last executing test programs: 6.760265188s ago: executing program 4 (id=1105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 6.574101539s ago: executing program 4 (id=1107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 6.34876371s ago: executing program 4 (id=1110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r5, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 4.729104188s ago: executing program 4 (id=1114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.269039255s ago: executing program 1 (id=1116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r3, 0x0, 0x0, 0x24000041, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="15"], 0x28}}, 0x80) 4.231628781s ago: executing program 3 (id=1117): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) 4.088541847s ago: executing program 1 (id=1119): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) migrate_pages(0x0, 0x7000, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x4119) 4.048921103s ago: executing program 4 (id=1120): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000440)={0x80, 0x6, 0x5, 0x0, 0x0, 0x80000001, 0x0}) 3.93900781s ago: executing program 3 (id=1121): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) fstat(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) 3.833712735s ago: executing program 1 (id=1123): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 3.799056622s ago: executing program 3 (id=1124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r5, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 3.746439181s ago: executing program 4 (id=1125): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 2.279025697s ago: executing program 3 (id=1128): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc040884) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.923085643s ago: executing program 3 (id=1130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.899535775s ago: executing program 0 (id=1131): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) 1.686701295s ago: executing program 2 (id=1133): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) migrate_pages(0x0, 0x7000, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x4119) 1.652414278s ago: executing program 1 (id=1134): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r1, 0x4) unshare(0x8000000) semtimedop(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 1.651501308s ago: executing program 0 (id=1135): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 1.432550489s ago: executing program 2 (id=1136): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) 1.305451794s ago: executing program 0 (id=1137): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 1.035691464s ago: executing program 2 (id=1138): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 984.356801ms ago: executing program 0 (id=1139): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000e27f0000010000000000"], 0x48) 914.936259ms ago: executing program 3 (id=1140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r1, 0x4) unshare(0x8000000) semtimedop(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x487, 0x0, 0x9}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 471.247532ms ago: executing program 0 (id=1141): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r4}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r5}, 0x18) 470.770831ms ago: executing program 2 (id=1142): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r3, 0x0, 0x0, 0x24000041, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="15"], 0x28}}, 0x80) 308.830553ms ago: executing program 2 (id=1143): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x3, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x200, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x3ff, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a3, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x10002, 0x6, 0x1, 0x10080, 0x6, 0xb, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x8000200, 0xffff3441, 0xfff]}, 0x45c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 218.347252ms ago: executing program 0 (id=1144): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 158.01093ms ago: executing program 1 (id=1145): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000001500)) 3.060334ms ago: executing program 1 (id=1146): mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\t\x00\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf7\tk\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x9260\xa0B\xae|', 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 0s ago: executing program 2 (id=1147): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) migrate_pages(0x0, 0x7000, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x4119) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 82.042975][ T5794] cgroup: Unknown subsys name 'net' [ 82.330027][ T5794] cgroup: Unknown subsys name 'cpuset' [ 82.395247][ T5794] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.107979][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.007877][ T1237] cfg80211: failed to load regulatory.db [ 96.396739][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.403236][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.413571][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.430592][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.432054][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.433285][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.457720][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.458239][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.463414][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.466219][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.467879][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.549252][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.550995][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.551745][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.582002][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.620246][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.622826][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.630272][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.635735][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.636495][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.637616][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.638356][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.641830][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.717598][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.719512][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.488518][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 