last executing test programs: 3m27.79810399s ago: executing program 0 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000480)=[0x0, 0xfffffffd, 0x4, 0xec1b, 0x1, 0x1, 0x6, 0x8000]) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = creat(0x0, 0x80) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x3}, 'syz0\x00', 0x2010052}) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0xc0280) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x1f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90, 0x0, {0x0, 0xffffffffa0028000}}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {0x0, 0x4000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r4 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0xfffffff6, 0xa, 0x4}) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000340)={0x1, 0xfffffffc, 0xbf5b, 0x174e, 0x4}) unshare(0x8000480) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setrlimit(0x6, &(0x7f0000000300)={0x100000000, 0x5}) syncfs(r5) unshare(0x880) 3m23.257885398s ago: executing program 0 (id=76): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_delete(0x0) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0xf0ffff, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000580)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x80) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000740)={0x2, 0x2, 0x1, {0x2, @vbi={0x3, 0x7, 0x89, 0x34565559, [0x5, 0xfffffff5], [0x5, 0x5], 0x2}}, 0x1}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x140f, 0x8, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x3c}}, 0x8010) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r9, r10}}, './file0\x00'}) 3m18.704538817s ago: executing program 0 (id=83): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000180)={&(0x7f0000000300)={{@any, 0x200}, {@host, 0x4}, 0x400, "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"}, 0x418, 0xffffffff}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, 0x0) unshare(0x62040200) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) socket(0x15, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r5, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m14.457922913s ago: executing program 0 (id=90): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x5, 0x14, 0x18, 0x5, 0xb7, 0x1, 0xf5, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xfffffffffffffffe) mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static'}}}]}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0xdf}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0035199d069d66f6ed56", @ANYBLOB], 0x48) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 3m11.947104663s ago: executing program 0 (id=93): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001800)=""/31, &(0x7f0000000240)=0x1f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'wg0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edecc6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d7d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) socket$kcm(0x11, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020}, 0xfffffe33) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, 0x0, 0x106, 0x5}}, 0x20) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000080)="df", 0x1, 0xfffffffffffffffc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f00000004c0)=""/156) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) 3m9.062597586s ago: executing program 0 (id=98): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x88, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000001f80)=""/4099, 0x1003) r8 = fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6d706f6c3d62696ee43a3041"]) 2m53.714470946s ago: executing program 32 (id=98): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x88, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000001f80)=""/4099, 0x1003) r8 = fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6d706f6c3d62696ee43a3041"]) 28.08537747s ago: executing program 3 (id=578): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) recvmsg$can_j1939(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x22) 27.085983952s ago: executing program 3 (id=589): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x3, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x20040054) 26.430243537s ago: executing program 3 (id=591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) 25.470640465s ago: executing program 3 (id=595): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$kcm(0xa, 0x3, 0x3a) 25.213729963s ago: executing program 3 (id=597): prlimit64(0x0, 0xe, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000006940), 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="c9b8bc80244e92823c87c54877cfdf2cbd85dd637f7fb5fa7b71866a76d58b62e624a9c4507042049407cd9efe483d7b15e800b9e58788f5b58f6625401048a99466b01f45795049d4a1b69ffb930d3dc04f3d4cfe6d179ad1d960e1f7292842fb390d9bcf522d20fdf9efcbee23f94fb022eb7fe5bc5eedf00cf18462eb98dad2dfadf9ea66a9b70695827762236d05463ece55433cb3c793e4dcc8aa1fd295b29072c16833c6852dcd62215ce37760d4506f1820f70d466a067a93fad1fd9e5c148b2cd4d6eea9093e9ae4676c9535131e0d8f3fe2d21b2cc901a28c2b3e9b65d5b8b0f081638422ca55aeb0e9f2b1a45285d263a798c356238a63384625ff32bcdeb89198d7522c7501520592b1534f7106282d5c2cda51b613fa2b3390225a4b24e4ca01d2a230335a9ab47bc71cd808c5928872af0e1093ff3a9e83fc123188f3acd0a44898c2f13fd7f58efa656534384d6fbe649c323f51f31208edd86f3a49705b88a0a9804bfcba1f0dc8d3bc3cc448cd7b66e635f5b17d9f9a48ea5c3ad8f14d0f1cb95d5e21c85a01c15fbc52a779ca9c6b416ee2161984ce6f23c72ae0f267fcd77ec49c290cf68f11e495cd0f9be34542ff9988932c48875e0e06a3a351577f5df8d80c7e7dcd391a57bb212274f25eaca6b09c1651f64ec9a291691427fb40f61254c6b07b793c350ef8daea36f7dbbf36c92d02c1421651e800828d409979551fa7b3c242ae434ff485372d5e63d86829e6a6198e64a9b27ca3841fadf340adb7cf3451cfb43ed6bb99584ccc0eda60f9013f3be1566a51a9cf8726a338c1af274cd2ee85d97ee9fa71f4d9723895eb0252951303308c07c41d21b55c9c0141a123f888c9c3f134aa5d4d9dc9f011821b1b07b67390ab70aff8650014b90f80fbed0394afc5dc155dd25df3be78d604d148c38462d9a2aa56c66d71edf21be640e2248211ad910b30730577df5f7f97a958247d21351fd20d1ea268deed116540f98854825042d70f31f223880db56d4e04ca90e1696513ec37691a0dda9c15b23c32147875645310e05fbf5764af088af7318e5a9a4cd2e89e6b9b5269bd61ec042b4e5fa5ba7726396f9bad37a6c0c0262147bc13abe1ab091163023551817167818a81fbf9dec69ab1145f90c65bda80d0d6ddfbf3da3c9152093c4d725e83c456eeebcb481cf6fb545a8a4ad184054bd63526ccff7e1cb64fac6b0b10e8177854e81996e2e05636234ae2b9c9dc925737f2b4fc53138ff5823168cbc2b3b34f75a26bef57c749b7bdf88886681e918fed3d3233c2ef46e6c609c363c06fc7c3889b79f1d407108bfebae1ab57b71980341894199a6a7a6abc76d267002918f455df9d2efef38e49e2eb365a54f79b36aa06f31c982c334909e371982a6fcbad2692ebe22bc5cf3edfe2e4a946dd8395524c9846e4871a3ac05226543c2ecc26203d84eaac3167b5ad067f97acbdfa75985897e704c97dcadcc0f22d959f99cca49f14f52e039dcd2c865660e1f7310e7dd381cfc59b7030afd90f9f86d9b0a1304c501a3101d3167b8800180da928b0c71831021d311c798894f3049ff12cb90d19e4691bf40354e3ae0f437439cfbe91e24cc2485e84db55d13d236780abc7a807a7f2d30fade7424e40422bbcb5f38a57f8d5410096d0de60314a358f6a647d7216b11dbc603bbf3942594ec3c25dd78ccb06f8982532405b57e2ecf8db1109fddb864e44c8c7078666e3ea1b441fabc96f489eadebf44af7a446db50e59eca5acbd032f6ff903cc85c489cfcb88f31886c8e8d818b3cb0ccd5009086c0a81764f92a5115fa20b1a0b1a5ebe587f1a44173a4bcb94f0a1e8cf490fdedb683c91aa8d9be13fa70ee65cea89ae4a4635d85087a081b3b06e73961f27594346423f648e622d57cd0ef063ebfa811d0e12f8be79dec19a03eb1cef2be79faad53ff26bdeb79446a8c1436cc9ac460174d00ca2d904bc7fd15b7e6e361c5e6a1514912de46a10ef935efb461047f42007c9d86039acd0fa000f07e9bb2a1ae800be2762341f137fceb2a69ab03cf3bda4199a43e162f3a72afe72b445242663b1645f022aee64ece487d231520bf7f501303bdfa2f9add3a4af96f5128979d6bbac116b9c70fe865a9edd37d0c646cdfd2dbfc8e8ebf78dcc59a002b1db763bf412aaa7940969e0d8af791782cb8a907f4c1ab7e9495cc7fb7968408b2ce03dadcd0417071974b0332f554e7498898236189bc374105f25c04535ffdf8186591caf648673340d8591ae9cce3a7d0f82986b0bc3c2d6e3d0f3d22155b7aed7437f11fb47693ce53cf4e4531669f7b736f45ac960ec2b4f70e474d076361395e2dbced14bf5b94e894299b0e46c459f6f41f24cbe1a3e1113ea80fff54e8dd2fe331c8eea0349ba0251c88f196a95bc95f4723137940720eb0857f1e6d4af4fbf4e85b7e0e590a338e565ef76eb88c1124ccf992b36b0d6a292419bb467da06a46f91baab0cd3e47c57c9939b17ce44c91f512baecfac7a6b9440a1e1db39ccfd15d44f2adab4b1fb39cfedc5a79e079c196cdf6b071d8bbd04ee54e74652594ba10f29c31ccd85d94863dfc67f2cd132385a540890f1e82404e299a9ac2996d36edbb558c6937048399ccb0a79af4d1f4c25262d7f5b5cc150ae7becd732e90a140ebaae68e42695dc1ddd4bb465f7466db339258334c1e5eedda3ac1638d32f63860546fccd5af67fdac1baffe46dec18a41f58fc876cfef7b62fd00bc598d5a18156cb204785de12eaf4dbefcf9ad1112bdaf8b8d4e3cdfd7eb7baf10a3091c5e6ee1fff284dd9ac4bb4cb832ab0c49f4b2880f59200748463d4158339e2d626ddfd7d8547a06a019d87bbfc5bfa1e7e4801e457ddcdf47b5fb35ec522b6457736c35fbde32c491e3adb521edef77116a018208dce6bdcf9bc7432f9cdf1b8f0686efa497c0a7044e72fb6f33e475a7bdceeccccbaa13a88df68e24ff9039cee59c5f0799f7842c2d21a7a7ff2f793f12ea49e34be214ca1d9af8cd5ffeb4121f6dcca26d93c2560d9c5fea851c358562ec693e7b5ac120f345e5868a4a3951371da303ef7f50505342c28349fbb19380f4989675bf32b3bb5daa14c764d8a8b7d3a929d0a1d0e9d84845a4d0b582140bd4519a2041889a04430ac7ac71309f30c733425ae11d8a2408511a2b83124fc9f57ca3b3e99324e7cb1faef290d8c8360972e3a342b431e4548306b22a934c8739c17bba66b9afb0182c639cf5a3d3afd32153e11e02fcd0a792de471b8bac7b86e5766eece24911021b0016e8e35f6ce910dc130f74142d9335fbbbae04e88999395bb102e9cb1e09b978109e2b6fc3687eb90a136f9041c7a80b094b222ee19f8959cf40b0c8364c3f5b43ce00d7830497f52e6a96b0c9faf471aed9bf4adf151d3d7b2964113c5c11c40f19d64677ff1e3517d9ee485eefadd8549e6ebff777a6b32272bf9e79eedc851db7329e4ed58001cd7a42cb806b04440898599bfb1aaa9ede9cb6dbd09615b8d36156c3ffb5bbdfdc899e4a78d8ff512721d70cd2c21f668f783f0b655ecab4a75e7a4aaf1e644978635190d1037b1ef4d052630a2c993b5a72313093e155405f3f85ab62f4ebc5f31848e75ffed7295c4a06b6905f5faea11dfdd9e74b56a2815038ea1a5c85d8fa4b87a7055dba4eab2332d812f4f86afc1a58ba516feb699ae91071c760718ed5b8a203a399c87f38b1850fefe1adfc96e95b258b77b3fa376da3959b169b678b94d19476ec6e2c4abadf6bd8060d73dbec3a32770c2a9151ca69c5d1cfbab5fd222db28337cb45a985c0941464cbeae02a827c3eed14ad698d6c535c567f40aba69fedc02195dbb497f6458998b9cbe4e145606578396442bdab7808c7bc1832a1f2c47730809ad509e7b9af68f4373a9eaa92905e5e899c61720e2976c60fe5e0c9934d27e214b058f1fa3f47b4da08aa170ced7c174382cc790936b35569dc2a5c0979d98625f5e2549080b38e0b067cb34c2a6ac5849a8de9377dc4a2b98fbfa722e23866822694a001df97ff39c28e706f73250bacdf84eb68e285d89bacb14b3c0fd5759d942d3698ab88db2cf58e68531bd0fc6574db8535e311358e1b99e52ccc1d55fb16c21a1f1b808c09546edde39691ec84152e1a4b55e9e220834f0168c5ad08e63f55b2f25f0b2a6cb7e7ed4cbc3cafdbe4d4f584fd931ed6fd50bbc444e6f81df98bbc4df3e5b04f805c6fd539ff7cd8aab56e7a4a208de7367a920e5a5aeae73d01078a8d2605384197b22f2089f590b4ac4f5fb8ce9e0b1129e608823e37b3270a206a86d029e881a57f42812aac00cbe2f740d0bf4982554a769777f2c020dcdc677524e152330693052d9f8f9259874ca554453b936a95a5c62b242abceda57299bcfa9c2b3232ceca0c81aced0ee0a0de4f1f44e0789c131f4272ef43007d31e7f5947bc0320edee2df1e6415d5dd19d9988c964ecf443d75c851f3fa59b07b91169442c0d7ab1973cd7823bfd64c4fad357ba1588755db16e34151e098a847062d404d53df3bdb0a53d7b017a2cf50c77a52d09aff245aea91e585bbe78d69e4e466aa8fb5c05975463bf7e1308b9d2057648f4d3ce352f1e5c2a82bc69389214781579468d470ad091a84eb3cb1a6c7d95948db025a6f493666ebcf9e16754164c384b87f3693a525f696eba140945e7cc00610d58f20923f6316066197c12881d8898b2d639aabdc10b05703dd8754703ce1f984d5f8577d5d202a67636f0555bc3a72cd083f38578a83b3584e1880c332c0ab1112fb61173363c09d67d29b1e97d41ee923b41f0dbe8a32c6cdf63b1da9eae59d5c6be75bb9a48a0ab732aa594c1aa1554cf789a032177795e79ab20eda36fc4f96533b5505dea6e56aec518ccc7bdb1a15c54a8a084dfebf1c94b0e9b218e9009187181a284d4eabd006e872032efc8f8e8dad0662e2ea30c3139ec7f69b39ab4ea685426390f3f8f3a5bc3cd7f198a1aac1368877ae2c40f4aed57630647817b8d6d872b6226a2a91649826e584b492e948bb067216c7b3730bf93ef7e25bb6cff157ea0beeb4e42cfce2526271559131fff6cc3ee0efb017053c72a16571c2a8f5a80536fb989404e512e29641193b1b8727780652b1de14b2cebe235b4583f7ef48ba95c136db636e8307935ca92db6923ee342e0648b805f126bdde1567434994c97ff7fab0fa3356b5ffffb1eeb31629887ea4bfe12565d86f095df8537fa1223aecaee041d078156adab05692e1e6160bc02f2ed8686493c71d0adf3782d3407bd794c4e7cf003894464734af8de7366367e3e222cc5aa9f740851fe41cd0355fffa5c3c9aab54293309b673e5c4c173fd6623674048a0db38de3078ed7dc1a477d95746d588fbdb15c48444b3f2c229b023cdc53a7a59dfebf77f83d9ecd4daa08b2efe551c57f05fe987971b10443893e1ed1f40814d5347e1afad39e422e5b8746aa6833a384cbec935ce463356ffc38a2237493bccbf6b2a724474aa65bd8e63d6f1c85355179242dcdb7c179d143e5180627770c2eb430da431394e49d1a2f94841fb4da8e0eaf5690fba0edf765d4857828897f8a5a840f980f3e489dff6a814b361815cb2432a08ad8e77336aae327e4752368844886d56177c2980799320c29054582267d345ef96162c4d41c647ac131b732b21332f4a10a764c6ce1fdb0849da5f6f03eb8faaa64a3857a488", 0xfe0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000040)={r3, 0x1000, &(0x7f0000001180)=""/4096}) fspick(0xffffffffffffff9c, 0x0, 0x0) 24.838238043s ago: executing program 3 (id=601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)=@ethtool_eeprom={0xb, 0xfffefff5, 0x100006}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.65427572s ago: executing program 1 (id=627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a0001"], 0x40}}, 0x0) 11.793711332s ago: executing program 1 (id=636): openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) fsopen(0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0xffff, 0x5dd073cf) 9.918355381s ago: executing program 5 (id=644): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x0, 0x2, "b181"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, 0x0, 0x0, 0x0}) 9.905199464s ago: executing program 2 (id=645): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x26, 0xe) shutdown(r1, 0x1) connect$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.533065527s ago: executing program 2 (id=647): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 8.667575287s ago: executing program 2 (id=649): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x0, 0xc3, &(0x7f0000000580)=""/195}, {0x4000, 0xcf, &(0x7f00000006c0)=""/207}]}) 7.327934817s ago: executing program 2 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_SET(0x0, 0x0, 0x13, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) 6.218741448s ago: executing program 5 (id=653): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x85}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) 6.187856614s ago: executing program 4 (id=654): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 6.046814836s ago: executing program 1 (id=655): socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4000000000000008, 0x7a08}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_get$uid(0x3, r1) 5.42225333s ago: executing program 1 (id=656): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x35, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xc2, 