last executing test programs: 10.971090861s ago: executing program 2 (id=1108): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 8.936562981s ago: executing program 2 (id=1114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="05002dbd7000ffdbdf2544000000080003", @ANYRES32=r2, @ANYBLOB="6400238006000c000a00000005001f000100000006001b00"], 0x80}}, 0x0) 8.739646925s ago: executing program 2 (id=1115): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109"], 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b05, &(0x7f0000000200)={'wlan1\x00'}) syz_emit_ethernet(0x11b6, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getdents64(r1, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0xb5}) write(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 7.32090083s ago: executing program 0 (id=1120): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005d00), 0x4000000000001e3, 0x8044) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup, 0xffffffffffffffff, 0x9}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000003200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41881}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) 5.699217s ago: executing program 1 (id=1130): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000380)={[0x4]}, 0x8) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.638542086s ago: executing program 1 (id=1123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="05002dbd7000ffdbdf2544000000080003", @ANYRES32=r2, @ANYBLOB="6400238006000c000a00000005001f000100000006001b00"], 0x80}}, 0x0) 3.833018866s ago: executing program 2 (id=1124): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r3, 0x0, 0xd, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_usb_control_io$uac3(r0, &(0x7f0000000480)={0x14, &(0x7f00000003c0)={0x20, 0x3, 0xb, {0xb, 0x31, "6a645cd5d0a759b7ce"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f0000000880)={0x44, &(0x7f0000000540)={0x40, 0x17, 0x42, "3863d96e1c86ce93b1f19bb21c9291482905edce1ed8aabe60b70d2027578edd493c225ff7d2a8f012baac9ac0731993c2a7dd74d83d5394d4c2cf1fe9590eb5c989"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x69}, 0x0, &(0x7f0000000680)={0x20, 0x82, 0x2, "cb58"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "9bd134"}, &(0x7f0000000700)={0x20, 0x84, 0x3, "b6c73a"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "bac94e"}}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@getqdisc={0x28, 0x26, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xf}, {0x5, 0x4}, {0xe, 0x8}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000280)=[{r5, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) getcwd(0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.69048878s ago: executing program 1 (id=1125): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000200010000001c0008800400078814000780080006"], 0x44}}, 0x0) 3.594375892s ago: executing program 1 (id=1126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000440)) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005c40)=""/102400, 0x19000) syz_open_dev$video4linux(0x0, 0x6, 0x62c203) r4 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041091}, 0x844) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 3.401836087s ago: executing program 3 (id=1127): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0xa, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), &(0x7f0000000380)}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b00), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000811008000"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000003660f8fff0ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000940)='syzkaller\x00', 0x9, 0xed, &(0x7f0000000980)=""/237, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x10b8b, r5, 0x6, &(0x7f0000000b40)=[0xffffffffffffffff], &(0x7f0000000b80)=[{0x2, 0x2, 0x7, 0xa}, {0x1, 0x2, 0x2, 0x3}, {0x4, 0x1, 0x6, 0x2}, {0x4, 0x1, 0x8, 0x5}, {0x3, 0x1, 0x9, 0x2}, {0x2, 0x3, 0x10, 0x7}], 0x10, 0xa859}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000480000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b700000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x8000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)=@o_path={&(0x7f0000001d00)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r2}, &(0x7f0000001d80), &(0x7f0000001dc0)}, 0x20) 3.248388701s ago: executing program 0 (id=1128): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000240)) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000040000000700000068d57ea0b2825979f7c099669a32967f00e9002a080200", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ffffffff000000000300"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r5, &(0x7f0000001000)=""/4085, 0xff5) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x81, 0x1000f1, 0x5, 0x4080ffa, 0x2, 0x0, 0x7, 0x5, 0x9, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x2000000d, 0x4, 0x8, 0x400c, 0x746f, 0x8, 0x0, 0x63, 0xee, 0x0, 0x7ff9]}) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) 2.8576762s ago: executing program 3 (id=1129): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000340)=0x1) chdir(0x0) close(0x3) 1.688706509s ago: executing program 0 (id=1131): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.664934369s ago: executing program 3 (id=1132): fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1e3, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0xb, 0x20}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.585830302s ago: executing program 1 (id=1133): inotify_init1(0x800) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) add_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x4, 0x2) 1.546144683s ago: executing program 3 (id=1134): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) 1.269600109s ago: executing program 0 (id=1135): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280e", 0x89}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 319.323813ms ago: executing program 0 (id=1136): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="3400238006001800ff0f000008001a00010000000800150020"], 0x50}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) 317.134893ms ago: executing program 1 (id=1137): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005d00), 0x4000000000001e3, 0x8044) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup, 0xffffffffffffffff, 0x9}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000003200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41881}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) 267.680994ms ago: executing program 3 (id=1138): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0xa, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), &(0x7f0000000380)}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b00), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000811008000"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000003660f8fff0ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000940)='syzkaller\x00', 0x9, 0xed, &(0x7f0000000980)=""/237, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x10b8b, r5, 0x6, &(0x7f0000000b40)=[0xffffffffffffffff], &(0x7f0000000b80)=[{0x2, 0x2, 0x7, 0xa}, {0x1, 0x2, 0x2, 0x3}, {0x4, 0x1, 0x6, 0x2}, {0x4, 0x1, 0x8, 0x5}, {0x3, 0x1, 0x9, 0x2}, {0x2, 0x3, 0x10, 0x7}], 0x10, 0xa859}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000480000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b700000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x8000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)=@o_path={&(0x7f0000001d00)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r2}, &(0x7f0000001d80), &(0x7f0000001dc0)}, 0x20) 200.060046ms ago: executing program 2 (id=1139): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./img\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000200)="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", 0x1000) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='/dev/loop0,65', 0xd) 79.994849ms ago: executing program 0 (id=1140): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000340)=0x1) chdir(0x0) close(0x3) 721.1µs ago: executing program 2 (id=1141): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000240)) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000040000000700000068d57ea0b2825979f7c099669a32967f00e9002a080200", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ffffffff000000000300"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r5, &(0x7f0000001000)=""/4085, 0xff5) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x81, 0x1000f1, 0x5, 0x4080ffa, 0x2, 0x0, 0x7, 0x5, 0x9, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x2000000d, 0x4, 0x8, 0x400c, 0x746f, 0x8, 0x0, 0x63, 0xee, 0x0, 0x7ff9]}) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) 0s ago: executing program 3 (id=1142): fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1e3, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0xb, 0x20}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 70.081874][ T5722] cgroup: Unknown subsys name 'net' [ 70.219985][ T5722] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.699901][ T5722] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.897943][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.905034][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.754646][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.768540][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.776246][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.786568][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.816857][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.825853][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.835037][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.835242][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.843663][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.850152][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.874989][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.875350][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.905550][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.908831][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.913051][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.923951][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.934016][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.941327][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.951670][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.958850][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.969103][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.970333][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.986305][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.994252][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.386316][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 74.467878][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 74.501381][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 74.533003][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 74.646682][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.655075][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.662712][ T5771] bridge_slave_0: entered allmulticast mode [ 74.669935][ T5771] bridge_slave_0: entered promiscuous mode [ 74.682473][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.689927][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.697328][ T5775] bridge_slave_0: entered allmulticast mode [ 74.705239][ T5775] bridge_slave_0: entered promiscuous mode [ 74.724696][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.731975][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.740189][ T5771] bridge_slave_1: entered allmulticast mode [ 74.747581][ T5771] bridge_slave_1: entered promiscuous mode [ 74.769488][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.776798][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.784258][ T5775] bridge_slave_1: entered allmulticast mode [ 74.791154][ T5775] bridge_slave_1: entered promiscuous mode [ 74.826997][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.862013][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.872961][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.920969][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.929381][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.936848][ T5776] bridge_slave_0: entered allmulticast mode [ 74.944984][ T5776] bridge_slave_0: entered promiscuous mode [ 74.957681][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.979704][ T5775] team0: Port device team_slave_0 added [ 74.995691][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.002895][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.010928][ T5776] bridge_slave_1: entered allmulticast mode [ 75.018174][ T5776] bridge_slave_1: entered promiscuous mode [ 75.049993][ T5775] team0: Port device team_slave_1 added [ 75.064776][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.072360][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.080294][ T5783] bridge_slave_0: entered allmulticast mode [ 75.088320][ T5783] bridge_slave_0: entered promiscuous mode [ 75.098579][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.115592][ T5771] team0: Port device team_slave_0 added [ 75.131754][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.139162][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.146686][ T5783] bridge_slave_1: entered allmulticast mode [ 75.154793][ T5783] bridge_slave_1: entered promiscuous mode [ 75.164147][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.185338][ T5771] team0: Port device team_slave_1 added [ 75.201510][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.208687][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.235567][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.269013][ T5776] team0: Port device team_slave_0 added [ 75.278509][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.285613][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.312302][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.350639][ T5776] team0: Port device team_slave_1 added [ 75.377861][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.388042][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.396113][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.423073][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.457474][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.476079][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.483055][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.509572][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.545567][ T5775] hsr_slave_0: entered promiscuous mode [ 75.552148][ T5775] hsr_slave_1: entered promiscuous mode [ 75.571019][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.579263][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.606551][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.619003][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.626405][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.654218][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.668255][ T5783] team0: Port device team_slave_0 added [ 75.677230][ T5783] team0: Port device team_slave_1 added [ 75.744996][ T5771] hsr_slave_0: entered promiscuous mode [ 75.751499][ T5771] hsr_slave_1: entered promiscuous mode [ 75.758054][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.766359][ T5771] Cannot create hsr debugfs directory [ 75.789541][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.796857][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.823504][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.850498][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.857653][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.884614][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.955238][ T5776] hsr_slave_0: entered promiscuous mode [ 75.964508][ T5776] hsr_slave_1: entered promiscuous mode [ 75.971249][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.979684][ T5778] Bluetooth: hci0: command tx timeout [ 75.985489][ T5776] Cannot create hsr debugfs directory [ 76.054023][ T5773] Bluetooth: hci3: command tx timeout [ 76.059844][ T5773] Bluetooth: hci1: command tx timeout [ 76.066104][ T5778] Bluetooth: hci2: command tx timeout [ 76.088891][ T5783] hsr_slave_0: entered promiscuous mode [ 76.095733][ T5783] hsr_slave_1: entered promiscuous mode [ 76.103058][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.111425][ T5783] Cannot create hsr debugfs directory [ 76.394688][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.407901][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.419405][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.439419][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.519842][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.531096][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.560064][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.580221][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.631908][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.658852][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.668506][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.679920][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.737688][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.755529][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.768260][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.779029][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.814947][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.859136][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.895215][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.904783][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.950809][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.958152][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.061351][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.092715][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.148607][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.172619][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.190971][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.216426][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.223800][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.269503][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.276746][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.298584][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.321993][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.329222][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.344847][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.351971][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.361559][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.368710][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.393197][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.400409][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.567644][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.695972][ T5775] veth0_vlan: entered promiscuous mode [ 77.739084][ T5775] veth1_vlan: entered promiscuous mode [ 77.824613][ T5775] veth0_macvtap: entered promiscuous mode [ 77.856499][ T5775] veth1_macvtap: entered promiscuous mode [ 77.932124][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.948641][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.977130][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.998852][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.009169][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.018450][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.028923][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.041674][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.054158][ T5773] Bluetooth: hci0: command tx timeout [ 78.109353][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.134416][ T5786] Bluetooth: hci3: command tx timeout [ 78.140029][ T5778] Bluetooth: hci2: command tx timeout [ 78.145987][ T5773] Bluetooth: hci1: command tx timeout [ 78.214657][ T5776] veth0_vlan: entered promiscuous mode [ 78.233063][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.245892][ T5776] veth1_vlan: entered promiscuous mode [ 78.246925][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.281877][ T5783] veth0_vlan: entered promiscuous mode [ 78.330488][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.354187][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.362169][ T5783] veth1_vlan: entered promiscuous mode [ 78.426852][ T5776] veth0_macvtap: entered promiscuous mode [ 78.435991][ T5771] veth0_vlan: entered promiscuous mode [ 78.461671][ T5776] veth1_macvtap: entered promiscuous mode [ 78.479541][ T5783] veth0_macvtap: entered promiscuous mode [ 78.508378][ T5771] veth1_vlan: entered promiscuous mode [ 78.517896][ T5783] veth1_macvtap: entered promiscuous mode [ 78.576865][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.590877][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.596360][ T5835] Zero length message leads to an empty skb [ 78.603629][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.645288][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.657029][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.669035][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.690101][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.710025][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.727454][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.739591][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.752231][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.891306][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.902153][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.917015][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.930090][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.966020][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.471034][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.501195][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.535527][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.552498][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.628369][ T5771] veth0_macvtap: entered promiscuous mode [ 79.641177][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.659783][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.670172][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.683011][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.706307][ T5771] veth1_macvtap: entered promiscuous mode [ 79.929328][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.944298][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.988017][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.998801][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.014179][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.028255][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.041623][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.097464][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.113307][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.134550][ T5778] Bluetooth: hci0: command tx timeout [ 80.139292][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.151097][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.161332][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.172107][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.228135][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.288979][ T5778] Bluetooth: hci2: command tx timeout [ 80.296438][ T5778] Bluetooth: hci1: command tx timeout [ 80.310985][ T5778] Bluetooth: hci3: command tx timeout [ 80.759727][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.769643][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.783493][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.794123][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.844989][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.853207][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.966990][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.978806][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.429751][ T5773] Bluetooth: hci0: command tx timeout [ 82.435282][ T5778] Bluetooth: hci3: command tx timeout [ 82.440784][ T5778] Bluetooth: hci1: command tx timeout [ 82.446262][ T5773] Bluetooth: hci2: command tx timeout [ 82.554759][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.562763][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.586556][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.600206][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.681647][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.713511][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.815167][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.864165][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.488955][ T5895] ceph: Path missing in source [ 86.284512][ T5814] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.493665][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.493848][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 86.515397][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.535361][ T5814] usb 1-1: config 4 interface 0 has no altsetting 0 [ 86.556319][ T5814] usb 1-1: string descriptor 0 read error: -22 [ 86.563071][ T5814] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 86.572840][ T5814] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 86.598832][ T5814] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 86.619308][ T5814] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 86.641870][ T5814] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 86.652530][ T5814] usb 1-1: media controller created [ 86.698717][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.700008][ T5816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.732348][ T5816] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 86.749644][ T5816] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.772893][ T5816] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 86.784676][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.797912][ T5816] usb 2-1: Product: syz [ 86.802314][ T5816] usb 2-1: Manufacturer: syz [ 86.807675][ T5816] usb 2-1: SerialNumber: syz [ 86.911145][ T5899] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 87.101017][ T5816] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 87.278910][ T5816] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 87.508066][ T5816] usbserial_generic 2-1:1.0: generic converter detected [ 87.664328][ T5816] usb 2-1: generic converter now attached to ttyUSB0 [ 89.088763][ T5885] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 89.095530][ T5814] zl10353_read_register: readreg error (reg=127, ret==0) [ 89.108692][ T5816] usb 2-1: USB disconnect, device number 2 [ 89.145138][ T5816] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 89.178431][ T5816] usbserial_generic 2-1:1.0: device disconnected [ 89.404612][ T5814] usb 1-1: USB disconnect, device number 2 [ 90.894932][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 90.952269][ T5949] bridge0: entered promiscuous mode [ 90.974469][ T5949] bridge0: port 3(macvlan2) entered blocking state [ 91.014112][ T5949] bridge0: port 3(macvlan2) entered disabled state [ 91.033836][ T5949] macvlan2: entered allmulticast mode [ 91.077545][ T5949] bridge0: entered allmulticast mode [ 91.156473][ T5949] macvlan2: left allmulticast mode [ 91.176700][ T5949] bridge0: left allmulticast mode [ 91.258006][ T5949] bridge0: left promiscuous mode [ 91.430681][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 91.478276][ T5956] Bluetooth: MGMT ver 1.22 [ 91.738448][ T5814] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.828770][ T5968] capability: warning: `syz.3.37' uses 32-bit capabilities (legacy support in use) [ 91.953557][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 91.964005][ T5814] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 91.983522][ T5814] usb 3-1: config 0 has no interface number 0 [ 91.989812][ T5814] usb 3-1: config 0 interface 12 has no altsetting 0 [ 92.012508][ T5814] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 92.033831][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.041880][ T5814] usb 3-1: Product: syz [ 92.066970][ T5814] usb 3-1: Manufacturer: syz [ 92.071632][ T5814] usb 3-1: SerialNumber: syz [ 92.083461][ T5814] usb 3-1: config 0 descriptor?? [ 93.110891][ T5814] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 93.135545][ T5814] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 93.188861][ T5814] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 93.223878][ T5814] f81534: probe of 3-1:0.12 failed with error -71 [ 93.270678][ T5814] usb 3-1: USB disconnect, device number 2 [ 93.365529][ T788] cfg80211: failed to load regulatory.db [ 93.814038][ T788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.311446][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.697175][ T788] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.706767][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.727590][ T788] usb 1-1: config 0 descriptor?? [ 94.827291][ T6003] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.753496][ T788] usbhid 1-1:0.0: can't add hid device: -71 [ 95.759786][ T788] usbhid: probe of 1-1:0.0 failed with error -71 [ 95.775496][ T788] usb 1-1: USB disconnect, device number 3 [ 96.143436][ T788] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.475187][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.498051][ T788] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 97.200527][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.216528][ T6042] syz.1.63[6042]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.226779][ T788] usb 1-1: config 0 descriptor?? [ 97.243571][ T788] usb 1-1: can't set config #0, error -71 [ 97.251674][ T788] usb 1-1: USB disconnect, device number 4 [ 98.943626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.881796][ T6052] syzkaller0: entered promiscuous mode [ 100.893827][ T6052] syzkaller0: entered allmulticast mode [ 100.909083][ T6052] tipc: Started in network mode [ 100.953668][ T6052] tipc: Node identity 9ac6ee2ff695, cluster identity 4711 [ 100.981962][ T6052] tipc: Enabled bearer , priority 0 [ 101.009524][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 101.019296][ T6057] netlink: 'syz.0.70': attribute type 5 has an invalid length. [ 101.028534][ T6057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.70'. [ 101.049834][ T6057] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 58771 - 0 [ 101.058833][ T6057] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 58771 - 0 [ 101.077341][ T6057] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 58771 - 0 [ 101.093232][ T6057] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 58771 - 0 [ 101.111298][ T6057] geneve2: entered promiscuous mode [ 101.117308][ T6057] geneve2: entered allmulticast mode [ 101.135503][ T6052] tipc: Resetting bearer [ 101.194261][ T6051] tipc: Resetting bearer [ 101.284552][ T6051] tipc: Disabling bearer [ 104.603035][ T6094] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 104.619516][ T6094] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 104.630422][ T6094] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 109.183435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 111.572227][ T6137] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 111.667160][ T6137] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 111.750437][ T6137] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 116.863460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.030593][ T6216] syzkaller0: entered promiscuous mode [ 119.053657][ T6216] syzkaller0: entered allmulticast mode [ 119.076818][ T6216] tipc: Started in network mode [ 119.093618][ T6216] tipc: Node identity eefa99c9dd55, cluster identity 4711 [ 119.112837][ T6216] tipc: Enabled bearer , priority 0 [ 119.172496][ T6215] tipc: Resetting bearer [ 119.339781][ T6215] tipc: Disabling bearer [ 124.933668][ T5814] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.153592][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 125.184598][ T5814] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 125.192847][ T5814] usb 3-1: config 0 has no interface number 0 [ 125.223450][ T5814] usb 3-1: config 0 interface 184 has no altsetting 0 [ 125.235712][ T5814] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.248483][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.273541][ T5814] usb 3-1: Product: syz [ 125.277760][ T5814] usb 3-1: Manufacturer: syz [ 125.282475][ T5814] usb 3-1: SerialNumber: syz [ 125.306539][ T5814] usb 3-1: config 0 descriptor?? [ 125.334898][ T5814] smsc75xx v1.0.0 [ 127.017154][ T5814] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 127.028952][ T5814] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 127.039742][ T5814] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 127.050889][ T5814] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 127.060886][ T5814] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 127.071657][ T5814] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 127.082023][ T5814] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 127.260275][ T5814] usb 3-1: USB disconnect, device number 3 [ 130.879367][ T6328] netlink: 48 bytes leftover after parsing attributes in process `syz.3.162'. [ 133.681497][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.688000][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.783412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 138.409843][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 142.166671][ T6429] ======================================================= [ 142.166671][ T6429] WARNING: The mand mount option has been deprecated and [ 142.166671][ T6429] and is ignored by this kernel. Remove the mand [ 142.166671][ T6429] option from the mount to silence this warning. [ 142.166671][ T6429] ======================================================= [ 143.183714][ T5833] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.514276][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 143.592324][ T5833] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 143.715474][ T5833] usb 3-1: config 0 has no interface number 0 [ 143.723413][ T5833] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.740987][ T5833] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.759133][ T5833] usb 3-1: config 0 interface 85 has no altsetting 0 [ 143.769273][ T5833] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 143.781660][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.840916][ T5833] usb 3-1: Product: syz [ 143.869911][ T5833] usb 3-1: Manufacturer: syz [ 143.884719][ T5833] usb 3-1: SerialNumber: syz [ 143.895630][ T5833] usb 3-1: config 0 descriptor?? [ 144.025155][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.199'. [ 144.055301][ T6439] fuse: Bad value for 'fd' [ 144.375569][ T5833] appletouch 3-1:0.85: Geyser mode initialized. [ 144.404560][ T5833] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input5 [ 145.630270][ T5833] usb 3-1: USB disconnect, device number 4 [ 145.751770][ T5833] appletouch 3-1:0.85: input: appletouch disconnected [ 152.091015][ T5813] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.203649][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 153.216041][ T5813] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 153.233440][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.241510][ T5813] usb 3-1: Product: syz [ 153.260436][ T5813] usb 3-1: Manufacturer: syz [ 153.353376][ T5813] usb 3-1: SerialNumber: syz [ 153.378908][ T5813] usb 3-1: config 0 descriptor?? [ 153.426992][ T5813] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 154.113843][ T5813] ssu100: probe of 3-1:0.0 failed with error -32 [ 156.801970][ T5759] usb 3-1: USB disconnect, device number 5 [ 158.253551][ T6592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.237'. [ 158.286583][ T6592] ip6gre1: entered promiscuous mode [ 158.291948][ T6592] ip6gre1: entered allmulticast mode [ 160.114202][ T64] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.122475][ T64] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.144868][ T788] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.283520][ T5759] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 161.210605][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.226029][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.497143][ T5759] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 161.513670][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.037055][ T5759] usb 2-1: Product: syz [ 162.041791][ T5759] usb 2-1: Manufacturer: syz [ 162.050910][ T5759] usb 2-1: SerialNumber: syz [ 162.423686][ T5813] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 162.463250][ T6630] syzkaller0: entered promiscuous mode [ 162.470221][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 162.473385][ T6630] syzkaller0: entered allmulticast mode [ 162.619654][ T5813] usb 4-1: unable to get BOS descriptor or descriptor too short [ 162.647518][ T5813] usb 4-1: not running at top speed; connect to a high speed hub [ 162.668653][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.692306][ T5813] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.727765][ T5813] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 162.785337][ T5813] usb 4-1: string descriptor 0 read error: -22 [ 162.793143][ T5813] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 162.828012][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.079031][ T5813] usb 4-1: 0:1 : does not exist [ 163.178557][ T5813] usb 4-1: 0:2 : does not exist [ 163.421088][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 