Concurrent blktraces are not allowed on sg0 [ 417.541054][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.914'. [ 419.534771][ T9459] binder: 9451:9459 ioctl c0306201 0 returned -14 [ 420.368307][ T9468] netlink: 'syz.0.923': attribute type 3 has an invalid length. [ 420.376212][ T9468] netlink: 224 bytes leftover after parsing attributes in process `syz.0.923'. [ 424.288394][ T9498] binder: 9489:9498 ioctl c0306201 0 returned -14 [ 424.468097][ T3447] Bluetooth: hci1: Frame reassembly failed (-84) [ 425.575440][ T9506] bridge_slave_0: left allmulticast mode [ 425.581998][ T9506] bridge_slave_0: left promiscuous mode [ 425.588396][ T9506] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.944033][ T9506] bridge_slave_1: left allmulticast mode [ 425.977512][ T9506] bridge_slave_1: left promiscuous mode [ 426.056074][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.123584][ T9506] bond0: (slave bond_slave_0): Releasing backup interface [ 426.154656][ T9506] bond0: (slave bond_slave_1): Releasing backup interface [ 426.251099][ T9506] team0: Port device team_slave_0 removed [ 426.347886][ T9506] team0: Port device team_slave_1 removed [ 426.358803][ T9506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.371721][ T9506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.383833][ T9506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.391945][ T9506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.510812][ T5144] Bluetooth: hci1: command 0x1003 tx timeout [ 426.517879][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 426.943790][ T9521] netlink: 104 bytes leftover after parsing attributes in process `syz.0.937'. [ 427.680295][ T9525] Process accounting resumed [ 429.971048][ T9551] binder: 9548:9551 ioctl c0306201 0 returned -14 [ 433.768174][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.790110][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.800589][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.821293][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.829483][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 433.836935][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.213890][ T9578] lo speed is unknown, defaulting to 1000 [ 435.250463][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 435.260632][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 435.268386][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 435.288643][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 435.296281][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 435.310233][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 435.596254][ T6145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.635483][ T9578] chnl_net:caif_netlink_parms(): no params data found [ 435.871825][ T5834] Bluetooth: hci1: command tx timeout [ 435.887555][ T6145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.966034][ T9600] binder: 9597:9600 ioctl c0306201 0 returned -14 [ 436.808239][ T6145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.792280][ T9591] lo speed is unknown, defaulting to 1000 [ 437.819840][ T5834] Bluetooth: hci4: command tx timeout [ 438.779096][ T5834] Bluetooth: hci1: command tx timeout [ 439.868695][ T5834] Bluetooth: hci4: command tx timeout [ 440.855485][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.862193][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.102282][ T5834] Bluetooth: hci1: command tx timeout [ 441.191091][ T6145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.323541][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.330745][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.337975][ T9578] bridge_slave_0: entered allmulticast mode [ 441.345062][ T9578] bridge_slave_0: entered promiscuous mode [ 441.354057][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.361248][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.368450][ T9578] bridge_slave_1: entered allmulticast mode [ 441.402589][ T9578] bridge_slave_1: entered promiscuous mode [ 442.015983][ T5834] Bluetooth: hci4: command tx timeout [ 442.056930][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.070658][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.631141][ T9578] team0: Port device team_slave_0 added [ 442.829705][ T9578] team0: Port device team_slave_1 added [ 443.193794][ T5834] Bluetooth: hci1: command tx timeout [ 443.291584][ T9651] binder: 9645:9651 ioctl c0306201 0 returned -14 [ 