0x91, 0x49, 0x20, 0x499, 0x102a, 0x852d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x1, 0xe5, 0x1d, 0xe5, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x5, 0x7f}]}], [{{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 4.857994427s ago: executing program 4 (id=657): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x880, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0xfffffffffffffeb4, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') setpgid(r0, 0x0) r1 = getpgid(r0) setpgid(0x0, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) 4.555384933s ago: executing program 5 (id=658): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.812388343s ago: executing program 4 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000580)={[{@clone_children}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x88900, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0x80000300, 0x0, 0x0) 3.378876384s ago: executing program 5 (id=660): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unlink(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getrusage(0x0, &(0x7f0000000180)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r5}}, 0x18) r6 = io_uring_setup(0x70d9, &(0x7f0000000700)={0x0, 0xcff9, 0x2, 0x2, 0x269}) io_uring_enter(r6, 0x6df6, 0x0, 0xb, &(0x7f0000000000), 0x18) r7 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x794b, 0x10100, 0x1, 0x0, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r7, 0x2def, 0x1, 0x0, 0x0, 0x0) 2.626946331s ago: executing program 4 (id=661): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r0, &(0x7f0000002fc0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) 2.322620915s ago: executing program 4 (id=662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e"], 0x4c}}, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_CAP_SYNC_REGS(r2, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.278240413s ago: executing program 5 (id=663): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f00000000c0)={r0, 0x8, 0x1, 0x8000000000000000}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.252395494s ago: executing program 1 (id=664): socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f00000000c0), 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000000000000000000400", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.168200571s ago: executing program 2 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0xa00000, 0x10000, @value}, 0x28) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x4880) 827.221238ms ago: executing program 4 (id=666): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1fffffffffffffaa, &(0x7f0000000200)=[{0x30, 0x9, 0x0, 0x6}]}, 0xfffffffffffffdf1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd, 0x9be, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 777.571161ms ago: executing program 1 (id=667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) signalfd(r1, &(0x7f0000000000)={[0x800000000000000]}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair(0xf, 0x800, 0x1ff, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x5, 0x800000000000, 0x0, 0x2004cb, 0x200000000000, 0x5, 0x0, 0xfffffffffffffffd], 0x0, 0x40200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 197.088643ms ago: executing program 2 (id=668): ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=669): syz_open_procfs(0x0, &(0x7f0000001d00)='net/unix\x00') syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) vmsplice(r1, &(0x7f0000000500), 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffdc0700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48140, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) acct(0x0) fanotify_init(0x0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 74.590916][ T5814] cgroup: Unknown subsys name 'net' [ 74.743851][ T5814] cgroup: Unknown subsys name 'cpuset' [ 74.752247][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.257369][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.431732][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.446985][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.464556][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.464678][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.473614][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.479784][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.487655][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.494985][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.502645][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.508661][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.516118][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.522264][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.529447][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.536677][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.551964][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.554774][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.566575][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.574181][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.574643][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.591075][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.598448][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.606019][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.614819][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.623012][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.632456][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.639905][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.640872][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.658490][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.671348][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.679392][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.077914][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 81.137831][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 81.228454][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 81.246673][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 81.407292][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.416330][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.423964][ T5825] bridge_slave_0: entered allmulticast mode [ 81.431764][ T5825] bridge_slave_0: entered promiscuous mode [ 81.447048][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.454565][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.462661][ T5824] bridge_slave_0: entered allmulticast mode [ 81.469390][ T5824] bridge_slave_0: entered promiscuous mode [ 81.477239][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.484523][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.491991][ T5824] bridge_slave_1: entered allmulticast mode [ 81.498707][ T5824] bridge_slave_1: entered promiscuous mode [ 81.516239][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.523500][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.531067][ T5825] bridge_slave_1: entered allmulticast mode [ 81.538187][ T5825] bridge_slave_1: entered promiscuous mode [ 81.590226][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 81.621412][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.658487][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.672393][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.695977][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.714385][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.721693][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.728997][ T5829] bridge_slave_0: entered allmulticast mode [ 81.736749][ T5829] bridge_slave_0: entered promiscuous mode [ 81.744876][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.753009][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.760314][ T5841] bridge_slave_0: entered allmulticast mode [ 81.767387][ T5841] bridge_slave_0: entered promiscuous mode [ 81.807097][ T5825] team0: Port device team_slave_0 added [ 81.813477][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.821806][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.829234][ T5829] bridge_slave_1: entered allmulticast mode [ 81.836390][ T5829] bridge_slave_1: entered promiscuous mode [ 81.855859][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.864884][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.872698][ T5841] bridge_slave_1: entered allmulticast mode [ 81.879438][ T5841] bridge_slave_1: entered promiscuous mode [ 81.888761][ T5824] team0: Port device team_slave_0 added [ 81.897254][ T5825] team0: Port device team_slave_1 added [ 81.933114][ T5824] team0: Port device team_slave_1 added [ 81.948498][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.955562][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.982598][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.027815][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.034861][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.061153][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.081941][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.094194][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.122543][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.160091][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.167234][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.174958][ T5826] bridge_slave_0: entered allmulticast mode [ 82.182699][ T5826] bridge_slave_0: entered promiscuous mode [ 82.191491][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.210726][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.217743][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.244437][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.257268][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.264460][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.290594][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.315336][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.322752][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.330093][ T5826] bridge_slave_1: entered allmulticast mode [ 82.336884][ T5826] bridge_slave_1: entered promiscuous mode [ 82.357126][ T5841] team0: Port device team_slave_0 added [ 82.385213][ T5825] hsr_slave_0: entered promiscuous mode [ 82.391909][ T5825] hsr_slave_1: entered promiscuous mode [ 82.402006][ T5829] team0: Port device team_slave_0 added [ 82.421187][ T5841] team0: Port device team_slave_1 added [ 82.439141][ T5829] team0: Port device team_slave_1 added [ 82.474036][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.481294][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.507633][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.543567][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.555603][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.576126][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.583335][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.609851][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.630854][ T5843] Bluetooth: hci4: command tx timeout [ 82.641563][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.648561][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.674948][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.698678][ T5824] hsr_slave_0: entered promiscuous mode [ 82.701109][ T5837] Bluetooth: hci2: command tx timeout [ 82.706930][ T5842] Bluetooth: hci0: command tx timeout [ 82.710375][ T5837] Bluetooth: hci1: command tx timeout [ 82.721085][ T5824] hsr_slave_1: entered promiscuous mode [ 82.721212][ T5843] Bluetooth: hci3: command tx timeout [ 82.727331][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.741522][ T5824] Cannot create hsr debugfs directory [ 82.774985][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.782453][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.809177][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.858486][ T5841] hsr_slave_0: entered promiscuous mode [ 82.864949][ T5841] hsr_slave_1: entered promiscuous mode [ 82.871802][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.879392][ T5841] Cannot create hsr debugfs directory [ 82.902188][ T5826] team0: Port device team_slave_0 added [ 82.941002][ T5826] team0: Port device team_slave_1 added [ 82.986796][ T5829] hsr_slave_0: entered promiscuous mode [ 82.996022][ T5829] hsr_slave_1: entered promiscuous mode [ 83.002349][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.010542][ T5829] Cannot create hsr debugfs directory [ 83.083151][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.090273][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.117428][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.168234][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.175529][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.202465][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.365572][ T5826] hsr_slave_0: entered promiscuous mode [ 83.372350][ T5826] hsr_slave_1: entered promiscuous mode [ 83.378384][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.386691][ T5826] Cannot create hsr debugfs directory [ 83.467553][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.479228][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.513675][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.534002][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.565941][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.600367][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.621452][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.631889][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.708141][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.723666][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.742587][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.753397][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.846056][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.856697][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.882422][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.914717][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.964642][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.014233][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.037319][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.048308][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.062452][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.088832][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.137232][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.144632][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.181919][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.189019][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.223978][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.249438][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.277622][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.318670][ T5043] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.325926][ T5043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.345808][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.352986][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.392301][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.441071][ T5043] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.448221][ T5043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.473471][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.518825][ T5043] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.525968][ T5043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.575147][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.603118][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.653234][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.660426][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.673285][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.680501][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.700002][ T5843] Bluetooth: hci4: command tx timeout [ 84.716142][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.773631][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.780855][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.781106][ T5843] Bluetooth: hci3: command tx timeout [ 84.795423][ T5837] Bluetooth: hci1: command tx timeout [ 84.801207][ T5837] Bluetooth: hci0: command tx timeout [ 84.801442][ T5842] Bluetooth: hci2: command tx timeout [ 84.820349][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.827512][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.902193][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.909300][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.006415][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.023858][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.040025][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.237954][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.274617][ T5824] veth0_vlan: entered promiscuous mode [ 85.336387][ T5824] veth1_vlan: entered promiscuous mode [ 85.419163][ T5829] veth0_vlan: entered promiscuous mode [ 85.492709][ T5824] veth0_macvtap: entered promiscuous mode [ 85.507261][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.526300][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.537025][ T5824] veth1_macvtap: entered promiscuous mode [ 85.549034][ T5829] veth1_vlan: entered promiscuous mode [ 85.578324][ T5825] veth0_vlan: entered promiscuous mode [ 85.607736][ T5825] veth1_vlan: entered promiscuous mode [ 85.617040][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.667011][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.695778][ T5826] veth0_vlan: entered promiscuous mode [ 85.703854][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.713123][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.722489][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.731645][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.767070][ T5841] veth0_vlan: entered promiscuous mode [ 85.780276][ T5826] veth1_vlan: entered promiscuous mode [ 85.797223][ T5825] veth0_macvtap: entered promiscuous mode [ 85.817257][ T5841] veth1_vlan: entered promiscuous mode [ 85.825193][ T5825] veth1_macvtap: entered promiscuous mode [ 85.844967][ T5829] veth0_macvtap: entered promiscuous mode [ 85.864223][ T5829] veth1_macvtap: entered promiscuous mode [ 85.915210][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.926729][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.938618][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.984876][ T5826] veth0_macvtap: entered promiscuous mode [ 85.997080][ T5826] veth1_macvtap: entered promiscuous mode [ 86.011391][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.017059][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.019378][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.031115][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.047765][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.058752][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.072385][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.092101][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.102835][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.113893][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.124174][ T5841] veth0_macvtap: entered promiscuous mode [ 86.132003][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.145395][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.155750][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.166523][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.176447][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.187019][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.198216][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.216264][ T5841] veth1_macvtap: entered promiscuous mode [ 86.228596][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.242518][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.252810][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.263406][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.274567][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.284066][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.293122][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.303466][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.312368][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.336024][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.346712][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.356926][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.367680][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.378764][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.398100][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.410005][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.422300][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.431224][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.440294][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.449275][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.475381][ T3444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.483992][ T3444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.503724][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.513378][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.522795][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.532260][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.591282][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.619319][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.637232][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.648312][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.658496][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.669169][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.679134][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.689971][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.704135][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.736730][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.769810][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.779925][ T5842] Bluetooth: hci4: command tx timeout [ 86.785910][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.795888][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.806691][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.816755][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.827298][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.837292][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.847897][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.859690][ T5842] Bluetooth: hci3: command tx timeout [ 86.861664][ T5830] Bluetooth: hci0: command tx timeout [ 86.865134][ T5843] Bluetooth: hci1: command tx timeout [ 86.871169][ T5830] Bluetooth: hci2: command tx timeout [ 86.877077][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.900561][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.901393][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.910234][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.926759][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.935872][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.942193][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.064040][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.166703][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.720428][ T5043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.759801][ T5043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.828284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 87.855700][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.910773][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.947416][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.989671][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.038427][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.069705][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.133122][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.144892][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.364470][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.662374][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.859991][ T5830] Bluetooth: hci4: command tx timeout [ 88.940253][ T5830] Bluetooth: hci2: command tx timeout [ 88.945737][ T5830] Bluetooth: hci1: command tx timeout [ 88.952103][ T5837] Bluetooth: hci3: command tx timeout [ 88.958101][ T5837] Bluetooth: hci0: command tx timeout [ 89.130542][ T5925] Bluetooth: MGMT ver 1.23 [ 89.854522][ T5934] random: crng reseeded on system resumption [ 90.583990][ T9] IPVS: starting estimator thread 0... [ 90.639987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.696232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.729962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.800190][ T5936] IPVS: using max 21 ests per chain, 50400 per kthread [ 91.540377][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.746747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 91.757691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.026467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.221869][ T976] cfg80211: failed to load regulatory.db [ 92.379819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.393340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.437664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.553992][ T26] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 92.663374][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.687002][ T5945] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.527342][ T26] usb 5-1: config 0 descriptor?? [ 93.899648][ T5830] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 93.982879][ T26] cp210x 5-1:0.0: cp210x converter detected [ 94.182639][ T26] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 94.319678][ T26] cp210x 5-1:0.0: querying part number failed [ 95.478926][ T26] usb 5-1: cp210x converter now attached to ttyUSB0 [ 96.995728][ T5966] sctp: failed to load transform for md5: -2 [ 97.242025][ T26] usb 5-1: USB disconnect, device number 2 [ 97.335118][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 98.319926][ T26] cp210x 5-1:0.0: device disconnected [ 98.915358][ T5983] ceph: No mds server is up or the cluster is laggy [ 99.089841][ T3160] libceph: connect (1)[c::]:6789 error -101 [ 99.097075][ T3160] libceph: mon0 (1)[c::]:6789 connect error [ 100.080069][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 100.086206][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 100.716082][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 100.924815][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 101.084680][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 102.443279][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 102.452154][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 102.463054][ T6011] netlink: 'syz.0.19': attribute type 15 has an invalid length. [ 103.644912][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.727364][ T6019] xt_TCPMSS: Only works on TCP SYN packets [ 105.011640][ T976] Process accounting resumed [ 109.859058][ T6053] xt_TCPMSS: Only works on TCP SYN packets [ 110.248324][ T976] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.264864][ T6058] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.279005][ T6058] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 111.935548][ T6056] program syz.0.29 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.607800][ T976] usb 4-1: device descriptor read/all, error -71 [ 114.527953][ T6079] dccp_xmit_packet: Payload too large (65456) for featneg. [ 119.611900][ T6107] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.564581][ T6117] 9pnet_fd: Insufficient options for proto=fd [ 123.719447][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.43'. [ 124.011176][ T6137] sctp: [Deprecated]: syz.4.46 (pid 6137) Use of int in max_burst socket option. [ 124.011176][ T6137] Use struct sctp_assoc_value instead [ 129.015539][ T5830] Bluetooth: min 6 > max 0 [ 129.657720][ T6161] overlayfs: failed to resolve './file0': -2 [ 129.717184][ T5830] Bluetooth: hci2: Invalid handle: 0xffff > 0x0eff [ 131.099723][ T5830] Bluetooth: hci3: command tx timeout [ 132.231815][ T6182] openvswitch: netlink: IPv4 tun info is not correct [ 133.717521][ T6188] __vm_enough_memory: pid: 6188, comm: syz.1.57, bytes: 21200598282240 not enough memory for the allocation [ 133.724851][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.984893][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.120283][ T6189] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 134.128453][ T6189] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.978917][ T6198] warning: `syz.1.