163.442490][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 163.458945][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.476336][ T5759] lan78xx: probe of 2-1:1.0 failed with error -71 [ 163.546461][ T5759] usb 2-1: USB disconnect, device number 3 [ 163.592336][ T5813] usb 4-1: USB disconnect, device number 2 [ 164.213488][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.974956][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 167.856546][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.277'. [ 168.126121][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 169.217207][ T6692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.339502][ T6698] process 'syz.2.272' launched './file0' with NULL argv: empty string added [ 170.089408][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 172.373497][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.527794][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 173.183387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 174.864270][ T6820] syz.2.329 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 177.964384][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 178.303436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 180.573848][ T28] audit: type=1326 audit(1786078346.154:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4f299e0d9 code=0x0 [ 183.322083][ T6887] syz.0.350 uses obsolete (PF_INET,SOCK_PACKET) [ 183.376982][ T6887] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 183.734863][ T6893] netlink: 'syz.0.352': attribute type 1 has an invalid length. [ 183.753602][ T6893] netlink: 'syz.0.352': attribute type 2 has an invalid length. [ 184.676861][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 185.678141][ T6916] netlink: 'syz.3.356': attribute type 4 has an invalid length. [ 185.758658][ T6914] netlink: 'syz.3.356': attribute type 4 has an invalid length. [ 187.112229][ T6930] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.573619][ T5841] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 187.733516][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.784455][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 187.906926][ T5841] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 187.952341][ T6924] syz.2.359 (6924) used greatest stack depth: 20712 bytes left [ 188.078262][ T5841] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.258200][ T5841] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.269361][ T5841] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.293639][ T5841] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.327815][ T5841] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.367867][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.603144][ T6952] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 188.612216][ T6952] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 188.621010][ T6952] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 188.688054][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 189.234132][ T5841] usb 2-1: GET_CAPABILITIES returned 0 [ 189.239940][ T5841] usbtmc 2-1:16.0: can't read capabilities [ 191.036859][ T5759] usb 2-1: USB disconnect, device number 4 [ 191.359786][ T28] audit: type=1326 audit(1786078357.444:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.0.375" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45ddd9e0d9 code=0x0 [ 191.940825][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 193.167380][ T5433] veth1_macvtap: left promiscuous mode [ 193.273637][ T6993] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 193.439450][ T6996] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 193.447813][ T6996] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 193.456511][ T6996] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 194.786959][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.793899][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.103049][ T7021] syzkaller0: entered promiscuous mode [ 195.117867][ T7021] syzkaller0: entered allmulticast mode [ 195.147569][ T7021] tipc: Enabled bearer , priority 0 [ 195.173522][ T7021] tipc: Resetting bearer [ 195.219144][ T7020] tipc: Resetting bearer [ 195.258653][ T7020] tipc: Disabling bearer [ 195.565182][ T7035] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 196.745910][ T7054] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 196.755221][ T7054] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 196.763740][ T7054] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 196.861253][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 196.861326][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.869696][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 196.876583][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 197.752488][ T7071] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 200.153511][ T7103] tipc: Enabling of bearer rejected, failed to enable media [ 200.173594][ T7100] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 200.182688][ T7100] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 200.191552][ T7100] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 201.470501][ T7127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.632622][ T7131] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 202.054926][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 203.244486][ T7144] tipc: Enabling of bearer rejected, failed to enable media [ 206.811082][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 208.943024][ T7195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.286256][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 214.723280][ C0] sched: RT throttling activated [ 214.758153][ T7252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.342953][ T7269] tipc: Enabling of bearer rejected, failed to enable media [ 216.543756][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.261307][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 217.920791][ T7319] tipc: Started in network mode [ 217.925849][ T7319] tipc: Node identity b2ee6991f3ab, cluster identity 4711 [ 217.934694][ T7319] tipc: Enabled bearer , priority 0 [ 218.718546][ T7324] tipc: Resetting bearer [ 218.774945][ T7318] tipc: Disabling bearer [ 218.854712][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.466'. [ 223.254093][ T7420] tipc: Enabled bearer , priority 0 [ 223.300267][ T7420] tipc: Resetting bearer [ 223.400779][ T7417] tipc: Disabling bearer [ 227.321638][ T7480] tipc: Enabled bearer , priority 0 [ 227.336329][ T7480] tipc: Resetting bearer [ 227.389272][ T7477] tipc: Disabling bearer [ 228.831383][ T7506] netlink: 48 bytes leftover after parsing attributes in process `syz.3.526'. [ 229.894941][ T7517] tipc: Enabled bearer , priority 0 [ 229.941765][ T7517] tipc: Resetting bearer [ 230.281473][ T7516] tipc: Disabling bearer [ 230.633608][ T7522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.840474][ T7536] netlink: 48 bytes leftover after parsing attributes in process `syz.1.538'. [ 233.404828][ T7567] netlink: 48 bytes leftover after parsing attributes in process `syz.0.549'. [ 234.563518][ T5833] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 234.853718][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 234.928538][ T5833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.028104][ T5833] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 235.105341][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.228167][ T5833] usb 3-1: config 0 has no interface number 0 [ 235.325963][ T5833] usb 3-1: config 0 interface 49 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.437898][ T5833] usb 3-1: config 0 interface 49 has no altsetting 0 [ 235.466253][ T5833] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 235.529260][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.574248][ T5833] usb 3-1: Product: syz [ 235.603776][ T5833] usb 3-1: Manufacturer: syz [ 235.615980][ T5833] usb 3-1: SerialNumber: syz [ 235.666950][ T5833] usb 3-1: config 0 descriptor?? [ 235.992219][ T7609] ALSA: mixer_oss: invalid OSS volume '' [ 236.308405][ T5833] rtsx_usb: probe of 3-1:0.49 failed with error -22 [ 236.620716][ T5833] usb 3-1: USB disconnect, device number 6 [ 237.075448][ T7625] jffs2: notice: (7625) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 239.479298][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 240.643503][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 241.491397][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 241.517520][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 241.539271][ T23] usb 3-1: can't read configurations, error -71 [ 246.430342][ T7742] netlink: 100 bytes leftover after parsing attributes in process `syz.3.609'. [ 246.926593][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 246.995277][ T7751] xt_TPROXY: Can be used only with -p tcp or -p udp [ 249.336472][ T7775] jffs2: notice: (7775) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 249.627178][ T7784] tipc: Enabled bearer , priority 10 [ 249.739214][ T7786] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 250.112671][ T7793] ALSA: mixer_oss: invalid OSS volume '' [ 250.735401][ T5813] tipc: Node number set to 867146185 [ 256.221715][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.231027][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.003398][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 260.971168][ T7894] netlink: 56 bytes leftover after parsing attributes in process `syz.2.658'. [ 