97.636695][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 97.791527][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 97.799593][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 97.935809][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 98.365504][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.366604][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.367142][ T5828] bridge_slave_0: entered allmulticast mode [ 98.368904][ T5828] bridge_slave_0: entered promiscuous mode [ 98.483878][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.484009][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.484535][ T5828] bridge_slave_1: entered allmulticast mode [ 98.488082][ T5828] bridge_slave_1: entered promiscuous mode [ 98.526691][ T5815] Bluetooth: hci0: command tx timeout [ 98.684493][ T5815] Bluetooth: hci4: command tx timeout [ 98.684541][ T61] Bluetooth: hci1: command tx timeout [ 98.764441][ T5815] Bluetooth: hci3: command tx timeout [ 98.774436][ T5815] Bluetooth: hci2: command tx timeout [ 98.856866][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.857081][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.857263][ T5819] bridge_slave_0: entered allmulticast mode [ 98.860055][ T5819] bridge_slave_0: entered promiscuous mode [ 99.085344][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.085470][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.085712][ T5819] bridge_slave_1: entered allmulticast mode [ 99.087413][ T5819] bridge_slave_1: entered promiscuous mode [ 99.149074][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.149470][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.149595][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.149783][ T5814] bridge_slave_0: entered allmulticast mode [ 99.151826][ T5814] bridge_slave_0: entered promiscuous mode [ 99.156361][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.156515][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.157058][ T5817] bridge_slave_0: entered allmulticast mode [ 99.160005][ T5817] bridge_slave_0: entered promiscuous mode [ 99.297548][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.297953][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.298056][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.298164][ T5814] bridge_slave_1: entered allmulticast mode [ 99.299700][ T5814] bridge_slave_1: entered promiscuous mode [ 99.301789][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.301889][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.301997][ T5817] bridge_slave_1: entered allmulticast mode [ 99.303453][ T5817] bridge_slave_1: entered promiscuous mode [ 99.367690][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.367815][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.367974][ T5824] bridge_slave_0: entered allmulticast mode [ 99.369742][ T5824] bridge_slave_0: entered promiscuous mode [ 99.578681][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.578966][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.579159][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.579330][ T5824] bridge_slave_1: entered allmulticast mode [ 99.581176][ T5824] bridge_slave_1: entered promiscuous mode [ 99.948207][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.036612][ T5828] team0: Port device team_slave_0 added [ 100.041151][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.045830][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.208092][ T5828] team0: Port device team_slave_1 added [ 100.213411][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.216650][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.298392][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.516867][ T5819] team0: Port device team_slave_0 added [ 100.520178][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.604397][ T5815] Bluetooth: hci0: command tx timeout [ 100.727296][ T5819] team0: Port device team_slave_1 added [ 100.764464][ T61] Bluetooth: hci1: command tx timeout [ 100.764638][ T5815] Bluetooth: hci4: command tx timeout [ 100.806222][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.806234][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.806247][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.809640][ T5814] team0: Port device team_slave_0 added [ 100.844776][ T5815] Bluetooth: hci2: command tx timeout [ 100.844785][ T61] Bluetooth: hci3: command tx timeout [ 101.076813][ T5817] team0: Port device team_slave_0 added [ 101.236476][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.236494][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.236518][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.238743][ T5814] team0: Port device team_slave_1 added [ 101.240639][ T5817] team0: Port device team_slave_1 added [ 101.326970][ T5824] team0: Port device team_slave_0 added [ 101.496113][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.496154][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.496168][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.498775][ T5824] team0: Port device team_slave_1 added [ 