443.904583][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.967'. [ 444.218630][ T5834] Bluetooth: hci4: command tx timeout [ 444.297894][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.305453][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.390053][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.463287][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.499461][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.560067][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.288073][ T6145] bond0 (unregistering): Released all slaves [ 447.350192][ T9591] chnl_net:caif_netlink_parms(): no params data found [ 447.917208][ T9578] hsr_slave_0: entered promiscuous mode [ 447.972463][ T9578] hsr_slave_1: entered promiscuous mode [ 448.005072][ T9578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.012945][ T9578] Cannot create hsr debugfs directory [ 449.508644][ T9689] lo speed is unknown, defaulting to 1000 [ 450.046932][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.063214][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.075986][ T9591] bridge_slave_0: entered allmulticast mode [ 450.095719][ T9591] bridge_slave_0: entered promiscuous mode [ 450.996304][ T9707] binder: 9700:9707 ioctl c0306201 0 returned -14 [ 451.029249][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.036466][ T9591] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.044445][ T9591] bridge_slave_1: entered allmulticast mode [ 451.052008][ T9591] bridge_slave_1: entered promiscuous mode [ 451.562622][ T9717] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 451.576262][ T9717] PKCS7: Only support pkcs7_signedData type [ 451.794049][ T9591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.113044][ T9591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.195999][ T6145] hsr_slave_0: left promiscuous mode [ 452.202137][ T6145] hsr_slave_1: left promiscuous mode [ 452.233171][ T6145] veth1_macvtap: left promiscuous mode [ 452.239223][ T6145] veth0_macvtap: left promiscuous mode [ 452.244829][ T6145] veth1_vlan: left promiscuous mode [ 452.250832][ T6145] veth0_vlan: left promiscuous mode [ 455.333285][ T9591] team0: Port device team_slave_0 added [ 455.489941][ T9591] team0: Port device team_slave_1 added [ 455.707116][ T9591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.778845][ T5921] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 455.796254][ T9591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.948772][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 455.968178][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 455.985950][ T5921] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 456.030547][ T9591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.059979][ T5921] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 456.095719][ T9591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.106586][ T5921] usb 4-1: Product: syz [ 456.120110][ T9591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.149702][ T5921] usb 4-1: Manufacturer: syz [ 456.154345][ T5921] usb 4-1: SerialNumber: syz [ 456.176105][ T9591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.424418][ T9738] binder: 9737:9738 ioctl c0306201 0 returned -14 [ 456.479103][ T5921] usb 4-1: Invalid connection information received from device [ 456.535070][ T9578] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 456.593860][ T9578] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 456.628186][ T9578] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 456.677425][ T9744] rdma_rxe: rxe_newlink: failed to add lo [ 456.912577][ T5921] usb 4-1: USB disconnect, device number 15 [ 457.015672][ T9578] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 458.280944][ T9591] hsr_slave_0: entered promiscuous mode [ 458.601207][ T9591] hsr_slave_1: entered promiscuous mode [ 458.610988][ T9591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.621775][ T9591] Cannot create hsr debugfs directory [ 458.681813][ T9749] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 458.688313][ T9749] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 458.805704][ T9749] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 458.812113][ T9749] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 458.827555][ T9749] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 458.839344][ T9749] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 458.845645][ T9749] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 