261.083930][ T9] usb 4-1: device not accepting address 3, error -71 [ 261.187425][ T7902] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 261.258315][ T7902] netlink: 'syz.3.663': attribute type 2 has an invalid length. [ 261.940480][ T7907] tipc: Enabling of bearer rejected, failed to enable media [ 262.688172][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 265.713667][ T7943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.736992][ T7950] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 265.762236][ T7950] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 265.792747][ T7950] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 265.867962][ T7961] tipc: Enabling of bearer rejected, failed to enable media [ 267.374073][ T7983] netlink: 56 bytes leftover after parsing attributes in process `syz.0.682'. [ 268.515806][ T8000] tipc: Enabling of bearer rejected, failed to enable media [ 270.349571][ T8014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.457549][ T8021] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 270.466448][ T8021] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 270.475219][ T8021] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 273.742269][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 275.949123][ T8054] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 275.957448][ T8054] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 275.966184][ T8054] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 276.155581][ T8063] tipc: Enabling of bearer rejected, failed to enable media [ 276.693501][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.943731][ T8066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.578034][ T8102] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 280.586582][ T8102] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 280.595220][ T8102] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 280.976868][ T8110] tipc: Enabling of bearer rejected, failed to enable media [ 281.467534][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 283.853544][ T8145] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 283.862085][ T8145] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 283.870790][ T8145] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 284.415616][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 285.008020][ T8162] tipc: Enabling of bearer rejected, failed to enable media [ 285.125528][ T8164] netlink: 48 bytes leftover after parsing attributes in process `syz.0.727'. [ 285.875447][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 288.308471][ T8206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.736'. [ 288.481371][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 289.051074][ T8213] tipc: Enabled bearer , priority 0 [ 289.120837][ T8213] tipc: Resetting bearer [ 289.177654][ T8211] tipc: Disabling bearer [ 289.562101][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 291.787723][ T8247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.747'. [ 292.458788][ T8259] tipc: Enabled bearer , priority 0 [ 292.526296][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 293.080702][ T8258] tipc: Disabling bearer [ 296.453557][ T8304] tipc: Enabled bearer , priority 0 [ 296.471525][ T8304] tipc: Resetting bearer [ 296.610190][ T8302] tipc: Disabling bearer [ 297.716700][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 299.674266][ T8334] syzkaller0: entered promiscuous mode [ 299.694723][ T8334] syzkaller0: entered allmulticast mode [ 299.734722][ T8334] tipc: Enabled bearer , priority 0 [ 299.773137][ T8334] tipc: Resetting bearer [ 299.895415][ T8332] tipc: Resetting bearer [ 299.926925][ T8332] tipc: Disabling bearer [ 300.279540][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'. [ 301.583383][ T788] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 301.953359][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 301.963044][ T788] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 301.973464][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.981862][ T788] usb 3-1: Product: syz [ 301.986744][ T788] usb 3-1: Manufacturer: syz [ 302.634454][ T788] usb 3-1: SerialNumber: syz [ 302.644484][ T788] usb 3-1: config 0 descriptor?? [ 302.652230][ T788] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 302.955106][ T788] ssu100: probe of 3-1:0.0 failed with error -71 [ 302.965675][ T788] usb 3-1: USB disconnect, device number 9 [ 303.023289][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 303.164464][ T8378] syzkaller0: entered promiscuous mode [ 303.173334][ T8378] syzkaller0: entered allmulticast mode [ 303.200307][ T8378] tipc: Enabled bearer , priority 0 [ 303.224133][ T8378] tipc: Resetting bearer [ 303.245863][ T8377] tipc: Resetting bearer [ 303.285868][ T8377] tipc: Disabling bearer [ 303.670773][ T8391] hsr0: entered promiscuous mode [ 307.012207][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 309.486410][ T8486] syzkaller0: entered promiscuous mode [ 309.512458][ T8486] syzkaller0: entered allmulticast mode [ 309.535083][ T8486] tipc: Enabled bearer , priority 0 [ 309.577695][ T8486] tipc: Resetting bearer [ 309.615520][ T8485] tipc: Resetting bearer [ 309.802084][ T8485] tipc: Disabling bearer [ 310.863751][ T9] tipc: Node number set to 1095068049 [ 312.973096][ T8531] syzkaller0: entered promiscuous mode [ 312.988282][ T8531] syzkaller0: entered allmulticast mode [ 315.341981][ T8566] hsr0: entered promiscuous mode [ 315.458757][ T8568] syzkaller0: entered promiscuous mode [ 315.471841][ T8568] syzkaller0: entered allmulticast mode [ 315.487508][ T8568] tipc: Enabled bearer , priority 0 [ 315.510201][ T8568] tipc: Resetting bearer [ 315.525584][ T8567] tipc: Resetting bearer [ 315.561035][ T8567] tipc: Disabling bearer [ 317.665655][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.973294][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.305123][ T8602] netlink: 72 bytes leftover after parsing attributes in process `syz.3.850'. [ 318.504580][ T8606] syzkaller0: entered promiscuous mode [ 318.515301][ T8606] syzkaller0: entered allmulticast mode [ 318.533930][ T8606] tipc: Enabled bearer , priority 0 [ 318.583122][ T8606] tipc: Resetting bearer [ 318.628092][ T8604] tipc: Resetting bearer [ 318.696591][ T8604] tipc: Disabling bearer [ 320.477463][ T8629] netlink: 72 bytes leftover after parsing attributes in process `syz.3.859'. [ 320.574114][ T8634] syzkaller0: entered promiscuous mode [ 320.579656][ T8634] syzkaller0: entered allmulticast mode [ 320.628900][ T8634] tipc: Enabled bearer , priority 0 [ 320.666549][ T8634] tipc: Resetting bearer [ 320.703536][ T8631] tipc: Resetting bearer [ 320.747155][ T8631] tipc: Disabling bearer [ 320.796247][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 322.712626][ T8663] netlink: 72 bytes leftover after parsing attributes in process `syz.0.873'. [ 322.794270][ T5816] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 322.815402][ T8667] syzkaller0: entered promiscuous mode [ 322.821003][ T8667] syzkaller0: entered allmulticast mode [ 322.854118][ T8667] tipc: Enabled bearer , priority 0 [ 322.905060][ T8667] tipc: Resetting bearer [ 322.918891][ T8666] tipc: Resetting bearer [ 322.972086][ T8666] tipc: Disabling bearer [ 323.037312][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 323.054689][ T5816] usb 2-1: not running at top speed; connect to a high speed hub [ 323.067234][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 323.087262][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 323.110684][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 323.133271][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 323.155053][ T8672] hsr0: entered promiscuous mode [ 323.155825][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 323.171141][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 323.184630][ T5816] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 323.193849][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.202762][ T5816] usb 2-1: Product: syz [ 323.207810][ T5816] usb 2-1: Manufacturer: syz [ 323.212657][ T5816] usb 2-1: SerialNumber: syz [ 323.224482][ T8655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.235884][ T8655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.245592][ T8655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.252915][ T8655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.283531][ T8655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.304965][ T5816] usb 2-1: USB2VGA dongle found at address 5 [ 323.321379][ T5816] usb 2-1: Allocated 8 output buffers [ 323.335674][ T5816] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 323.524515][ T8655] usb 2-1: Device not attached to USB 2.0 hub [ 323.542451][ T5816] usb 2-1: USB disconnect, device number 5 [ 325.303599][ T8694] netlink: 'syz.0.884': attribute type 12 has an invalid length. [ 325.915243][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 327.949782][ T8739] netlink: 'syz.1.896': attribute type 12 has an invalid length. [ 328.434448][ T8754] syzkaller0: entered promiscuous mode [ 328.940321][ T8754] syzkaller0: entered allmulticast mode [ 328.967258][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 328.998338][ T8756] tipc: Enabled bearer , priority 0 [ 329.438654][ T8754] tipc: Resetting bearer [ 329.576552][ T8750] tipc: Resetting bearer [ 329.686709][ T8750] tipc: Disabling bearer [ 330.771986][ T8779] netlink: 'syz.3.906': attribute type 