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.397316][ T6223] random: crng reseeded on system resumption [ 140.894178][ T47] IPVS: starting estimator thread 0... [ 141.281920][ T6225] IPVS: using max 17 ests per chain, 40800 per kthread [ 144.310573][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 144.319547][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 144.328360][ T6235] netlink: 'syz.2.70': attribute type 15 has an invalid length. [ 144.601022][ T6247] netlink: 'syz.1.69': attribute type 4 has an invalid length. [ 144.608649][ T6247] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.69'. [ 144.713163][ T6248] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 144.714612][ T6237] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2889887472 (184952798208 ns) > initial count (51438777216 ns). Using initial count to start timer. [ 145.200833][ T6237] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.722210][ T6256] netlink: 40 bytes leftover after parsing attributes in process `syz.3.73'. [ 147.970555][ T6271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.77'. [ 148.921744][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 151.210813][ T6284] syz.1.80 uses obsolete (PF_INET,SOCK_PACKET) [ 151.414666][ T6277] Zero length message leads to an empty skb [ 151.443415][ T6277] capability: warning: `syz.2.79' uses deprecated v2 capabilities in a way that may be insecure [ 151.601797][ T6284] ptrace attach of "./syz-executor exec"[5841] was attempted by ""[6284] [ 152.490054][ T6294] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 152.692400][ T6294] netlink: 224 bytes leftover after parsing attributes in process `syz.3.82'. [ 152.951369][ T6302] netlink: 156 bytes leftover after parsing attributes in process `syz.2.84'. [ 153.675071][ T6310] fuse: Unknown parameter '0x00000000000000030xffffffffffffffff' [ 155.823592][ T6330] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 155.837209][ T6330] Cannot find set identified by id 0 to match [ 155.922027][ T6330] 9pnet_fd: Insufficient options for proto=fd [ 157.582466][ T6346] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2889887472 (184952798208 ns) > initial count (51438777216 ns). Using initial count to start timer. [ 157.759785][ T6346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.229218][ T6339] overlayfs: overlapping lowerdir path [ 159.525457][ T6356] netlink: 104 bytes leftover after parsing attributes in process `syz.1.94'. [ 159.612116][ T6361] xt_TCPMSS: Only works on TCP SYN packets [ 160.605625][ T6366] netlink: 36 bytes leftover after parsing attributes in process `syz.3.95'. [ 160.615001][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.95'. [ 160.624266][ T6366] netlink: 36 bytes leftover after parsing attributes in process `syz.3.95'. [ 160.633485][ T6366] netlink: 36 bytes leftover after parsing attributes in process `syz.3.95'. [ 165.578986][ T6402] vivid-000: kernel_thread() failed [ 166.522082][ T6413] block device autoloading is deprecated and will be removed. [ 166.574074][ T6413] process 'syz.3.103' launched '/dev/fd/9' with NULL argv: empty string added [ 171.670725][ T6427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.261285][ T6439] loop7: detected capacity change from 0 to 16384 [ 173.267153][ T6443] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 175.437477][ T6456] kernel profiling enabled (shift: 7) [ 179.354421][ T6476] syz.2.116: attempt to access beyond end of device [ 179.354421][ T6476] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 179.369115][ T6476] syz.2.116: attempt to access beyond end of device [ 179.369115][ T6476] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 180.270638][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.469014][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.478418][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.487796][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.496251][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 180.511614][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.154474][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.118'. [ 181.297664][ T6487] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.359699][ T6485] mmap: syz.4.117 (6485) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 181.852939][ T6490] xt_TCPMSS: Only works on TCP SYN packets [ 185.046652][ T5837] Bluetooth: hci5: command tx timeout [ 187.339832][ T5837] Bluetooth: hci5: command tx timeout [ 187.481480][ T6512] kAFS: No cell specified [ 189.671735][ T5837] Bluetooth: hci5: command tx timeout [ 191.413280][ T5935] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.929216][ T5837] Bluetooth: hci5: command tx timeout [ 192.312366][ T6479] chnl_net:caif_netlink_parms(): no params data found [ 192.786475][ T6539] overlayfs: missing 'lowerdir' [ 194.650879][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.658271][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.658385][ T5935] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.868391][ T6531] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 194.925181][ T6531] netlink: 'syz.4.128': attribute type 2 has an invalid length. [ 195.567273][ T5935] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.390605][ T5935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.433104][ T6567] netlink: 48 bytes leftover after parsing attributes in process `syz.1.135'. [ 198.442390][ T6567] netlink: 32 bytes leftover after parsing attributes in process `syz.1.135'. [ 199.213813][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.239771][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.265606][ T6479] bridge_slave_0: entered allmulticast mode [ 199.293551][ T6479] bridge_slave_0: entered promiscuous mode [ 199.338351][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.677115][ T6574] block device autoloading is deprecated and will be removed. [ 199.687847][ T6574] syz.4.136: attempt to access beyond end of device [ 199.687847][ T6574] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.132996][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.167837][ T6479] bridge_slave_1: entered allmulticast mode [ 200.411056][ T6479] bridge_slave_1: entered promiscuous mode [ 200.574209][ T6572] virt_wifi0 speed is unknown, defaulting to 1000 [ 201.375393][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.139'. [ 201.473970][ T6588] NILFS (nullb0): couldn't find nilfs on the device [ 201.924210][ T6587] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 201.925891][ T6587] block (null): Could not allocate knbd recv work queue. [ 201.943824][ T6587] nbd: failed to add new device [ 202.328972][ T6572] virt_wifi0 speed is unknown, defaulting to 1000 [ 202.349567][ T6572] virt_wifi0 speed is unknown, defaulting to 1000 [ 202.393131][ T6572] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 202.798107][ T6572] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 202.801862][ T6479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.851080][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 202.881489][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.140'. [ 202.910006][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 203.028545][ T6572] virt_wifi0 speed is unknown, defaulting to 1000 [ 203.051301][ T6479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.201764][ T6590] ceph: No mds server is up or the cluster is laggy [ 203.206708][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 203.298825][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 203.522876][ T6572] virt_wifi0 speed is unknown, defaulting to 1000 [ 203.541498][ T6572] virt_wifi0 speed is unknown, defaulting to 1000 [ 203.607853][ T6600] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 203.615720][ T6600] netlink: 224 bytes leftover after parsing attributes in process `syz.4.143'. [ 203.644040][ T6479] team0: Port device team_slave_0 added [ 203.897812][ T6572] virt_wifi0 speed is unknown, defaulting to 1000 [ 203.991356][ T6479] team0: Port device team_slave_1 added [ 204.000213][ T5935] bridge_slave_1: left allmulticast mode [ 204.049244][ T5935] bridge_slave_1: left promiscuous mode [ 204.060508][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.142189][ T5935] bridge_slave_0: left allmulticast mode [ 204.147890][ T5935] bridge_slave_0: left promiscuous mode [ 204.198030][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.099869][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 207.362258][ T5842] Bluetooth: min 0 < 6 [ 207.420197][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 207.432215][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 207.456468][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 208.690669][ T5935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.190011][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 209.556775][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 209.597517][ T5935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.618566][ T6636] xt_CT: No such helper "snmp_trap" [ 209.642155][ T5935] bond0 (unregistering): Released all slaves [ 209.658159][ T6572] virt_wifi0 speed is unknown, defaulting to 1000 [ 209.812068][ T6572] virt_wifi0 speed is unknown, defaulting to 1000 [ 209.994217][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.050200][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.342940][ T6479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.356040][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.363094][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.389200][ T6479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.114480][ T6681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.863657][ T6683] gre1: entered promiscuous mode [ 215.868704][ T6683] gre1: entered allmulticast mode [ 216.664134][ T6703] No such timeout policy "syz1" [ 217.189331][ T6705] siw: device registration error -23 [ 218.602104][ T6479] hsr_slave_0: entered promiscuous mode [ 218.683790][ T6479] hsr_slave_1: entered promiscuous mode [ 218.744724][ T6719] netlink: 'syz.1.171': attribute type 10 has an invalid length. [ 218.917945][ T6479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.946468][ T6479] Cannot create hsr debugfs directory [ 219.417067][ T6719] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 219.809955][ T6729] fuse: Bad value for 'fd' [ 223.202055][ T5935] hsr_slave_0: left promiscuous mode [ 223.268355][ T5935] hsr_slave_1: left promiscuous mode [ 223.379226][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.416572][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.895055][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.939873][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.159574][ T5935] veth1_macvtap: left promiscuous mode [ 224.211111][ T5935] veth0_macvtap: left promiscuous mode [ 224.217583][ T5935] veth1_vlan: left promiscuous mode [ 224.392930][ T5935] veth0_vlan: left promiscuous mode [ 224.894500][ T6762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.181'. [ 230.375164][ T6762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.181'. [ 230.384395][ T6762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.181'. [ 231.243285][ T5828] Process accounting resumed [ 231.341448][ T6772] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 231.349829][ T6772] netlink: 224 bytes leftover after parsing attributes in process `syz.3.184'. [ 233.739196][ T5935] team0 (unregistering): Port device team_slave_1 removed [ 233.750103][ T5843] Bluetooth: hci5: command 0x0405 tx timeout [ 233.833463][ T5935] team0 (unregistering): Port device team_slave_0 removed [ 234.442594][ T6479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.554510][ T6479] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.651219][ T6479] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.889902][ T6479] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.935932][ T6835] fuse: Bad value for 'fd' [ 241.427622][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.663217][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.679041][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.690508][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.698491][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 241.706097][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.072955][ T6847] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.781126][ T5843] Bluetooth: hci0: command tx timeout [ 246.293626][ T6877] Cannot find add_set index 4 as target [ 247.634326][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 247.722185][ T6847] chnl_net:caif_netlink_parms(): no params data found [ 247.740469][ T5843] Bluetooth: hci0: command tx timeout [ 247.790024][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 247.798886][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 247.905133][ T5043] bridge_slave_1: left allmulticast mode [ 247.945887][ T5043] bridge_slave_1: left promiscuous mode [ 247.980056][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.068032][ T5043] bridge_slave_0: left allmulticast mode [ 248.109381][ T5043] bridge_slave_0: left promiscuous mode [ 248.126284][ T5043] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.427575][ T5043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.479092][ T5043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.516575][ T5043] bond0 (unregistering): Released all slaves [ 248.578695][ T6923] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 248.578725][ T6923] netlink: 224 bytes leftover after parsing attributes in process `syz.2.217'. [ 248.875488][ T5043] hsr_slave_0: left promiscuous mode [ 249.040287][ T5929] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 249.063824][ T5043] hsr_slave_1: left promiscuous mode [ 249.084734][ T6941] netlink: 36 bytes leftover after parsing attributes in process `syz.4.220'. [ 249.094652][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.220'. [ 249.104245][ T6941] netlink: 36 bytes leftover after parsing attributes in process `syz.4.220'. [ 249.114273][ T5043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.123376][ T6941] netlink: 36 bytes leftover after parsing attributes in process `syz.4.220'. [ 249.269976][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 249.270440][ T5043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.319028][ T5929] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 249.364083][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.592033][ T5929] usb 2-1: config 0 has no interface number 0 [ 249.621578][ T5929] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 249.812387][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.820658][ T5843] Bluetooth: hci0: command tx timeout [ 249.847145][ T5929] usb 2-1: Product: syz [ 249.860442][ T5929] usb 2-1: Manufacturer: syz [ 249.865193][ T5929] usb 2-1: SerialNumber: syz [ 250.108615][ T5929] usb 2-1: config 0 descriptor?? [ 250.134781][ T5929] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 250.146805][ T5929] usb 2-1: No valid video chain found. [ 250.761406][ T5926] usb 2-1: USB disconnect, device number 2 [ 251.036603][ T5043] team0 (unregistering): Port device team_slave_1 removed [ 251.128923][ T5043] team0 (unregistering): Port device team_slave_0 removed [ 251.547091][ T6970] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 251.563906][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.577658][ T6970] netlink: 224 bytes leftover after parsing attributes in process `syz.3.230'. [ 251.587319][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.606645][ T6847] bridge_slave_0: entered allmulticast mode [ 251.615454][ T6847] bridge_slave_0: entered