458.858560][ T9749] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 459.515637][ T6145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.699268][ T9591] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 459.745278][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.783918][ T9591] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 459.805877][ T9591] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 459.874075][ T6145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.905518][ T9591] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 459.935060][ T9578] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.981037][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.988253][ T6998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.066529][ T6145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.749217][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 460.796006][ T9578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.813485][ T9578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.942550][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.949734][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.388852][ T5834] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 461.698898][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 461.718914][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 461.740634][ T6145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.758815][ T5834] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 461.838814][ T9777] rdma_rxe: rxe_newlink: failed to add lo [ 461.901314][ T9591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.957830][ T9591] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.994069][ T9591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.004500][ T9591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.040707][ T267] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.047854][ T267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.070094][ T267] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.077227][ T267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.098616][ T5921] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 462.155562][ T9578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.253968][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 462.503098][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 462.515376][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 462.583305][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 462.592678][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.607377][ T5921] usb 1-1: Product: syz [ 462.615177][ T5921] usb 1-1: Manufacturer: syz [ 462.623706][ T5921] usb 1-1: SerialNumber: syz [ 462.648819][ T5921] usb 1-1: config 0 descriptor?? [ 462.665632][ T5921] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 462.703531][ T5921] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 463.005950][ T6145] bond0 (unregistering): Released all slaves [ 463.051879][ T9591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.266383][ T6145] tipc: Disabling bearer [ 463.287728][ T6145] tipc: Left network mode [ 463.323736][ T5921] em28xx 1-1:0.0: chip ID is em28174 [ 463.648093][ T9578] veth0_vlan: entered promiscuous mode [ 463.663330][ T8] usb 1-1: USB disconnect, device number 18 [ 463.670768][ T8] em28xx 1-1:0.0: Disconnecting em28xx [ 463.707286][ T8] em28xx 1-1:0.0: Freeing device [ 463.718759][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 463.725456][ T9578] veth1_vlan: entered promiscuous mode [ 463.788654][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 463.805701][ T9591] veth0_vlan: entered promiscuous mode [ 464.556616][ T9591] veth1_vlan: entered promiscuous mode [ 464.657489][ T9578] veth0_macvtap: entered promiscuous mode [ 464.680847][ T9591] veth0_macvtap: entered promiscuous mode [ 464.713229][ T9591] veth1_macvtap: entered promiscuous mode [ 464.761566][ T9578] veth1_macvtap: entered promiscuous mode [ 465.407435][ T6145] hsr_slave_0: left promiscuous mode [ 465.500467][ T6145] hsr_slave_1: left promiscuous mode [ 465.561357][ T6145] veth1_macvtap: left promiscuous mode [ 465.566869][ T6145] veth0_macvtap: left promiscuous mode [ 465.574441][ T6145] veth1_vlan: left promiscuous mode [ 465.580796][ T6145] veth0_vlan: left promiscuous mode [ 466.421646][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 466.421696][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 466.433921][ T54] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 466.444635][ T54] Bluetooth: hci5: Injecting HCI hardware error event [ 466.456285][ T5144] Bluetooth: hci5: hardware error 0x00 [ 466.833227][ T9834] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1013'. [ 467.818248][ T9591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.840651][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.878359][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.741741][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 468.751856][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.797561][ T9591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.820999][ T9838] lo speed is unknown, defaulting to 1000 [ 468.833256][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.854146][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.876678][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.911004][ T9578] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.985950][ T9578] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.028266][ T9578] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.064229][ T9578] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.571768][ T9591] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.615069][ T9591] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.639098][ T9591] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.664707][ T9591] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.144170][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.252149][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.468420][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.484054][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.537318][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.726958][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.280734][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.395987][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.130346][ T5144] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 472.661924][ T5144] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 472.784493][ T9873] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1023'. [ 473.739540][ T5841] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 474.098665][ T5841] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 474.122256][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 474.133328][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.143349][ T5841] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 474.156699][ T5841] usb 8-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 474.165863][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.234128][ T5841] usb 8-1: config 0 descriptor?? [ 476.918676][ T9911] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1035'. [ 477.018567][ T5841] usbhid 8-1:0.0: can't add hid device: -71 [ 477.024612][ T5841] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 477.034457][ T5841] usb 8-1: USB disconnect, device number 2 [ 478.076926][ T9929] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1039'. [ 478.783797][ T9937] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1041'. [ 478.887442][ T9937] netlink: 'syz.5.1041': attribute type 3 has an invalid length. [ 478.895319][ T9937] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1041'. [ 479.022699][ T9946] syz.3.1045 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 479.698322][ T9949] bad cache= option: none [ 479.698322][ T9949] [ 479.705237][ T9949] CIFS: VFS: bad cache= option: none [ 481.054395][ T9980] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1054'. [ 483.019495][ T9998] lo speed is unknown, defaulting to 1000 [ 485.909398][T10033] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1065'. [ 486.897468][T10033] @: renamed from vlan0 (while UP) [ 486.978374][T10036] netlink: 'syz.3.1068': attribute type 4 has an invalid length. [ 487.113555][T10029] fuse: Unknown parameter '0x000000000000000a' [ 487.660502][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'. [ 488.570975][T10039] netlink: 'syz.3.1068': attribute type 8 has an invalid length. [ 488.579294][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 488.691759][T10036] ------------[ cut here ]------------ [ 488.697858][T10036] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait+0x186/0x210 [ 488.717846][T10036] WARNING: CPU: 0 PID: 10036 at kernel/sched/core.c:8685 __might_sleep+0xb9/0xe0 [ 488.727110][T10036] Modules