12 has an invalid length. [ 332.440782][ T8784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.391465][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'. [ 333.517698][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 333.565514][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 333.621212][ T8808] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.631154][ T8808] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.640829][ T8808] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.650557][ T8808] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.044424][ T8815] tipc: Enabling of bearer rejected, failed to enable media [ 334.079503][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 334.137226][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 334.273655][ T8821] netlink: 108 bytes leftover after parsing attributes in process `syz.2.915'. [ 335.109961][ T8849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.923'. [ 336.653876][ T8853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.902630][ T8868] tipc: Enabling of bearer rejected, failed to enable media [ 336.916029][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 337.246657][ T8878] netlink: 108 bytes leftover after parsing attributes in process `syz.0.929'. [ 339.155617][ T8906] syzkaller0: entered promiscuous mode [ 339.223598][ T8906] syzkaller0: entered allmulticast mode [ 339.341023][ T8910] tipc: Enabled bearer , priority 0 [ 339.524078][ T8906] tipc: Resetting bearer [ 339.613756][ T8902] tipc: Resetting bearer [ 339.694074][ T8902] tipc: Disabling bearer [ 339.876409][ T8922] netlink: 108 bytes leftover after parsing attributes in process `syz.3.940'. [ 340.356080][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'. [ 342.250756][ T5816] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 342.432630][ T8961] tipc: Enabling of bearer rejected, failed to enable media [ 342.454718][ T5833] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 342.563611][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 342.593970][ T5833] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.641541][ T5816] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 342.679349][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.731048][ T5816] usb 3-1: Product: syz [ 342.764523][ T5816] usb 3-1: Manufacturer: syz [ 342.800974][ T5816] usb 3-1: SerialNumber: syz [ 342.832222][ T5816] usb 3-1: config 0 descriptor?? [ 342.887188][ T5816] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 343.104591][ T5816] ssu100: probe of 3-1:0.0 failed with error -32 [ 343.266953][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 346.025591][ T8] usb 3-1: USB disconnect, device number 10 [ 346.077594][ T9006] tipc: Enabling of bearer rejected, failed to enable media [ 346.518382][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 346.529969][ T5814] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 346.765858][ T5814] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 346.811173][ T5814] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 346.848616][ T5814] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 346.879619][ T5814] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 346.905028][ T5814] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 346.921643][ T5814] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 346.941822][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 346.969014][ T5814] usb 2-1: Product: syz [ 346.977823][ T5814] usb 2-1: Manufacturer: syz [ 346.998365][ T9030] 9pnet_fd: Insufficient options for proto=fd [ 347.095118][ T5814] cdc_wdm 2-1:1.0: skipping garbage [ 347.148904][ T5814] cdc_wdm 2-1:1.0: skipping garbage [ 347.177324][ T5814] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 347.196891][ T5814] cdc_wdm 2-1:1.0: Unknown control protocol [ 347.670241][ T5813] usb 2-1: USB disconnect, device number 6 [ 348.040521][ T5814] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 348.335085][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 348.402172][ T5814] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.452843][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.508470][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.563477][ T5814] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.701611][ T5814] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 348.747877][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.987683][ T5814] usb 3-1: GET_CAPABILITIES returned 0 [ 349.005467][ T5814] usbtmc 3-1:16.0: can't read capabilities [ 349.018478][ T9061] tipc: Enabling of bearer rejected, failed to enable media [ 349.153580][ T5813] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 349.194103][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.207113][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.217895][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.227232][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.236454][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.245529][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.254727][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.266473][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.275770][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.284862][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.294076][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.302715][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.312812][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.321950][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.331079][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.340255][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.347844][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.357028][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.366155][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.375418][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.381600][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 349.391499][ T5813] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 349.398690][ T5816] usb 3-1: USB disconnect, device number 11 [ 349.400721][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.416262][ T5813] usb 2-1: Product: syz [ 349.420630][ T5813] usb 2-1: Manufacturer: syz [ 349.425856][ T5813] usb 2-1: SerialNumber: syz [ 349.501061][ T5813] usb 2-1: config 0 descriptor?? [ 349.525388][ T5813] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 349.756429][ T5813] ssu100: probe of 2-1:0.0 failed with error -32 [ 349.842700][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 351.399661][ T9097] syzkaller0: entered promiscuous mode [ 351.405697][ T9097] syzkaller0: entered allmulticast mode [ 351.418082][ T9097] tipc: Enabled bearer , priority 0 [ 351.436353][ T9097] tipc: Resetting bearer [ 351.455324][ T9096] tipc: Resetting bearer [ 351.509458][ T9096] tipc: Disabling bearer [ 351.825220][ T5814] usb 2-1: USB disconnect, device number 7 [ 352.013138][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 352.923078][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.992'. [ 353.107528][ T9127] tipc: Enabled bearer , priority 0 [ 353.132927][ T9127] tipc: Resetting bearer [ 353.177695][ T9126] tipc: Disabling bearer [ 353.262846][ T9133] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 353.558409][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 353.810362][ T9146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1003'. [ 354.343532][ T9166] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1009'. [ 354.404331][ T9172] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 354.424035][ T9174] tipc: Enabling of bearer rejected, failed to enable media [ 355.681252][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 357.508745][ T9209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.596412][ T9214] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1020'. [ 357.663999][ T9216] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 357.702340][ T9219] tipc: Enabled bearer , priority 0 [ 357.727066][ T9219] tipc: Resetting bearer [ 357.805129][ T9218] tipc: Disabling bearer [ 358.036514][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'. [ 359.982513][ T9253] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1032'. [ 360.144555][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 362.482688][ T9290] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1045'. [ 363.786041][ T9314] CacheFiles: Failed to register: -95 [ 364.868169][ T9324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1054'. [ 366.060261][ T9340] syzkaller0: entered promiscuous mode [ 366.068280][ T9340] syzkaller0: entered allmulticast mode [ 367.193056][ T9353] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1065'. [ 375.373948][ T788] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 375.563355][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 375.573730][ T788] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 375.582826][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.603704][ T788] usb 3-1: Product: syz [ 375.608122][ T788] usb 3-1: Manufacturer: syz [ 375.612834][ T788] usb 3-1: SerialNumber: syz [ 375.654592][ T788] usb 3-1: config 0 descriptor?? [ 375.675402][ T788] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 375.869603][ T788] ssu100: probe of 3-1:0.0 failed with error -32 [ 378.001272][ T5816] usb 3-1: USB disconnect, device number 12 [ 