promiscuous mode [ 251.639409][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.658850][ T6847] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.670357][ T6847] bridge_slave_1: entered allmulticast mode [ 251.686030][ T6847] bridge_slave_1: entered promiscuous mode [ 252.189270][ T6975] syz.1.229: attempt to access beyond end of device [ 252.189270][ T6975] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 252.261573][ T5843] Bluetooth: hci0: command tx timeout [ 252.815273][ T6847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.882296][ T6847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.232683][ T6847] team0: Port device team_slave_0 added [ 253.258125][ T6847] team0: Port device team_slave_1 added [ 253.544844][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.574983][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.155466][ T7000] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 254.939214][ T6847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.034100][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.089648][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.115639][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.289868][ T6847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.319784][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 255.327843][ T5830] Bluetooth: hci3: ISO packet too small [ 255.491773][ T5828] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 255.517672][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.533402][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 255.547497][ T6847] hsr_slave_0: entered promiscuous mode [ 255.554275][ T7020] usb usb8: usbfs: process 7020 (syz.3.241) did not claim interface 0 before use [ 255.564646][ T6847] hsr_slave_1: entered promiscuous mode [ 255.574224][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 255.591944][ T6847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.594009][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 255.612109][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.635273][ T6847] Cannot create hsr debugfs directory [ 255.641507][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 255.682890][ T5828] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 255.701219][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 255.714082][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.729615][ T10] usb 3-1: Product: syz [ 255.733974][ T10] usb 3-1: Manufacturer: syz [ 255.738618][ T10] usb 3-1: SerialNumber: syz [ 255.752824][ T5828] usb 5-1: Product: syz [ 255.757064][ T5828] usb 5-1: Manufacturer: syz [ 255.776106][ T5828] usb 5-1: SerialNumber: syz [ 255.782285][ T10] usb 3-1: config 0 descriptor?? [ 255.802007][ T5828] usb 5-1: config 0 descriptor?? [ 255.846890][ T5828] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 256.000129][ T10] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 256.031919][ T10] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 256.065414][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.081173][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.285341][ T10] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 256.502191][ T10] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 256.570406][ T5828] gspca_sunplus: reg_r err -71 [ 256.596061][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 256.606241][ T5828] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 256.752496][ T5828] usb 5-1: USB disconnect, device number 3 [ 256.800363][ T10] usb 3-1: USB disconnect, device number 2 [ 257.047886][ T7036] block nbd1: NBD_DISCONNECT [ 257.057082][ T5830] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 257.121534][ T7038] overlayfs: statfs failed on './file0' [ 257.332608][ T6847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.414565][ T6847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.468966][ T6847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.542954][ T6847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.082376][ T7063] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 258.927607][ T6847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.273135][ T7065] netlink: 52 bytes leftover after parsing attributes in process `syz.2.252'. [ 259.282937][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'. [ 259.292712][ T7065] netlink: 52 bytes leftover after parsing attributes in process `syz.2.252'. [ 259.514606][ T6847] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.613998][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.621262][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.726167][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.734614][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.048779][ T6847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.346197][ T7117] capability: warning: `syz.4.267' uses 32-bit capabilities (legacy support in use) [ 261.409562][ T5926] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 261.572059][ T5926] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 261.590892][ T5926] usb 3-1: config 0 has no interface number 0 [ 261.611536][ T5926] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 261.653252][ T5926] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 261.677636][ T5926] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 261.741990][ T6847] veth0_vlan: entered promiscuous mode [ 261.750362][ T5926] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 261.774188][ T6847] veth1_vlan: entered promiscuous mode [ 261.794431][ T5926] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 261.854608][ T5926] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 261.880069][ T6847] veth0_macvtap: entered promiscuous mode [ 261.886449][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.900656][ T5926] usb 3-1: config 0 descriptor?? [ 261.911900][ T6847] veth1_macvtap: entered promiscuous mode [ 261.923793][ T7110] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 261.974199][ T5926] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 262.071110][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.119984][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.150025][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.169278][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.199731][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.215556][ T3160] usb 3-1: USB disconnect, device number 3 [ 262.254533][ T3160] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 262.279558][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.293924][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.334583][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.357029][ T6847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.392600][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.449547][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.478363][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.507164][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.529652][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.551874][ T7145] program syz.3.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.579557][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.606739][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.638128][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.663256][ T6847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.739554][ T6847] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.785219][ T6847] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.796371][ T6847] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.806170][ T6847] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.634072][ T7157] netlink: 188 bytes leftover after parsing attributes in process `syz.2.276'. [ 263.650154][ T7157] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 263.665093][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.700096][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.788733][ T5913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.848876][ T5913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.870394][ T5926] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 264.032144][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 264.071995][ T5926] usb 5-1: config 2 has an invalid interface number: 142 but max is 0 [ 264.102497][ T5926] usb 5-1: config 2 has no interface number 0 [ 264.140290][ T5926] usb 5-1: config 2 interface 142 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 264.178676][ T5926] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 264.194979][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.241404][ T5926] usb 5-1: Product: syz [ 264.261296][ T5926] usb 5-1: Manufacturer: syz [ 264.273384][ T5926] usb 5-1: SerialNumber: syz [ 264.525643][ T7156] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.562210][ T5926] usb 5-1: NFC: intf ffff88805e492000 id ffffffff8f513200 [ 264.680079][ T7172] can0: slcan on ttyS3. [ 265.541048][ T7166] can0 (unregistered): slcan off ttyS3. [ 265.693744][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.702770][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.750337][ T976] usb 5-1: USB disconnect, device number 4 [ 267.029659][ T3160] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 267.223754][ T3160] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.274464][ T3160] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.315317][ T3160] usb 5-1: config 0 interface 0 has no altsetting 0 [ 267.332424][ T3160] usb 5-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 267.373601][ T3160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.413489][ T3160] usb 5-1: config 0 descriptor?? [ 267.507035][ T7228] program syz.3.295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.912140][ T3160] waltop 0003:172F:0502.0001: item fetching failed at offset 2/5 [ 268.017708][ T3160] waltop 0003:172F:0502.0001: probe with driver waltop failed with error -22 [ 268.159973][ T3160] usb 5-1: USB disconnect, device number 5 [ 270.081547][ T7297] program syz.3.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.509648][ T7314] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 272.780931][ T5843] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 272.787634][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 273.980842][ T7360] fuse: Bad value for 'fd' [ 274.771718][ T7391] netlink: 'syz.3.340': attribute type 1 has an invalid length. [ 274.791261][ T7391] netlink: 224 bytes leftover after parsing attributes in process `syz.3.340'. [ 274.799855][ T7390] random: crng reseeded on system resumption [ 274.839751][ T976] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 275.039812][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 275.061022][ T976] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 275.092666][ T976] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.161937][ T976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.257833][ T976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.157046][ T976] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.181691][ T976] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.191032][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.217989][ T30] audit: type=1326 audit(1742598483.405:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7409 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 276.276594][ T30] audit: type=1326 audit(1742598483.405:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7409 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 276.322867][ T30] audit: type=1326 audit(1742598483.445:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7409 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 276.415502][ T30] audit: type=1326 audit(1742598483.445:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7409 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 276.459865][ T976] usb 2-1: usb_control_msg returned -71 [ 276.465524][ T976] usbtmc 2-1:16.0: can't read capabilities [ 276.479822][ T30] audit: type=1326 audit(1742598483.445:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7409 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 276.542510][ T976] usb 2-1: USB disconnect, device number 3 [ 276.577771][ T30] audit: type=1326 audit(1742598483.455:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7409 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 276.602045][ T30] audit: type=1326 audit(1742598483.455:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7409 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 276.625458][ T30] audit: type=1326 audit(1742598483.465:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7409 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ad3d84127 code=0x7ffc0000 [ 276.647196][ T30] audit: type=1326 audit(1742598483.465:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7409 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad3d29359 code=0x7ffc0000 [ 276.675325][ T30] audit: type=1326 audit(1742598483.465:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7409 comm="syz.5.