linked in: [ 488.731437][T10036] CPU: 0 UID: 0 PID: 10036 Comm: syz.3.1068 Not tainted 6.12.0-next-20241127-syzkaller #0 [ 488.741565][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 488.751723][T10036] RIP: 0010:__might_sleep+0xb9/0xe0 [ 488.756964][T10036] Code: 94 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 ae 30 9b 00 48 8b 4d 00 48 c7 c7 80 2d 0a 8c 44 89 ee 48 89 ca e8 08 e6 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff [ 488.776890][T10036] RSP: 0018:ffffc90003ff65a8 EFLAGS: 00010246 [ 488.783086][T10036] RAX: 1a9eb8cf05405100 RBX: 1ffff11006a98a6d RCX: 0000000000080000 [ 488.792205][T10036] RDX: ffffc9000c941000 RSI: 0000000000006f44 RDI: 0000000000006f45 [ 488.801122][T10036] RBP: ffff8880354c5368 R08: ffffffff81601b12 R09: fffffbfff1cfa218 [ 488.809185][T10036] R10: dffffc0000000000 R11: fffffbfff1cfa218 R12: dffffc0000000000 [ 488.817191][T10036] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1ca120 [ 488.825508][T10036] FS: 00007f4c7af8b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 488.834643][T10036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.841327][T10036] CR2: 00007f8f5a747bac CR3: 0000000068bb4000 CR4: 00000000003526f0 [ 488.849392][T10036] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 488.857391][T10036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 488.865503][T10036] Call Trace: [ 488.868883][T10036] [ 488.871861][T10036] ? __warn+0x165/0x4d0 [ 488.876064][T10036] ? __might_sleep+0xb9/0xe0 [ 488.880808][T10036] ? report_bug+0x2b3/0x500 [ 488.885368][T10036] ? __might_sleep+0xb9/0xe0 [ 488.890966][T10036] ? handle_bug+0x60/0x90 [ 488.895331][T10036] ? exc_invalid_op+0x1a/0x50 [ 488.900917][T10036] ? asm_exc_invalid_op+0x1a/0x20 [ 488.905980][T10036] ? __warn_printk+0x292/0x360 [ 488.911083][T10036] ? __might_sleep+0xb9/0xe0 [ 488.915712][T10036] ? __might_sleep+0xb8/0xe0 [ 488.920582][T10036] netfs_retry_reads+0xde/0x1e10 [ 488.925552][T10036] ? mark_lock+0x9a/0x360 [ 488.929979][T10036] ? __lock_acquire+0x1397/0x2100 [ 488.935083][T10036] ? __pfx_netfs_retry_reads+0x10/0x10 [ 488.940640][T10036] netfs_read_collection+0x334e/0x4020 [ 488.946205][T10036] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 488.952322][T10036] ? lockdep_hardirqs_on+0x99/0x150 [ 488.957665][T10036] netfs_wait_for_read+0x2ba/0x4e0 [ 488.962855][T10036] ? trace_netfs_sreq_ref+0x94/0x230 [ 488.968172][T10036] ? __pfx_netfs_wait_for_read+0x10/0x10 [ 488.973902][T10036] ? __pfx_autoremove_wake_function+0x10/0x10 [ 488.980078][T10036] ? __pfx_v9fs_issue_read+0x10/0x10 [ 488.985723][T10036] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 488.994844][T10036] netfs_unbuffered_read_iter_locked+0x11fc/0x1540 [ 489.001590][T10036] netfs_unbuffered_read_iter+0xbf/0xe0 [ 489.007263][T10036] __kernel_read+0x513/0x9d0 [ 489.012012][T10036] ? do_sys_openat2+0x13e/0x1d0 [ 489.016981][T10036] ? __pfx___kernel_read+0x10/0x10 [ 489.022332][T10036] integrity_kernel_read+0xb0/0x100 [ 489.027603][T10036] ? __pfx_integrity_kernel_read+0x10/0x10 [ 489.033667][T10036] ? __kmalloc_cache_noprof+0x243/0x390 [ 489.039620][T10036] ? ima_calc_file_hash+0xaae/0x1b30 [ 489.045032][T10036] ima_calc_file_hash+0xae6/0x1b30 [ 489.050310][T10036] ? p9_client_stat+0x1be/0x280 [ 489.055252][T10036] ? v9fs_vfs_getattr+0x1c0/0x370 [ 489.060454][T10036] ? ima_collect_measurement+0x2b1/0xb10 [ 489.066188][T10036] ? process_measurement+0x1351/0x1fb0 [ 489.071941][T10036] ? ima_file_check+0xd9/0x120 [ 489.076795][T10036] ? security_file_post_open+0xb9/0x280 [ 489.082537][T10036] ? path_openat+0x2ccd/0x3590 [ 489.087403][T10036] ? do_filp_open+0x27f/0x4e0 [ 489.092219][T10036] ? __x64_sys_open+0x225/0x270 [ 489.098886][T10036] ? do_syscall_64+0xf3/0x230 [ 489.105853][T10036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.112153][T10036] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 489.117876][T10036] ? p9_client_stat+0x1be/0x280 [ 489.122925][T10036] ? kfree+0x196/0x430 [ 489.127109][T10036] ? p9_client_stat+0x1be/0x280 [ 489.132155][T10036] ? p9_client_stat+0x1be/0x280 [ 489.137183][T10036] ? __pfx_p9_client_stat+0x10/0x10 [ 489.142528][T10036] ? v9fs_fid_lookup+0x1b2/0xf30 [ 489.147565][T10036] ? v9fs_vfs_getattr+0x2eb/0x370 [ 489.152950][T10036] ima_collect_measurement+0x520/0xb10 [ 489.158632][T10036] ? __pfx_ima_collect_measurement+0x10/0x10 [ 489.164745][T10036] ? rcu_is_watching+0x15/0xb0 [ 489.169781][T10036] ? trace_contention_end+0x3c/0x120 [ 