101.636194][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.636210][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.636232][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.718119][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.718138][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.718151][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.719244][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.719259][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.719281][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.887626][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.887643][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.887789][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.888784][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.888797][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.888814][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.891033][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.891045][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.891060][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.100122][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.100140][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.100154][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.108680][ T5828] hsr_slave_0: entered promiscuous mode [ 102.110543][ T5828] hsr_slave_1: entered promiscuous mode [ 102.431089][ T5819] hsr_slave_0: entered promiscuous mode [ 102.434913][ T5819] hsr_slave_1: entered promiscuous mode [ 102.435939][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 102.436051][ T5819] Cannot create hsr debugfs directory [ 102.694534][ T61] Bluetooth: hci0: command tx timeout [ 102.724020][ T5814] hsr_slave_0: entered promiscuous mode [ 102.725825][ T5814] hsr_slave_1: entered promiscuous mode [ 102.726818][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 102.726840][ T5814] Cannot create hsr debugfs directory [ 102.738288][ T5817] hsr_slave_0: entered promiscuous mode [ 102.739622][ T5817] hsr_slave_1: entered promiscuous mode [ 102.740510][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 102.740531][ T5817] Cannot create hsr debugfs directory [ 102.844586][ T61] Bluetooth: hci4: command tx timeout [ 102.844619][ T61] Bluetooth: hci1: command tx timeout [ 102.924409][ T61] Bluetooth: hci3: command tx timeout [ 102.924444][ T61] Bluetooth: hci2: command tx timeout [ 102.941499][ T5824] hsr_slave_0: entered promiscuous mode [ 102.942921][ T5824] hsr_slave_1: entered promiscuous mode [ 102.943843][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 102.943865][ T5824] Cannot create hsr debugfs directory [ 104.398530][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.441953][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.492051][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.540575][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.663397][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.711375][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.753928][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.774465][ T5815] Bluetooth: hci0: command tx timeout [ 104.810778][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.933044][ T5815] Bluetooth: hci1: command tx timeout [ 104.933055][ T61] Bluetooth: hci4: command tx timeout [ 104.933291][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.967834][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.004506][ T61] Bluetooth: hci2: command tx timeout [ 105.004516][ T5815] Bluetooth: hci3: command tx timeout [ 105.013122][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.069344][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.206850][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.245766][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.283303][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.319314][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.458629][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.504677][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.540833][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.543484][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.566967][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.666411][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.679167][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.711133][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.712717][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.746960][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.747223][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.784971][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.811077][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.829578][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.829743][ T3644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.869677][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.869807][ T3644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.929388][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.962887][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.963056][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.980218][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.013332][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.013476][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.104321][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.109133][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.153473][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.159015][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.203908][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.218720][ T3644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.269508][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.311880][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.312122][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.379716][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.379914][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.540244][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.712677][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.832444][ T5828] veth0_vlan: entered promiscuous mode [ 106.848163][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.902783][ T5828] veth1_vlan: entered promiscuous mode [ 106.970730][ T5819] veth0_vlan: entered promiscuous mode [ 107.041723][ T5819] veth1_vlan: entered promiscuous mode [ 107.053105][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.095932][ T5828] veth0_macvtap: entered promiscuous mode [ 107.133420][ T5828] veth1_macvtap: entered