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ad3d84127 code=0x7ffc0000 [ 276.809548][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 277.827736][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 278.029728][ T5929] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 278.201465][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.256518][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.069539][ T976] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 279.203394][ T5929] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 279.212711][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.225654][ T5929] usb 6-1: config 0 descriptor?? [ 279.299538][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 279.313847][ T976] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 279.329807][ T976] usb 5-1: config 179 has no interface number 0 [ 279.358593][ T976] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 279.391445][ T976] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 279.419353][ T976] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.442770][ T976] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 279.483293][ T976] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 279.523819][ T976] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 279.554049][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.589888][ T7446] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 279.677273][ T5929] sony 0003:054C:024B.0002: unexpected long global item [ 279.703151][ T5929] sony 0003:054C:024B.0002: parse failed [ 279.719733][ T5929] sony 0003:054C:024B.0002: probe with driver sony failed with error -22 [ 279.850273][ T976] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input11 [ 279.922469][ T5929] usb 6-1: USB disconnect, device number 2 [ 280.055777][ T26] usb 5-1: USB disconnect, device number 6 [ 280.055803][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 280.072759][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 280.073312][ T26] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 280.408535][ T7496] tipc: Started in network mode [ 280.417176][ T7496] tipc: Node identity ac14140f, cluster identity 4711 [ 280.438635][ T7496] tipc: New replicast peer: 255.255.255.255 [ 280.465709][ T7496] tipc: Enabled bearer , priority 10 [ 280.537696][ T7503] xt_recent: Unsupported userspace flags (000000da) [ 280.737894][ T7510] syzkaller1: entered promiscuous mode [ 280.744429][ T7510] syzkaller1: entered allmulticast mode [ 280.762081][ T7510] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 25 [ 281.260497][ T26] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 281.419845][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 281.431387][ T26] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 281.440754][ T26] usb 5-1: config 0 has no interface number 0 [ 281.456778][ T26] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 281.480922][ T26] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 281.495024][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.505450][ T26] usb 5-1: Product: syz [ 281.937179][ T5929] tipc: Node number set to 2886997007 [ 281.966386][ T26] usb 5-1: Manufacturer: syz [ 282.000215][ T26] usb 5-1: SerialNumber: syz [ 282.029557][ T26] usb 5-1: config 0 descriptor?? [ 282.294344][ T7544] netlink: 'syz.5.381': attribute type 1 has an invalid length. [ 282.303154][ T7544] netlink: 224 bytes leftover after parsing attributes in process `syz.5.381'. [ 282.664161][ T26] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 282.687020][ T26] usb 5-1: USB disconnect, device number 7 [ 282.839822][ T3160] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 283.000768][ T3160] usb 4-1: Using ep0 maxpacket: 8 [ 283.007880][ T3160] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 283.016486][ T3160] usb 4-1: config 179 has no interface number 0 [ 283.023028][ T5843] Bluetooth: hci5: command 0xfc11 tx timeout [ 283.029817][ T5830] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 283.038913][ T3160] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 283.050252][ T3160] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 283.062026][ T3160] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 283.074420][ T3160] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 283.086102][ T3160] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 283.100107][ T3160] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 283.109195][ T3160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.126803][ T7553] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 283.134545][ T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 283.289647][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 283.312791][ T26] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 283.354684][ T26] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 283.372278][ T3160] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input13 [ 283.383100][ T26] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 283.395648][ T26] usb 6-1: Product: syz [ 283.402100][ T26] usb 6-1: Manufacturer: syz [ 283.407887][ T26] usb 6-1: SerialNumber: syz [ 283.416009][ T26] usb 6-1: config 0 descriptor?? [ 283.431136][ T7567] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 283.574205][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 283.574397][ T5926] usb 4-1: USB disconnect, device number 4 [ 283.582558][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 283.630562][ T5926] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 283.676787][ T26] usb 6-1: USB disconnect, device number 3 [ 283.698883][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 283.698905][ T30] audit: type=1326 audit(1742598490.895:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7574 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ca4729359 code=0x7ffc0000 [ 283.768747][ T30] audit: type=1326 audit(1742598490.935:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7574 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ca4729359 code=0x7ffc0000 [ 283.816992][ T30] audit: type=1326 audit(1742598490.945:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7574 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ca4729359 code=0x7ffc0000 [ 283.849385][ T30] audit: type=1326 audit(1742598490.945:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7574 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ca4729359 code=0x7ffc0000 [ 284.348780][ T30] audit: type=1326 audit(1742598490.945:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7574 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ca4729359 code=0x7ffc0000 [ 284.377882][ T30] audit: type=1326 audit(1742598490.945:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7574 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ca4729359 code=0x7ffc0000 [ 284.400317][ T30] audit: type=1326 audit(1742598490.945:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7574 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca478d169 code=0x7ffc0000 [ 284.422276][ T30] audit: type=1326 audit(1742598490.945:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7574 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca478d169 code=0x7ffc0000 [ 284.444647][ T30] audit: type=1326 audit(1742598490.945:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7574 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ca4729359 code=0x7ffc0000 [ 284.466534][ T30] audit: type=1326 audit(1742598490.945:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7574 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca478d169 code=0x7ffc0000 [ 284.699870][ T5830] Bluetooth: hci2: unexpected event for opcode 0x040e [ 285.820856][ T5828] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 285.844444][ T5828] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 286.289650][ T5929] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 286.370440][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 286.432175][ T7626] can0: slcan on ttyS3. [ 286.579925][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 286.644948][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.722340][ T26] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 286.783613][ T5929] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 286.814436][ T26] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 287.090133][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.110304][ T5929] usb 5-1: config 0 descriptor?? [ 287.121268][ T26] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 287.141158][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.150784][ T7614] can0 (unregistered): slcan off ttyS3. [ 287.295465][ T26] usb 2-1: Product: syz [ 287.300109][ T26] usb 2-1: Manufacturer: syz [ 287.304831][ T26] usb 2-1: SerialNumber: syz [ 287.314647][ T26] usb 2-1: config 0 descriptor?? [ 287.335793][ T5929] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 287.615899][ T5929] usb 5-1: USB disconnect, device number 8 [ 288.621750][ T26] mos7840 2-1:0.0: required endpoints missing [ 288.630695][ T26] usb 2-1: USB disconnect, device number 4 [ 288.664590][ T7652] syzkaller1: entered promiscuous mode [ 288.670319][ T7652] syzkaller1: entered allmulticast mode [ 290.115721][ T7670] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 290.152219][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 291.993138][ T7714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.052717][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 292.052739][ T30] audit: type=1326 audit(1742598499.255:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad3d29359 code=0x7ffc0000 [ 292.091675][ T7720] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 292.140702][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 292.141468][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 292.189659][ T30] audit: type=1326 audit(1742598499.255:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad3d29359 code=0x7ffc0000 [ 292.211611][ T30] audit: type=1326 audit(1742598499.255:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 292.246742][ T30] audit: type=1326 audit(1742598499.255:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 292.301819][ T30] audit: type=1326 audit(1742598499.255:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad3d29359 code=0x7ffc0000 [ 292.439401][ T30] audit: type=1326 audit(1742598499.255:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 292.521893][ T7727] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 292.530310][ T7727] netlink: 224 bytes leftover after parsing attributes in process `syz.3.448'. [ 292.578702][ T30] audit: type=1326 audit(1742598499.255:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad3d29359 code=0x7ffc0000 [ 292.719645][ T30] audit: type=1326 audit(1742598499.255:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 292.771259][ T30] audit: type=1326 audit(1742598499.255:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad3d29359 code=0x7ffc0000 [ 292.800086][ T30] audit: type=1326 audit(1742598499.255:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad3d29359 code=0x7ffc0000 [ 292.901420][ T7739] 9pnet_fd: Insufficient options for proto=fd [ 292.918755][ T7744] block nbd4: shutting down sockets [ 292.970253][ T7739] netlink: 'syz.1.451': attribute type 1 has an invalid length. [ 292.989601][ T7739] netlink: 224 bytes leftover after parsing attributes in process `syz.1.451'. [ 293.194742][ T7735] block nbd4: NBD_DISCONNECT [ 293.203147][ T7735] block nbd4: Send disconnect failed -22 [ 293.230758][ T7735] block nbd4: Send disconnect failed -22 [ 294.229655][ T5929] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 294.381675][ T3160] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 294.409338][ T7778] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 294.417169][ T7778] netlink: 224 bytes leftover after parsing attributes in process `syz.3.460'. [ 294.431687][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 294.444656][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 294.469579][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 294.515692][ T5929] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 294.529571][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.537712][ T5929] usb 3-1: Product: syz [ 294.545043][ T3160] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.558134][ T5929] usb 3-1: Manufacturer: syz [ 294.565685][ T3160] usb 6-1: config 0 has no interfaces? [ 294.579628][ T5929] usb 3-1: SerialNumber: syz [ 294.585277][ T3160] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 294.595651][ T5929] usb 3-1: config 0 descriptor?? [ 294.609721][ T3160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.632585][ T3160] usb 6-1: config 0 descriptor?? [ 294.670934][ T7787] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 294.694190][ T7787] netlink: 224 bytes leftover after parsing attributes in process `syz.3.463'. [ 294.845777][ T5929] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 294.878149][ T10] usb 6-1: USB disconnect, device number 4 [ 294.917273][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 295.060745][ T5929] usb 3-1: USB disconnect, device number 4 [ 295.404314][ T7821] block nbd3: shutting down sockets [ 295.825090][ T5929] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 296.038519][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0 [ 296.127989][ T5929] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 296.399388][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.682872][ T5929] usb 4-1: config 0 descriptor?? [ 297.339962][ T5926] Process accounting resumed [ 297.663989][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 297.664042][ T30] audit: type=1326 audit(1742598504.765:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 297.909572][ T30] audit: type=1326 audit(1742598504.775:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 297.999062][ T30] audit: type=1326 audit(1742598504.775:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 298.096040][ T5929] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 298.127008][ T30] audit: type=1326 audit(1742598504.785:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 298.150869][ T30] audit: type=1326 audit(1742598504.785:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 298.202118][ T30] audit: type=1326 audit(1742598504.785:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 298.255731][ T30] audit: type=1326 audit(1742598504.785:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 298.311999][ T10] usb 4-1: USB disconnect, device number 5 [ 298.338491][ T30] audit: type=1326 audit(1742598504.785:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 298.395308][ T30] audit: type=1326 audit(1742598504.795:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 298.450983][ T30] audit: type=1326 audit(1742598504.795:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad3d8d169 code=0x7ffc0000 [ 298.629878][ T5926] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 298.850147][ T5926] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 298.884274][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.027101][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 300.278579][ T5926] usb 5-1: config 0 descriptor?? [ 300.289019][ T5926] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 300.813215][ T5926] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 300.916987][ T7930] syzkaller0: entered promiscuous mode [ 300.923309][ T7930] syzkaller0: entered allmulticast mode [ 301.248472][ T7948] netlink: 'syz.5.494': attribute type 1 has an invalid length. [ 301.263106][ T7948] netlink: 224 bytes leftover after parsing attributes in process `syz.5.494'. [ 301.356903][ T5881] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 301.425076][ T5926] gspca_cpia1: usb_control_msg 05, error -71 [ 301.431702][ T5926] cpia1 5-1:0.0: unexpected systemstate: 00 [ 301.443558][ T5926] usb 5-1: USB disconnect, device number 9 [ 301.457462][ T7952] program syz.2.495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.553078][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 301.565448][ T5881] usb 2-1: config 0 has no interfaces? [ 301.572807][ T5881] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 301.591464][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.612682][ T5881] usb 2-1: config 0 descriptor?? [ 301.923041][ T5926] usb 2-1: USB disconnect, device number 5 [ 303.549845][ T5926] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 