489.175181][T10036] ? __asan_memset+0x23/0x50 [ 489.179964][T10036] ? ima_get_hash_algo+0x156/0x4d0 [ 489.185164][T10036] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 489.190815][T10036] process_measurement+0x1351/0x1fb0 [ 489.200589][T10036] ? __pfx_process_measurement+0x10/0x10 [ 489.206331][T10036] ? do_raw_spin_lock+0x14f/0x370 [ 489.211605][T10036] ? __pfx_v9fs_file_open+0x10/0x10 [ 489.216914][T10036] ? mnt_get_write_access+0x68/0x2b0 [ 489.222430][T10036] ? mnt_get_write_access+0x226/0x2b0 [ 489.227861][T10036] ? inode_to_bdi+0x69/0xf0 [ 489.232651][T10036] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 489.239132][T10036] ima_file_check+0xd9/0x120 [ 489.243811][T10036] ? __pfx_ima_file_check+0x10/0x10 [ 489.249266][T10036] security_file_post_open+0xb9/0x280 [ 489.254727][T10036] path_openat+0x2ccd/0x3590 [ 489.259596][T10036] ? __pfx_path_openat+0x10/0x10 [ 489.264667][T10036] do_filp_open+0x27f/0x4e0 [ 489.269367][T10036] ? __pfx_do_filp_open+0x10/0x10 [ 489.274472][T10036] ? do_raw_spin_lock+0x14f/0x370 [ 489.279699][T10036] do_sys_openat2+0x13e/0x1d0 [ 489.284463][T10036] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.289916][T10036] __x64_sys_open+0x225/0x270 [ 489.294714][T10036] ? __pfx___x64_sys_open+0x10/0x10 [ 489.304473][T10036] ? do_syscall_64+0x100/0x230 [ 489.309436][T10036] ? do_syscall_64+0xb6/0x230 [ 489.314306][T10036] do_syscall_64+0xf3/0x230 [ 489.319019][T10036] ? clear_bhb_loop+0x35/0x90 [ 489.323823][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.330183][T10036] RIP: 0033:0x7f4c7a180809 [ 489.334728][T10036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.354613][T10036] RSP: 002b:00007f4c7af8b058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 489.363274][T10036] RAX: ffffffffffffffda RBX: 00007f4c7a345fa0 RCX: 00007f4c7a180809 [ 489.371595][T10036] RDX: 0000000000000040 RSI: 0000000000082c02 RDI: 0000000020000140 [ 489.379774][T10036] RBP: 00007f4c7a1f393e R08: 0000000000000000 R09: 0000000000000000 [ 489.387823][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.396012][T10036] R13: 0000000000000000 R14: 00007f4c7a345fa0 R15: 00007ffccf47f7a8 [ 489.408586][T10036] [ 489.411736][T10036] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 489.419032][T10036] CPU: 0 UID: 0 PID: 10036 Comm: syz.3.1068 Not tainted 6.12.0-next-20241127-syzkaller #0 [ 489.428934][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 489.439002][T10036] Call Trace: [ 489.442292][T10036] [ 489.445234][T10036] dump_stack_lvl+0x241/0x360 [ 489.449942][T10036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.455160][T10036] ? __pfx__printk+0x10/0x10 [ 489.459777][T10036] ? vscnprintf+0x5d/0x90 [ 489.464125][T10036] panic+0x349/0x880 [ 489.468042][T10036] ? __warn+0x174/0x4d0 [ 489.472214][T10036] ? __pfx_panic+0x10/0x10 [ 489.476727][T10036] ? __warn+0x174/0x4d0 [ 489.480960][T10036] ? __warn+0x32c/0x4d0 [ 489.485150][T10036] __warn+0x344/0x4d0 [ 489.489152][T10036] ? __might_sleep+0xb9/0xe0 [ 489.493772][T10036] report_bug+0x2b3/0x500 [ 489.498126][T10036] ? __might_sleep+0xb9/0xe0 [ 489.502743][T10036] handle_bug+0x60/0x90 [ 489.506927][T10036] exc_invalid_op+0x1a/0x50 [ 489.511459][T10036] asm_exc_invalid_op+0x1a/0x20 [ 489.516325][T10036] RIP: 0010:__might_sleep+0xb9/0xe0 [ 489.521543][T10036] Code: 94 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 ae 30 9b 00 48 8b 4d 00 48 c7 c7 80 2d 0a 8c 44 89 ee 48 89 ca e8 08 e6 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff [ 489.541176][T10036] RSP: 0018:ffffc90003ff65a8 EFLAGS: 00010246 [ 489.547265][T10036] RAX: 1a9eb8cf05405100 RBX: 1ffff11006a98a6d RCX: 0000000000080000 [ 489.555256][T10036] RDX: ffffc9000c941000 RSI: 0000000000006f44 RDI: 0000000000006f45 [ 489.563243][T10036] RBP: ffff8880354c5368 R08: ffffffff81601b12 R09: fffffbfff1cfa218 [ 489.571229][T10036] R10: dffffc0000000000 R11: fffffbfff1cfa218 R12: dffffc0000000000 [ 489.579219][T10036] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1ca120 [ 489.587215][T10036] ? __warn_printk+0x292/0x360 [ 489.592010][T10036] ? __might_sleep+0xb8/0xe0 [ 489.596615][T10036] netfs_retry_reads+0xde/0x1e10 [ 489.601586][T10036] ? mark_lock+0x9a/0x360 [ 489.606041][T10036] ? __lock_acquire+0x1397/0x2100 [ 489.611116][T10036] ? __pfx_netfs_retry_reads+0x10/0x10 [ 489.616634][T10036] netfs_read_collection+0x334e/0x4020 [ 489.622132][T10036] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 489.628149][T10036] ? lockdep_hardirqs_on+0x99/0x150 [ 489.633485][T10036] netfs_wait_for_read+0x2ba/0x4e0 [ 489.638623][T10036] ? trace_netfs_sreq_ref+0x94/0x230 [ 489.643936][T10036] ? __pfx_netfs_wait_for_read+0x10/0x10 [ 489.649599][T10036] ? __pfx_autoremove_wake_function+0x10/0x10 [ 489.655708][T10036] ? __pfx_v9fs_issue_read+0x10/0x10 [ 489.661015][T10036] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 489.666581][T10036] netfs_unbuffered_read_iter_locked+0x11fc/0x1540 [ 489.673208][T10036] netfs_unbuffered_read_iter+0xbf/0xe0 [ 489.678787][T10036] __kernel_read+0x513/0x9d0 [ 489.683393][T10036] ? do_sys_openat2+0x13e/0x1d0 [ 489.688265][T10036] ? __pfx___kernel_read+0x10/0x10 [ 489.693604][T10036] integrity_kernel_read+0xb0/0x100 [ 489.698824][T10036] ? __pfx_integrity_kernel_read+0x10/0x10 [ 489.704656][T10036] ? __kmalloc_cache_noprof+0x243/0x390 [ 489.710222][T10036] ? ima_calc_file_hash+0xaae/0x1b30 [ 489.715537][T10036] ima_calc_file_hash+0xae6/0x1b30 [ 489.720697][T10036] ? p9_client_stat+0x1be/0x280 [ 489.725565][T10036] ? v9fs_vfs_getattr+0x1c0/0x370 [ 489.730598][T10036] ? ima_collect_measurement+0x2b1/0xb10 [ 489.736260][T10036] ? process_measurement+0x1351/0x1fb0 [ 489.741750][T10036] ? ima_file_check+0xd9/0x120 [ 489.746536][T10036] ? security_file_post_open+0xb9/0x280 [ 489.752106][T10036] ? path_openat+0x2ccd/0x3590 [ 489.756892][T10036] ? do_filp_open+0x27f/0x4e0 [ 489.761591][T10036] ? __x64_sys_open+0x225/0x270 [ 489.766466][T10036] ? do_syscall_64+0xf3/0x230 [ 489.771169][T10036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.777293][T10036] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 489.782912][T10036] ? p9_client_stat+0x1be/0x280 [ 489.787793][T10036] ? kfree+0x196/0x430 [ 489.791895][T10036] ? p9_client_stat+0x1be/0x280 [ 489.796778][T10036] ? p9_client_stat+0x1be/0x280 [ 489.801659][T10036] ? __pfx_p9_client_stat+0x10/0x10 [ 489.806877][T10036] ? v9fs_fid_lookup+0x1b2/0xf30 [ 489.811856][T10036] ? v9fs_vfs_getattr+0x2eb/0x370 [ 489.816966][T10036] ima_collect_measurement+0x520/0xb10 [ 489.822462][T10036] ? __pfx_ima_collect_measurement+0x10/0x10 [ 489.828473][T10036] ? rcu_is_watching+0x15/0xb0 [ 489.833264][T10036] ? trace_contention_end+0x3c/0x120 [ 489.838580][T10036] ? __asan_memset+0x23/0x50 [ 489.843199][T10036] ? ima_get_hash_algo+0x156/0x4d0 [ 489.848327][T10036] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 489.853811][T10036] process_measurement+0x1351/0x1fb0 [ 489.859142][T10036] ? __pfx_process_measurement+0x10/0x10 [ 489.864798][T10036] ? do_raw_spin_lock+0x14f/0x370 [ 489.869886][T10036] ? __pfx_v9fs_file_open+0x10/0x10 [ 489.875105][T10036] ? mnt_get_write_access+0x68/0x2b0 [ 489.880413][T10036] ? mnt_get_write_access+0x226/0x2b0 [ 489.885801][T10036] ? inode_to_bdi+0x69/0xf0 [ 489.890351][T10036] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 489.896706][T10036] ima_file_check+0xd9/0x120 [ 489.901322][T10036] ? __pfx_ima_file_check+0x10/0x10 [ 489.906551][T10036] security_file_post_open+0xb9/0x280 [ 489.911946][T10036] path_openat+0x2ccd/0x3590 [ 489.916584][T10036] ? __pfx_path_openat+0x10/0x10 [ 489.921562][T10036] do_filp_open+0x27f/0x4e0 [ 489.926087][T10036] ? __pfx_do_filp_open+0x10/0x10 [ 489.931124][T10036] ? do_raw_spin_lock+0x14f/0x370 [ 489.936188][T10036] do_sys_openat2+0x13e/0x1d0 [ 489.940871][T10036] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.946073][T10036] __x64_sys_open+0x225/0x270 [ 489.950756][T10036] ? __pfx___x64_sys_open+0x10/0x10 [ 489.955952][T10036] ? do_syscall_64+0x100/0x230 [ 489.960720][T10036] ? do_syscall_64+0xb6/0x230 [ 489.965401][T10036] do_syscall_64+0xf3/0x230 [ 489.969902][T10036] ? clear_bhb_loop+0x35/0x90 [ 489.974579][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.980471][T10036] RIP: 0033:0x7f4c7a180809 [ 489.984883][T10036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.004512][T10036] RSP: 002b:00007f4c7af8b058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 490.012929][T10036] RAX: ffffffffffffffda RBX: 00007f4c7a345fa0 RCX: 00007f4c7a180809 [ 490.020906][T10036] RDX: 0000000000000040 RSI: 0000000000082c02 RDI: 0000000020000140 [ 490.028879][T10036] RBP: 00007f4c7a1f393e R08: 0000000000000000 R09: 0000000000000000 [ 490.036850][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.044824][T10036] R13: 0000000000000000 R14: 00007f4c7a345fa0 R15: 00007ffccf47f7a8 [ 490.052807][T10036] [ 490.056087][T10036] Kernel Offset: disabled [ 490.060466][T10036] Rebooting in 86400 seconds..