promiscuous mode [ 107.219484][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.248750][ T5819] veth0_macvtap: entered promiscuous mode [ 107.271783][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.289199][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.304130][ T5819] veth1_macvtap: entered promiscuous mode [ 107.348929][ T159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.365149][ T159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.376014][ T5817] veth0_vlan: entered promiscuous mode [ 107.377164][ T159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.390274][ T159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.455098][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.459702][ T5817] veth1_vlan: entered promiscuous mode [ 107.520168][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.597108][ T159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.618380][ T159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.622871][ T159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.631352][ T159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.742713][ T5814] veth0_vlan: entered promiscuous mode [ 107.744698][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.744719][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.746902][ T5824] veth0_vlan: entered promiscuous mode [ 107.893301][ T5817] veth0_macvtap: entered promiscuous mode [ 107.922704][ T5814] veth1_vlan: entered promiscuous mode [ 107.938425][ T5824] veth1_vlan: entered promiscuous mode [ 107.953663][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.953682][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.961540][ T5817] veth1_macvtap: entered promiscuous mode [ 108.043499][ T3644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.043520][ T3644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.097274][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.188299][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.210975][ T3644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.210993][ T3644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.236808][ T5824] veth0_macvtap: entered promiscuous mode [ 108.243772][ T5814] veth0_macvtap: entered promiscuous mode [ 108.262962][ T3554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.283209][ T3554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.295744][ T3554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.297037][ T5814] veth1_macvtap: entered promiscuous mode [ 108.298908][ T3554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.299492][ T5824] veth1_macvtap: entered promiscuous mode [ 108.462882][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.542528][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.572966][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.615966][ T3644] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.628853][ T3644] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.633865][ T3644] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.645988][ T3644] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.650578][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.074319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.254357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.404248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.685386][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.737461][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.783919][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.794548][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.794568][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.844256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.848818][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.849666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.854677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.862276][ T5932] 9pnet_fd: Insufficient options for proto=fd [ 109.998874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.151016][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.151036][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.250122][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.432966][ T5942] Zero length message leads to an empty skb [ 110.443598][ T9] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 110.443650][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 110.443673][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024 [ 110.443695][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.443731][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 110.443750][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.480477][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.480496][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.487794][ T9] usb 4-1: config 0 descriptor?? [ 110.591689][ T9] em28xx 4-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 110.591727][ T9] em28xx 4-1:0.0: DVB interface 0 found: isoc [ 110.673164][ T4912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.673183][ T4912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.736481][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 110.790705][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 110.896630][ T4912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.896650][ T4912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.916093][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 110.916123][ T9] em28xx 4-1:0.0: board has no eeprom [ 111.040558][ T9] em28xx 4-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 111.040597][ T9] em28xx 4-1:0.0: dvb set to isoc mode. [ 111.043483][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.043500][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.110213][ T1237] em28xx 4-1:0.0: Binding DVB extension [ 111.147357][ T9] usb 4-1: USB disconnect, device number 2 [ 111.190971][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 111.514685][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.680721][ T1237] DVB: Unable to find symbol drxk_attach() [ 111.681210][ T1237] em28xx 4-1:0.0: Registering input extension [ 111.693179][ T9] em28xx 4-1:0.0: Closing input extension [ 111.908371][ T9] em28xx 4-1:0.0: Freeing device [ 112.457038][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 112.805516][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 113.974929][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 119.974912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.975086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.975176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.667128][ T991] hid-generic 0000:0005:0009.0001: unknown main item tag 0x0 [ 120.667168][ T991] hid-generic 0000:0005:0009.0001: unknown main item tag 0x0 [ 120.667191][ T991] hid-generic 0000:0005:0009.0001: unknown main item tag 0x0 [ 120.758786][ T991] hid-generic 0000:0005:0009.