303.723080][ T5926] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 303.732803][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.743496][ T5926] usb 5-1: config 0 descriptor?? [ 305.053126][ T5926] pegasus 5-1:0.0: can't reset MAC [ 305.058577][ T5926] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 305.097642][ T5926] usb 5-1: USB disconnect, device number 10 [ 305.863263][ T5830] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 306.232594][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 307.070078][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 307.110204][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 307.149451][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 307.195231][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 307.226156][ T10] usb 4-1: Product: syz [ 307.284670][ T10] usb 4-1: Manufacturer: syz [ 307.289339][ T10] usb 4-1: SerialNumber: syz [ 307.305925][ T10] usb 4-1: config 0 descriptor?? [ 307.318729][ T10] usb 4-1: selecting invalid altsetting 0 [ 307.654328][ T10] usb 4-1: USB disconnect, device number 6 [ 308.138060][ T7975] Set syz1 is full, maxelem 65536 reached [ 309.226744][ T5926] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 309.392045][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.428168][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.448869][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.467458][ T5926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.479473][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.506827][ T5926] usb 3-1: config 0 descriptor?? [ 309.525840][ T8055] input: syz1 as /devices/virtual/input/input14 [ 309.978691][ T5926] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 310.052993][ T5926] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 311.250671][ T8039] batman_adv: batadv0: Adding interface: macvlan2 [ 311.257202][ T8039] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.284249][ T8039] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 311.398217][ T8064] 9pnet_fd: Insufficient options for proto=fd [ 311.719514][ T5881] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 311.889731][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 311.900295][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.911754][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.921972][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 311.935829][ T5881] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 311.945086][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.970526][ T5881] usb 6-1: config 0 descriptor?? [ 312.203765][ T5926] usb 3-1: USB disconnect, device number 5 [ 312.401415][ T5881] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 312.414824][ T5881] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 312.440293][ T5881] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 312.469335][ T5881] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 312.745608][ T8098] 9pnet_fd: Insufficient options for proto=fd [ 312.919313][ T8102] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.344878][ T5881] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 313.446462][ T5881] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 313.581439][ T5881] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 313.615244][ T5881] usb 6-1: USB disconnect, device number 5 [ 313.637493][ T8110] tipc: Started in network mode [ 313.642802][ T8110] tipc: Node identity 6, cluster identity 4711 [ 313.649005][ T8110] tipc: Node number set to 6 [ 315.280175][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 315.474265][ T8136] 9pnet_fd: Insufficient options for proto=fd [ 315.562254][ T8139] netlink: 337 bytes leftover after parsing attributes in process `syz.4.558'. [ 316.737879][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 316.759278][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 316.782066][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 316.791305][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 316.817835][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 316.829195][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 316.853578][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 316.854157][ T8150] netlink: 1608 bytes leftover after parsing attributes in process `syz.4.561'. [ 316.864309][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.087121][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.118628][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.137583][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.146180][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.155488][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.165065][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.173773][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.185659][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.290097][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.315135][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.324505][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.475561][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.490560][ T8141] Process accounting resumed [ 317.513923][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.526599][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.564131][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.581402][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.589256][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.627934][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.658517][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.670195][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.698488][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.711951][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.739946][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.779335][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.800273][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.809356][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.831830][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.858257][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.898104][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.926738][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.944720][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.953053][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 317.961261][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 318.072837][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 318.105678][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 318.799840][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 318.887547][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 318.926238][ T3160] hid-generic 0000:007F:FFFFFFFE.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.367129][ T8173] 9pnet_fd: Insufficient options for proto=fd [ 322.133148][ T8193] kvm: pic: non byte write [ 322.296186][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.4.579'. [ 322.462895][ T8208] 9pnet_fd: Insufficient options for proto=fd [ 323.040844][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 324.728349][ T8257] 9pnet_fd: Insufficient options for proto=fd [ 324.996699][ T8253] syz.2.592 (8253): drop_caches: 2 [ 325.264943][ T8266] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 325.272812][ T8266] netlink: 224 bytes leftover after parsing attributes in process `syz.2.598'. [ 325.556152][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.635826][ T8273] netlink: 96 bytes leftover after parsing attributes in process `syz.2.603'. [ 325.726335][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.869288][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.100150][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.983549][ T3160] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 327.098539][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 327.164368][ T3160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.227387][ T3160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.279507][ T3160] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 327.335513][ T3160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.384574][ T3160] usb 6-1: config 0 descriptor?? [ 327.435676][ T62] bridge_slave_1: left allmulticast mode [ 327.497190][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.499478][ T62] bridge_slave_1: left promiscuous mode [ 327.511036][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.529360][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.529581][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.545451][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.554785][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 327.564269][ T62] bridge_slave_0: left allmulticast mode [ 327.579674][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.582082][ T62] bridge_slave_0: left promiscuous mode [ 327.669803][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.784470][ T8307] Process accounting resumed [ 328.610470][ T3160] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71 [ 328.645425][ T3160] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 328.685459][ T3160] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71 [ 328.729294][ T3160] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 328.777537][ T3160] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 328.868297][ T3160] usb 6-1: USB disconnect, device number 6 [ 329.495296][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.523013][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.539837][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 329.552876][ T62] bond0 (unregistering): Released all slaves [ 329.576196][ T8310] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 329.653024][ T62] tipc: Left network mode [ 329.660555][ T5843] Bluetooth: hci3: command tx timeout [ 329.682221][ T8300] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.709564][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 329.737054][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 329.764908][ T47] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 329.785864][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.794436][ T47] usb 2-1: Product: syz [ 329.799005][ T47] usb 2-1: Manufacturer: syz [ 329.804065][ T47] usb 2-1: SerialNumber: syz [ 329.811582][ T47] usb 2-1: config 0 descriptor?? [ 329.861736][ T47] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 330.093421][ T5926] Process accounting resumed [ 330.196372][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.108691][ T1148] usb 2-1: Failed to submit usb control message: -110 [ 331.140196][ T1148] usb 2-1: unable to send the bmi data to the device: -110 [ 331.148117][ T1148] usb 2-1: unable to get target info from device [ 331.270406][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.283683][ T1148] usb 2-1: could not get target info (-110) [ 331.318364][ T1148] usb 2-1: could not probe fw (-110) [ 331.700878][ T5843] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 331.743227][ T5843] Bluetooth: hci3: command tx timeout [ 332.470327][ T62] hsr_slave_0: left promiscuous mode [ 332.519299][ T62] hsr_slave_1: left promiscuous mode [ 332.556457][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.570120][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.590933][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.598403][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.638201][ T5828] usb 2-1: USB disconnect, device number 6 [ 332.665868][ T62] veth1_macvtap: left promiscuous mode [ 332.677815][ T62] veth0_macvtap: left promiscuous mode [ 332.684060][ T62] veth1_vlan: left promiscuous mode [ 332.690368][ T62] veth0_vlan: left promiscuous mode [ 333.951428][ T5843] Bluetooth: hci3: command tx timeout [ 334.275401][ T8362] xt_CT: No such helper "snmp" [ 334.591561][ T8346] overlayfs: statfs failed on './file0' [ 334.723942][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'. [ 335.980201][ T5843] Bluetooth: hci3: command tx timeout [ 336.091416][ T62] team0 (unregistering): Port device team_slave_1 removed [ 336.198766][ T62] team0 (unregistering): Port device team_slave_0 removed [ 337.585397][ T8300] chnl_net:caif_netlink_parms(): no params data found [ 337.634910][ T8373] bridge_slave_1: left allmulticast mode [ 337.662202][ T8373] bridge_slave_1: left promiscuous mode [ 337.670796][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.713155][ T8373] bridge1: port 1(bridge_slave_1) entered blocking state [ 337.736296][ T8373] bridge1: port 1(bridge_slave_1) entered disabled state [ 337.766790][ T8373] bridge_slave_1: entered allmulticast mode [ 337.822280][ T8373] bridge_slave_1: entered promiscuous mode [ 338.774549][ T8415] kvm: pic: level sensitive irq not supported [ 338.774937][ T8415] kvm: pic: single mode not supported [ 338.781582][ T8415] kvm: pic: level sensitive irq not supported [ 338.817892][ T8415] kvm: pic: single mode not supported [ 338.855857][ T8415] kvm: pic: single mode not supported [ 338.867202][ T8300] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.876799][ T8415] kvm: pic: level sensitive irq not supported [ 338.892846][ T8415] kvm: pic: single mode not supported [ 338.899051][ T8415] kvm: pic: level sensitive irq not supported [ 338.950963][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.081629][ T8300] bridge_slave_0: entered allmulticast mode [ 339.168351][ T8300] bridge_slave_0: entered promiscuous mode [ 339.213603][ T8300] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.249034][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.306583][ T8300] bridge_slave_1: entered allmulticast mode [ 339.370348][ T8300] bridge_slave_1: entered promiscuous mode [ 339.470105][ T8300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.503667][ T8300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.407819][ T8300] team0: Port device team_slave_0 added [ 340.475288][ T8300] team0: Port device team_slave_1 added [ 340.594924][ T8300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.614474][ T8300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.675841][ T8300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.696588][ T8300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.703951][ T8300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.736032][ T8300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.769628][ T3160] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 340.789158][ T8300] hsr_slave_0: entered promiscuous mode [ 340.815682][ T8440] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 340.820657][ T8300] hsr_slave_1: entered promiscuous mode [ 340.835570][ T8300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.847123][ T8300] Cannot create hsr debugfs directory [ 340.881553][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 340.907377][ T8440] kvm: pic: level sensitive irq not supported [ 340.907623][ T8440] kvm: pic: non byte read [ 340.963198][ T3160] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.975846][ T8443] vlan2: entered promiscuous mode [ 340.981293][ T8443] syz_tun: entered promiscuous mode [ 340.990250][ T3160] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 341.003048][ T8443] syz_tun: left promiscuous mode [ 341.021833][ T3160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.056900][ T3160] usb 6-1: config 0 descriptor?? [ 341.079380][ T3160] pwc: Askey VC010 type 2 USB webcam detected. [ 341.509847][ T3160] pwc: recv_control_msg error -32 req 02 val 2b00 [ 342.442482][ T3160] pwc: recv_control_msg error -32 req 02 val 2700 [ 342.451147][ T3160] pwc: recv_control_msg error -32 req 02 val 2c00 [ 342.459758][ T5843] Bluetooth: hci3: command tx timeout [ 342.465689][ T3160] pwc: recv_control_msg error -32 req 04 val 1000 [ 342.477561][ T3160] pwc: recv_control_msg error -32 req 04 val 1300 [ 342.489782][ T3160] pwc: recv_control_msg error -32 req 04 val 1400 [ 342.497147][ T3160] pwc: recv_control_msg error -32 req 02 val 2000 [ 342.837846][ T3160] pwc: recv_control_msg error -71 req 04 val 1500 [ 342.846512][ T3160] pwc: recv_control_msg error -71 req 02 val 2500 [ 342.854738][ T3160] pwc: recv_control_msg error -71 req 02 val 2400 [ 342.867140][ T3160] pwc: recv_control_msg error -71 req 02 val 2600 [ 342.881537][ T3160] pwc: recv_control_msg error -71 req 02 val 2900 [ 343.806636][ T3160] pwc: recv_control_msg error -71 req 02 val 2800 [ 343.840133][ T3160] pwc: recv_control_msg error -71 req 04 val 1100 [ 343.847121][ T3160] pwc: recv_control_msg error -71 req 04 val 1200 [ 343.921901][ T3160] pwc: Registered as video103. [ 343.968738][ T3160] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 343.993389][ T8300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.999072][ T3160] usb 6-1: USB disconnect, device number 7 [ 344.043118][ T8300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.154183][ T8300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.170488][ T8300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.371829][ T8300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.396025][ T8300] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.417735][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.424985][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.438651][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.445832][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.789808][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 345.969865][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 346.008846][ T26] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 346.057533][ T26] usb 2-1: config 0 has no interface number 0 [ 346.076980][ T26] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 346.135304][ T26] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 346.203287][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.271687][ T26] usb 2-1: Product: syz [ 346.276374][ T26] usb 2-1: Manufacturer: syz [ 346.360114][ T26] usb 2-1: SerialNumber: syz [ 346.433948][ T26] usb 2-1: config 0 descriptor?? [ 346.451583][ T8474] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 346.471834][ T26] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.570395][ T8300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.584925][ T5828] usb 2-1: USB disconnect, device number 7 [ 347.732158][ T8300] veth0_vlan: entered promiscuous mode [ 347.800388][ T8300] veth1_vlan: entered promiscuous mode [ 348.774248][ T8300] veth0_macvtap: entered promiscuous mode [ 348.838839][ T8300] veth1_macvtap: entered promiscuous mode [ 348.905015][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.953757][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.973321][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.995356][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.026079][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.047021][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.051295][ T5843] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 349.075126][ T8509] overlayfs: statfs failed on './file0' [ 349.094044][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.118641][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.146375][ T8300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.552167][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.817760][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.849713][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.873410][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.889575][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.921075][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.931368][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.949557][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.960699][ T8300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.995963][ T8300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.019544][ T8300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.040811][ T8300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.060223][ T8300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.165249][ T8520] kvm: pic: non byte read [ 350.177346][ T8520] kvm: pic: non byte read [ 350.187413][ T8520] kvm: pic: single mode not supported [ 350.187495][ T8520] kvm: pic: non byte read [ 350.237504][ T8517] ------------[ cut here ]------------ [ 350.243566][ T8517] refcount_t: underflow; use-after-free. [ 350.250293][ T8517] WARNING: CPU: 1 PID: 8517 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 350.259981][ T8517] Modules linked in: [ 350.263951][ T8517] CPU: 1 UID: 0 PID: 8517 Comm: syz.4.666 Not tainted 6.14.0-rc7-syzkaller-00186-gd07de43e3f05 #0 [ 350.274638][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 350.284812][ T8517] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 350.291064][ T8517] Code: c0 e1 7f 8c e8 d7 bc 93 fc 90 0f 0b 90 90 eb 99 e8 6b 01 d4 fc c6 05 97 15 38 0b 01 90 48 c7 c7 20 e2 7f 8c e8 b7 bc 93 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 48 01 d4 fc c6 05 71 15 38 0b 01 90 [ 350.310958][ T8517] RSP: 0018:ffffc9001bfe78c0 EFLAGS: 00010246 [ 350.317086][ T8517] RAX: 00588d26b45b4a00 RBX: ffff888079733290 RCX: 0000000000080000 [ 350.325259][ T8517] RDX: ffffc9000cdea000 RSI: 000000000007ffff RDI: 0000000000080000 [ 350.333357][ T8517] RBP: 0000000000000003 R08: ffffffff81819d62 R09: fffffbfff1d3a69c [ 350.340643][ T5043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.341439][ T8517] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: dffffc0000000000 [ 350.357362][ T8517] R13: 1ffff11006654f00 R14: 1ffff1100f2e662e R15: ffff888079733170 [ 350.365458][ T8517] FS: 00007f67567fe6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 350.374480][ T8517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.381738][ T8517] CR2: 0000000000000000 CR3: 00000000784f6000 CR4: 00000000003526f0 [ 350.384386][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.389891][ T8517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.398630][ T8520] kvm: pic: non byte read [ 350.405658][ T8517] DR3: 00000000e08e000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 350.405682][ T8517] Call Trace: [ 350.405693][ T8517] [ 350.405705][ T8517] ? __warn+0x165/0x4d0 [ 350.405747][ T8517] ? refcount_warn_saturate+0x15a/0x1d0 [ 350.405783][ T8517] ? report_bug+0x2b3/0x500 [ 350.405815][ T8517] ? refcount_warn_saturate+0x15a/0x1d0 [ 350.410375][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.418239][ T8517] ? handle_bug+0x60/0x90 [ 350.429715][ T5043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.434263][ T8517] ? exc_invalid_op+0x1a/0x50 [ 350.439166][ T8520] kvm: pic: non byte read [ 350.444369][ T8517] ? asm_exc_invalid_op+0x1a/0x20 [ 350.444412][ T8517] ? __warn_printk+0x292/0x360 [ 350.444452][ T8517] ? refcount_warn_saturate+0x15a/0x1d0 [ 350.444489][ T8517] io_send_zc_cleanup+0x121/0x170 [ 350.493306][ T8517] ? __pfx_io_send_zc_cleanup+0x10/0x10 [ 350.498910][ T8517] io_clean_op+0x58c/0x9a0 [ 350.502170][ T8520] kvm: pic: single mode not supported [ 350.503432][ T8517] ? __io_submit_flush_completions+0xa9f/0xd20 [ 350.515078][ T8517] __io_submit_flush_completions+0xc16/0xd20 [ 350.521161][ T8517] ? __pfx___io_submit_flush_completions+0x10/0x10 [ 350.527731][ T8517] io_handle_tw_list+0x473/0x500 [ 350.532807][ T8517] tctx_task_work_run+0x9a/0x370 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 350.537802][ T8517] tctx_task_work+0x9a/0x100 [ 350.542575][ T8517] ? __pfx_tctx_task_work+0x10/0x10 [ 350.547820][ T8517] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.553122][ T8517] ? lockdep_hardirqs_on+0x99/0x150 [ 350.558026][ T8520] kvm: pic: non byte read [ 350.558359][ T8517] task_work_run+0x24f/0x310 [ 350.567387][ T8517] ? __pfx_task_work_run+0x10/0x10 [ 350.572605][ T8517] ? futex_wait+0x285/0x360 [ 350.577171][ T8517] ? __pfx_futex_wait+0x10/0x10 [ 350.582126][ T8517] get_signal+0x15d1/0x1720 [ 350.586700][ T8517] ? do_mprotect_pkey+0xbda/0xdd0 [ 350.591889][ T8517] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 350.597926][ T8517] ? __pfx_get_signal+0x10/0x10 [ 350.602921][ T8517] arch_do_signal_or_restart+0x96/0x860 [ 350.608525][ T8517] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 350.614804][ T8517] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.620914][ T8517] ? syscall_exit_to_user_mode+0xa3/0x340 [ 350.626710][ T8517] syscall_exit_to_user_mode+0xce/0x340 [ 350.632463][ T8517] do_syscall_64+0x100/0x230 [ 350.637112][ T8517] ? clear_bhb_loop+0x35/0x90 [ 350.641891][ T8517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.647832][ T8517] RIP: 0033:0x7f675598d169 [ 350.652347][ T8517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.672155][ T8517] RSP: 002b:00007f67567fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 350.680718][ T8517] RAX: 0000000000001000 RBX: 00007f6755ba5fa0 RCX: 00007f675598d169 [ 350.688756][ T8517] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000007 [ 350.696894][ T8517] RBP: 00007f6755a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 350.705189][ T8517] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000 [ 350.713269][ T8517] R13: 0000000000000000 R14: 00007f6755ba5fa0 R15: 00007ffefe925f78 [ 350.721348][ T8517] [ 350.724420][ T8517] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 350.731737][ T8517] CPU: 1 UID: 0 PID: 8517 Comm: syz.4.666 Not tainted 6.14.0-rc7-syzkaller-00186-gd07de43e3f05 #0 [ 350.742377][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 350.752478][ T8517] Call Trace: [ 350.755798][ T8517] [ 350.758765][ T8517] dump_stack_lvl+0x241/0x360 [ 350.763502][ T8517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.768749][ T8517] ? __pfx__printk+0x10/0x10 [ 350.773369][ T8517] ? _printk+0xd5/0x120 [ 350.777554][ T8517] ? __init_begin+0x41000/0x41000 [ 350.782617][ T8517] ? vscnprintf+0x5d/0x90 [ 350.787001][ T8517] panic+0x349/0x880 [ 350.790931][ T8517] ? __warn+0x174/0x4d0 [ 350.795123][ T8517] ? __pfx_panic+0x10/0x10 [ 350.799590][ T8517] __warn+0x344/0x4d0 [ 350.803601][ T8517] ? refcount_warn_saturate+0x15a/0x1d0 [ 350.809169][ T8517] report_bug+0x2b3/0x500 [ 350.813518][ T8517] ? refcount_warn_saturate+0x15a/0x1d0 [ 350.819083][ T8517] handle_bug+0x60/0x90 [ 350.823248][ T8517] exc_invalid_op+0x1a/0x50 [ 350.827770][ T8517] asm_exc_invalid_op+0x1a/0x20 [ 350.832634][ T8517] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 350.838832][ T8517] Code: c0 e1 7f 8c e8 d7 bc 93 fc 90 0f 0b 90 90 eb 99 e8 6b 01 d4 fc c6 05 97 15 38 0b 01 90 48 c7 c7 20 e2 7f 8c e8 b7 bc 93 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 48 01 d4 fc c6 05 71 15 38 0b 01 90 [ 350.858451][ T8517] RSP: 0018:ffffc9001bfe78c0 EFLAGS: 00010246 [ 350.864565][ T8517] RAX: 00588d26b45b4a00 RBX: ffff888079733290 RCX: 0000000000080000 [ 350.872572][ T8517] RDX: ffffc9000cdea000 RSI: 000000000007ffff RDI: 0000000000080000 [ 350.880578][ T8517] RBP: 0000000000000003 R08: ffffffff81819d62 R09: fffffbfff1d3a69c [ 350.888556][ T8517] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: dffffc0000000000 [ 350.896548][ T8517] R13: 1ffff11006654f00 R14: 1ffff1100f2e662e R15: ffff888079733170 [ 350.904543][ T8517] ? __warn_printk+0x292/0x360 [ 350.909339][ T8517] io_send_zc_cleanup+0x121/0x170 [ 350.914378][ T8517] ? __pfx_io_send_zc_cleanup+0x10/0x10 [ 350.919942][ T8517] io_clean_op+0x58c/0x9a0 [ 350.924408][ T8517] ? __io_submit_flush_completions+0xa9f/0xd20 [ 350.930577][ T8517] __io_submit_flush_completions+0xc16/0xd20 [ 350.936578][ T8517] ? __pfx___io_submit_flush_completions+0x10/0x10 [ 350.943102][ T8517] io_handle_tw_list+0x473/0x500 [ 350.948057][ T8517] tctx_task_work_run+0x9a/0x370 [ 350.953005][ T8517] tctx_task_work+0x9a/0x100 [ 350.957605][ T8517] ? __pfx_tctx_task_work+0x10/0x10 [ 350.962815][ T8517] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.968027][ T8517] ? lockdep_hardirqs_on+0x99/0x150 [ 350.973255][ T8517] task_work_run+0x24f/0x310 [ 350.977860][ T8517] ? __pfx_task_work_run+0x10/0x10 [ 350.982976][ T8517] ? futex_wait+0x285/0x360 [ 350.987498][ T8517] ? __pfx_futex_wait+0x10/0x10 [ 350.992367][ T8517] get_signal+0x15d1/0x1720 [ 350.996882][ T8517] ? do_mprotect_pkey+0xbda/0xdd0 [ 351.001938][ T8517] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 351.007938][ T8517] ? __pfx_get_signal+0x10/0x10 [ 351.012827][ T8517] arch_do_signal_or_restart+0x96/0x860 [ 351.018390][ T8517] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 351.024558][ T8517] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 351.030611][ T8517] ? syscall_exit_to_user_mode+0xa3/0x340 [ 351.036353][ T8517] syscall_exit_to_user_mode+0xce/0x340 [ 351.041922][ T8517] do_syscall_64+0x100/0x230 [ 351.046534][ T8517] ? clear_bhb_loop+0x35/0x90 [ 351.051229][ T8517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.057138][ T8517] RIP: 0033:0x7f675598d169 [ 351.061563][ T8517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.081208][ T8517] RSP: 002b:00007f67567fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 351.089725][ T8517] RAX: 0000000000001000 RBX: 00007f6755ba5fa0 RCX: 00007f675598d169 [ 351.097708][ T8517] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000007 [ 351.105702][ T8517] RBP: 00007f6755a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 351.113696][ T8517] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000 [ 351.121694][ T8517] R13: 0000000000000000 R14: 00007f6755ba5fa0 R15: 00007ffefe925f78 [ 351.129782][ T8517] [ 351.133089][ T8517] Kernel Offset: disabled [ 351.137516][ T8517] Rebooting in 86400 seconds..