378.287696][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 378.308510][ T9481] bond1: (slave vlan2): making interface the new active one [ 378.318389][ T9481] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 378.433958][ T9481] syz.1.1098 (9481) used greatest stack depth: 19880 bytes left [ 378.767336][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 379.127915][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.162814][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.344548][ T9487] syzkaller0: entered promiscuous mode [ 379.402365][ T9487] syzkaller0: entered allmulticast mode [ 380.543516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 380.679456][ T9496] jffs2: notice: (9496) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 380.993415][ T5816] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 381.023455][ T788] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 381.173673][ T5816] usb 4-1: device descriptor read/64, error -71 [ 381.235672][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 381.248401][ T788] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 381.260831][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.278412][ T788] usb 2-1: Product: syz [ 381.282724][ T788] usb 2-1: Manufacturer: syz [ 381.289428][ T788] usb 2-1: SerialNumber: syz [ 381.314245][ T788] usb 2-1: config 0 descriptor?? [ 381.329136][ T788] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 381.453333][ T5816] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 381.656369][ T788] ssu100: probe of 2-1:0.0 failed with error -110 [ 381.689314][ T5816] usb 4-1: device descriptor read/64, error -71 [ 381.900209][ T5816] usb usb4-port1: attempt power cycle [ 382.436412][ T5816] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 383.556092][ T5816] usb 4-1: device descriptor read/8, error -71 [ 384.301618][ T9540] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1114'. [ 384.702405][ T5813] usb 2-1: USB disconnect, device number 8 [ 384.724856][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 385.110389][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 385.130021][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.146305][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 385.156592][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.796156][ T9] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 385.811834][ T9] usb 3-1: invalid MIDI out EP 0 [ 385.907366][ T9544] warning: `syz.2.1115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 386.160359][ T9571] vivid-004: disconnect [ 386.762256][ T9] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 387.431125][ T9542] vivid-004: reconnect [ 387.444301][ T9] usb 3-1: USB disconnect, device number 13 [ 389.338232][ T9590] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1123'. [ 389.633326][ T5833] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 389.843293][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 389.871500][ T5833] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 389.928528][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.981530][ T5833] usb 3-1: Product: syz [ 389.989410][ T5833] usb 3-1: Manufacturer: syz [ 389.994883][ T5833] usb 3-1: SerialNumber: syz [ 390.025955][ T5833] usb 3-1: config 0 descriptor?? [ 390.037207][ T5833] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 390.375191][ T5833] ssu100: probe of 3-1:0.0 failed with error -110 [ 391.594441][ T9613] geneve3: entered promiscuous mode [ 392.876123][ T9627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1136'. [ 392.895485][ T5813] usb 3-1: USB disconnect, device number 14 [ 393.047391][ T9632] loop0: detected capacity change from 0 to 8 [ 393.060721][ T9632] block2mtd: erasesize must be a divisor of device size [ 393.102970][ T5923] ------------[ cut here ]------------ [ 393.108965][ T5923] WARNING: CPU: 0 PID: 5923 at block/bdev.c:643 blkdev_flush_mapping+0xac/0x290 [ 393.118448][ T5923] Modules linked in: [ 393.122438][ T5923] CPU: 0 PID: 5923 Comm: udevd Not tainted syzkaller #0 [ 393.129535][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.140669][ T5923] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 393.147149][ T5923] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 af d0 cd fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 cb 5d a3 fd eb 11 e8 24 4e 75 fd <0f> 0b 48 85 db 75 9f e8 18 4e 75 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 393.167383][ T5923] RSP: 0018:ffffc90004957da0 EFLAGS: 00010293 [ 393.174143][ T5923] RAX: ffffffff8412235c RBX: ffff888148c80bc0 RCX: ffff888024371e00 [ 393.182144][ T5923] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 393.190328][ T5923] RBP: 0000000000000002 R08: ffff888148c80bfb R09: 1ffff1102919017f [ 393.198548][ T5923] R10: dffffc0000000000 R11: ffffed1029190180 R12: dffffc0000000000 [ 393.206757][ T5923] R13: dffffc0000000000 R14: ffff888148c80cf4 R15: ffff888148c80bf8 [ 393.214948][ T5923] FS: 00007f0f383ab880(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 393.224089][ T5923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.230700][ T5923] CR2: 00007f0f37d909c0 CR3: 000000002b83e000 CR4: 00000000003506f0 [ 393.239161][ T5923] Call Trace: [ 393.243044][ T5923] [ 393.246369][ T5923] ? blkdev_put+0x492/0x7a0 [ 393.251008][ T5923] blkdev_put+0x49a/0x7a0 [ 393.255666][ T5923] blkdev_release+0x84/0x90 [ 393.260208][ T5923] ? blkdev_open+0x360/0x360 [ 393.264957][ T5923] __fput+0x221/0x940 [ 393.269058][ T5923] __se_sys_close+0x15c/0x1e0 [ 393.273834][ T5923] do_syscall_64+0x55/0xb0 [ 393.278345][ T5923] ? clear_bhb_loop+0x40/0x90 [ 393.283157][ T5923] ? clear_bhb_loop+0x40/0x90 [ 393.287984][ T5923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.294000][ T5923] RIP: 0033:0x7f0f37ca7407 [ 393.298449][ T5923] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 393.318210][ T5923] RSP: 002b:00007ffed13dc5a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 393.326733][ T5923] RAX: ffffffffffffffda RBX: 00007f0f383ab880 RCX: 00007f0f37ca7407 [ 393.334808][ T5923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 393.342839][ T5923] RBP: 00007f0f383ab6e8 R08: 0000000000000000 R09: 0000000000000000 [ 393.351405][ T5923] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 393.359739][ T5923] R13: 00005599542bd410 R14: 0000000000000008 R15: 00005599542c2f10 [ 393.367830][ T5923] [ 393.370902][ T5923] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 393.378293][ T5923] CPU: 0 PID: 5923 Comm: udevd Not tainted syzkaller #0 [ 393.385248][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.395410][ T5923] Call Trace: [ 393.398788][ T5923] [ 393.402257][ T5923] dump_stack_lvl+0x18c/0x250 [ 393.407143][ T5923] ? show_regs_print_info+0x20/0x20 [ 393.412647][ T5923] ? load_image+0x420/0x420 [ 393.417231][ T5923] panic+0x2ca/0x720 [ 393.421162][ T5923] ? bpf_jit_dump+0xd0/0xd0 [ 393.425794][ T5923] __warn+0x2e0/0x470 [ 393.429802][ T5923] ? blkdev_flush_mapping+0xac/0x290 [ 393.435107][ T5923] ? blkdev_flush_mapping+0xac/0x290 [ 393.440498][ T5923] report_bug+0x2be/0x4f0 [ 393.444924][ T5923] ? blkdev_flush_mapping+0xac/0x290 [ 393.450236][ T5923] ? blkdev_flush_mapping+0xac/0x290 [ 393.455557][ T5923] ? blkdev_flush_mapping+0xae/0x290 [ 393.460864][ T5923] handle_bug+0xcf/0x120 [ 393.465129][ T5923] exc_invalid_op+0x1a/0x50 [ 393.469647][ T5923] asm_exc_invalid_op+0x1a/0x20 [ 393.474517][ T5923] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 393.480431][ T5923] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 af d0 cd fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 cb 5d a3 fd eb 11 e8 24 4e 75 fd <0f> 0b 48 85 db 75 9f e8 18 4e 75 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 393.504312][ T5923] RSP: 0018:ffffc90004957da0 EFLAGS: 00010293 [ 393.510501][ T5923] RAX: ffffffff8412235c RBX: ffff888148c80bc0 RCX: ffff888024371e00 [ 393.518492][ T5923] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 393.526945][ T5923] RBP: 0000000000000002 R08: ffff888148c80bfb R09: 1ffff1102919017f [ 393.535374][ T5923] R10: dffffc0000000000 R11: ffffed1029190180 R12: dffffc0000000000 [ 393.543365][ T5923] R13: dffffc0000000000 R14: ffff888148c80cf4 R15: ffff888148c80bf8 [ 393.551365][ T5923] ? blkdev_flush_mapping+0xac/0x290 [ 393.556681][ T5923] ? blkdev_put+0x492/0x7a0 [ 393.561286][ T5923] blkdev_put+0x49a/0x7a0 [ 393.565637][ T5923] blkdev_release+0x84/0x90 [ 393.570423][ T5923] ? blkdev_open+0x360/0x360 [ 393.575028][ T5923] __fput+0x221/0x940 [ 393.579560][ T5923] __se_sys_close+0x15c/0x1e0 [ 393.584300][ T5923] do_syscall_64+0x55/0xb0 [ 393.588772][ T5923] ? clear_bhb_loop+0x40/0x90 [ 393.593737][ T5923] ? clear_bhb_loop+0x40/0x90 [ 393.598426][ T5923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.604338][ T5923] RIP: 0033:0x7f0f37ca7407 [ 393.609027][ T5923] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 393.629177][ T5923] RSP: 002b:00007ffed13dc5a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 393.637877][ T5923] RAX: ffffffffffffffda RBX: 00007f0f383ab880 RCX: 00007f0f37ca7407 [ 393.646045][ T5923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 393.654570][ T5923] RBP: 00007f0f383ab6e8 R08: 0000000000000000 R09: 0000000000000000 [ 393.662564][ T5923] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 393.670996][ T5923] R13: 00005599542bd410 R14: 0000000000000008 R15: 00005599542c2f10 [ 393.679144][ T5923] [ 393.682744][ T5923] Kernel Offset: disabled [ 393.687130][ T5923] Rebooting in 86400 seconds..