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 121.045738][ T6062] fido_id[6062]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.344631][ T6074] binder: 6072:6074 ioctl 4018620d 0 returned -22 [ 121.705915][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 122.059114][ T6090] netlink: 'syz.0.73': attribute type 2 has an invalid length. [ 122.318051][ T6098] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 122.446258][ T6098] ip6gretap1: entered allmulticast mode [ 122.470698][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.76'. [ 122.938924][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 124.016160][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 124.064411][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.234334][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 124.240162][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.240192][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.240229][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 124.240249][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.260306][ T9] usb 4-1: config 0 descriptor?? [ 124.460289][ T6146] evm: overlay not supported [ 125.027714][ T9] usb 4-1: string descriptor 0 read error: -71 [ 125.058824][ T9] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 125.059155][ T9] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -32 [ 126.103839][ T9] usb 4-1: USB disconnect, device number 3 [ 128.597324][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.759814][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 128.759842][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 128.759860][ T9] usb 5-1: config 220 has no interface number 2 [ 128.759934][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 128.759958][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 128.759973][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 128.759989][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 128.767487][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 128.767513][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.767531][ T9] usb 5-1: Product: syz [ 128.767543][ T9] usb 5-1: Manufacturer: syz [ 128.767555][ T9] usb 5-1: SerialNumber: syz [ 128.994396][ T993] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.055881][ T9] usb 5-1: selecting invalid altsetting 0 [ 129.063520][ T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 129.063558][ T9] uvcvideo 5-1:220.0: No valid video chain found. [ 129.127857][ T9] usb 5-1: selecting invalid altsetting 0 [ 129.127895][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 129.175474][ T993] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.175533][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.175553][ T993] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.175592][ T993] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 129.175610][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.187185][ T9] usb 5-1: USB disconnect, device number 2 [ 129.251244][ T993] usb 4-1: config 0 descriptor?? [ 129.289229][ T993] em28xx 4-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 129.289261][ T993] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 129.554365][ T993] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 129.623174][ T993] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 129.623203][ T993] em28xx 4-1:0.0: board has no eeprom [ 129.714298][ T993] em28xx 4-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 129.714325][ T993] em28xx 4-1:0.0: dvb set to bulk mode. [ 129.715704][ T991] em28xx 4-1:0.0: Binding DVB extension [ 129.759427][ T993] usb 4-1: USB disconnect, device number 4 [ 129.761248][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.761698][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.761808][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.761908][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.762005][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.762098][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.762192][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.762281][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.763523][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.763624][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.763721][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.763829][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.763924][ T991] em28xx 4-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 129.888914][ T993] em28xx 4-1:0.0: Disconnecting em28xx [ 130.916112][ T991] DVB: Unable to find symbol drxk_attach() [ 130.916467][ T991] em28xx 4-1:0.0: Registering input extension [ 130.922212][ T993] em28xx 4-1:0.0: Closing input extension [ 131.651126][ T993] em28xx 4-1:0.0: Freeing device [ 132.075533][ T6233] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 132.425310][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.574717][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 132.577435][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.577464][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.577501][ T9] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 132.577521][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.594335][ T993] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.648810][ T9] usb 1-1: config 0 descriptor?? [ 132.829867][ T993] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 132.829894][ T993] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 132.829912][ T993] usb 4-1: config 220 has no interface number 2 [ 132.829978][ T993] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 132.830005][ T993] usb 4-1: config 220 interface 0 has no altsetting 0 [ 132.830020][ T993] usb 4-1: config 220 interface 76 has no altsetting 0 [ 132.830036][ T993] usb 4-1: config 220 interface 1 has no altsetting 0 [ 132.877039][ T993] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 132.877067][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.877084][ T993] usb 4-1: Product: syz [ 132.877096][ T993] usb 4-1: Manufacturer: syz [ 132.877108][ T993] usb 4-1: SerialNumber: syz [ 133.218325][ T993] usb 4-1: selecting invalid altsetting 0 [ 133.232494][ T993] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 133.232525][ T993] uvcvideo 4-1:220.0: No valid video chain found. [ 133.278219][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.278311][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.306457][ T993] usb 4-1: selecting invalid altsetting 0 [ 133.309474][ T993] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 133.785348][ T993] usb 4-1: USB disconnect, device number 5 [ 134.166135][ T9] usb 1-1: string descriptor 0 read error: -71 [ 134.217006][ T9] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 134.217087][ T9] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -32 [ 134.283321][ T9] usb 1-1: USB disconnect, device number 2 [ 134.796309][ T6269] netlink: 'syz.3.148': attribute type 2 has an invalid length. [ 135.954322][ T993] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.108635][ T993] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 136.108663][ T993] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 136.108681][ T993] usb 3-1: config 220 has no interface number 2 [ 136.108759][ T993] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 136.108785][ T993] usb 3-1: config 220 interface 0 has no altsetting 0 [ 136.108801][ T993] usb 3-1: config 220 interface 76 has no altsetting 0 [ 136.108817][ T993] usb 3-1: config 220 interface 1 has no altsetting 0 [ 136.113737][ T993] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 136.113766][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.113785][ T993] usb 3-1: Product: syz [ 136.113798][ T993] usb 3-1: Manufacturer: syz [ 136.113811][ T993] usb 3-1: SerialNumber: syz [ 136.505338][ T993] usb 3-1: selecting invalid altsetting 0 [ 136.505777][ T993] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 136.505803][ T993] uvcvideo 3-1:220.0: No valid video chain found. [ 136.552729][ T993] usb 3-1: selecting invalid altsetting 0 [ 136.552766][ T993] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 136.574910][ T993] usb 3-1: USB disconnect, device number 2 [ 137.782719][ T5918] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.976219][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.976276][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.976296][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.976335][ T5918] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 137.976353][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.046492][ T5918] usb 5-1: config 0 descriptor?? [ 138.064759][ T5918] em28xx 5-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 138.064791][ T5918] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 138.337903][ T5918] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 138.400773][ T5918] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 138.400801][ T5918] em28xx 5-1:0.0: board has no eeprom [ 138.484452][ T5918] em28xx 5-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 138.484490][ T5918] em28xx 5-1:0.0: dvb set to bulk mode. [ 138.488305][ T993] em28xx 5-1:0.0: Binding DVB extension [ 138.524581][ T5918] usb 5-1: USB disconnect, device number 3 [ 138.525181][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.525280][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.525362][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.525434][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.525505][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.525587][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.525676][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.525751][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.525830][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.525927][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.526018][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.526089][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.526169][ T993] em28xx 5-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 138.556541][ T5918] em28xx 5-1:0.0: Disconnecting em28xx [ 138.822937][ T993] DVB: Unable to find symbol drxk_attach() [ 138.823330][ T993] em28xx 5-1:0.0: Registering input extension [ 138.823587][ T5918] em28xx 5-1:0.0: Closing input extension [ 138.861831][ T5918] em28xx 5-1:0.0: Freeing device [ 139.564645][ T6361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.190'. [ 141.324853][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.328430][ T5896] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.491041][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.491098][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 141.491119][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.491158][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 141.491178][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.494274][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 141.501059][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.501088][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.501124][ T5896] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 141.501142][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.542669][ T9] usb 2-1: config 0 descriptor?? [ 141.545786][ T6385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.202'. [ 141.563183][ T9] em28xx 2-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 141.563213][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 141.574556][ T5896] usb 5-1: config 0 descriptor?? [ 141.731779][ T6389] binder: 6388:6389 ioctl 4018620d 0 returned -22 [ 141.824893][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 141.945446][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 141.946603][ T9] em28xx 2-1:0.0: board has no eeprom [ 142.134247][ T9] em28xx 2-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 142.134275][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 142.170242][ T9] usb 2-1: USB disconnect, device number 2 [ 142.177781][ T5895] em28xx 2-1:0.0: Binding DVB extension [ 142.200059][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 142.257301][ T5896] usb 5-1: string descriptor 0 read error: -71 [ 142.287908][ T5896] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 142.288009][ T5896] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -32 [ 142.332101][ T5896] usb 5-1: USB disconnect, device number 4 [ 142.468464][ T5895] DVB: Unable to find symbol drxk_attach() [ 142.468964][ T5895] em28xx 2-1:0.0: Registering input extension [ 142.473264][ T9] em28xx 2-1:0.0: Closing input extension [ 142.764546][ T9] em28xx 2-1:0.0: Freeing device [ 145.818349][ T6430] binder: 6429:6430 ioctl 4018620d 0 returned -22 [ 145.831895][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.221'. [ 145.855004][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.221'. [ 148.939346][ T6457] netlink: 'syz.0.232': attribute type 2 has an invalid length. [ 149.350501][ T6465] binder: 6464:6465 ioctl 4018620d 0 returned -22 [ 150.774620][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.929635][ T9] usb 1-1: config 0 has an invalid descriptor of length 165, skipping remainder of the config [ 150.929691][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.929730][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 150.929749][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.940026][ T9] usb 1-1: config 0 descriptor?? [ 150.996719][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 153.653645][ T9] usb 1-1: USB disconnect, device number 3 [ 154.454313][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.606186][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 154.609057][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.609088][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.609147][ T9] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 154.609168][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.625888][ T9] usb 5-1: config 0 descriptor?? [ 155.075207][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 155.075330][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 155.094763][ T9] usb 5-1: USB disconnect, device number 5 [ 156.480586][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.285'. [ 156.604336][ T5918] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.775929][ T5918] usb 4-1: config 0 has an invalid descriptor of length 165, skipping remainder of the config [ 156.777468][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.777514][ T5918] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 156.777535][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.830602][ T5918] usb 4-1: config 0 descriptor?? [ 156.859233][ T5918] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 159.486728][ T1237] usb 4-1: USB disconnect, device number 6 [ 163.114481][ T1237] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.214394][ T5918] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.264381][ T1237] usb 5-1: Using ep0 maxpacket: 16 [ 163.268742][ T1237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.268771][ T1237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.268806][ T1237] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 163.268825][ T1237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.330092][ T1237] usb 5-1: config 0 descriptor?? [ 163.396508][ T5918] usb 2-1: config 0 has an invalid descriptor of length 165, skipping remainder of the config [ 163.396576][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.396611][ T5918] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 163.396629][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.448456][ T5918] usb 2-1: config 0 descriptor?? [ 163.461832][ T5918] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 163.754591][ T1237] usbhid 5-1:0.0: can't add hid device: -71 [ 163.754718][ T1237] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 163.776662][ T1237] usb 5-1: USB disconnect, device number 6 [ 165.368341][ T1237] hid-generic 0000:0005:0009.0005: unknown main item tag 0x0 [ 165.368365][ T1237] hid-generic 0000:0005:0009.0005: unknown main item tag 0x0 [ 165.368380][ T1237] hid-generic 0000:0005:0009.0005: unknown main item tag 0x0 [ 165.451999][ T1237] hid-generic 0000:0005:0009.0005: hidraw0: HID v0.02 Device [syz0] on syz1 [ 165.556078][ T6658] tap0: tun_chr_ioctl cmd 35108 [ 166.059746][ T1237] usb 2-1: USB disconnect, device number 3 [ 166.255889][ T6661] fido_id[6661]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 167.424529][ T6671] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 167.603593][ T6671] bond1: entered promiscuous mode [ 167.603621][ T6671] bond1: entered allmulticast mode [ 167.648888][ T6677] ip6gretap1: entered allmulticast mode [ 167.661906][ T6677] bond1: (slave ip6gretap1): making interface the new active one [ 167.661940][ T6677] ip6gretap1: entered promiscuous mode [ 167.673622][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.328'. [ 167.686850][ T6677] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 168.005578][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'. [ 168.802926][ T6714] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 168.900730][ T6714] bond1: entered promiscuous mode [ 168.900755][ T6714] bond1: entered allmulticast mode [ 168.920370][ T6719] ip6gretap1: entered allmulticast mode [ 168.932873][ T6719] bond1: (slave ip6gretap1): making interface the new active one [ 168.932895][ T6719] ip6gretap1: entered promiscuous mode [ 168.934964][ T6719] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 168.942203][ T6714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.346'. [ 170.325466][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'. [ 170.424354][ T5875] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 170.584457][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 170.588606][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.588636][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.588672][ T5875] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 170.588692][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.823387][ T5875] usb 2-1: config 0 descriptor?? [ 171.855905][ T5875] usbhid 2-1:0.0: can't add hid device: -71 [ 171.856037][ T5875] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 171.892350][ T5875] usb 2-1: USB disconnect, device number 4 [ 174.792030][ T993] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 175.734738][ T993] usb 3-1: Using ep0 maxpacket: 32 [ 175.737538][ T993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.737561][ T993] usb 3-1: config 0 has no interfaces? [ 175.768958][ T993] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 175.768985][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.769003][ T993] usb 3-1: Product: syz [ 175.769015][ T993] usb 3-1: Manufacturer: syz [ 175.769027][ T993] usb 3-1: SerialNumber: syz [ 175.816256][ T993] usb 3-1: config 0 descriptor?? [ 176.564422][ T5875] usb 3-1: USB disconnect, device number 3 [ 180.546043][ T6881] netlink: 'syz.4.418': attribute type 2 has an invalid length. [ 182.406038][ T6911] binder: 6907:6911 ioctl 4018620d 0 returned -22 [ 183.125684][ T6928] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 183.690853][ T5895] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.062380][ T6928] bond1 (unregistering): Released all slaves [ 184.144350][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 184.146619][ T5895] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.146645][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.146665][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.146684][ T5895] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.146721][ T5895] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.146741][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.480339][ T5895] usb 4-1: GET_CAPABILITIES returned 0 [ 184.480389][ T5895] usbtmc 4-1:16.0: can't read capabilities [ 185.257670][ T5875] usb 4-1: USB disconnect, device number 7 [ 187.391498][ T6982] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 188.155274][ T6992] sd 0:0:1:0: device reset [ 188.330612][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 190.564442][ T5895] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 190.714398][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 190.849138][ T7030] sd 0:0:1:0: device reset [ 191.579957][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.579985][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.580006][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.580025][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.580062][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.580079][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.738213][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 191.840292][ T5895] usb 5-1: GET_CAPABILITIES returned 0 [ 191.840339][ T5895] usbtmc 5-1:16.0: can't read capabilities [ 191.873715][ T7041] netlink: 'syz.1.473': attribute type 1 has an invalid length. [ 192.047773][ T5895] usb 5-1: USB disconnect, device number 7 [ 194.605403][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.605476][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.951024][ T31] hid-generic 0000:0005:0009.0006: unknown main item tag 0x0 [ 194.951058][ T31] hid-generic 0000:0005:0009.0006: unknown main item tag 0x0 [ 194.951078][ T31] hid-generic 0000:0005:0009.0006: unknown main item tag 0x0 [ 195.035773][ T31] hid-generic 0000:0005:0009.0006: hidraw0: HID v0.02 Device [syz0] on syz1 [ 195.337558][ T7072] fido_id[7072]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 197.807021][ T993] hid-generic 0000:0005:0009.0007: unknown main item tag 0x0 [ 197.807056][ T993] hid-generic 0000:0005:0009.0007: unknown main item tag 0x0 [ 197.807081][ T993] hid-generic 0000:0005:0009.0007: unknown main item tag 0x0 [ 197.824356][ T5924] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 197.849536][ T993] hid-generic 0000:0005:0009.0007: hidraw0: HID v0.02 Device [syz0] on syz1 [ 197.976852][ T5924] usb 2-1: config 0 has an invalid descriptor of length 165, skipping remainder of the config [ 197.976908][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.976946][ T5924] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 197.976966][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.982403][ T5924] usb 2-1: config 0 descriptor?? [ 198.057348][ T5924] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 198.092570][ T7105] fido_id[7105]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 198.519191][ T5882] usb 2-1: USB disconnect, device number 5 [ 201.894457][ T5875] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 202.056865][ T5875] usb 2-1: config 0 has an invalid descriptor of length 165, skipping remainder of the config [ 202.056923][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.056963][ T5875] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 202.056983][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.062618][ T5875] usb 2-1: config 0 descriptor?? [ 202.099192][ T5875] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 202.576848][ T5875] usb 2-1: USB disconnect, device number 6 [ 205.225972][ T7177] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 205.343556][ T7177] bond1: entered promiscuous mode [ 205.343580][ T7177] bond1: entered allmulticast mode [ 205.404079][ T7182] ip6gretap1: entered allmulticast mode [ 205.467596][ T7182] bond1: (slave ip6gretap1): making interface the new active one [ 205.467624][ T7182] ip6gretap1: entered promiscuous mode [ 205.476546][ T7182] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 205.494388][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 205.650253][ T9] usb 2-1: config index 0 descriptor too short (expected 24929, got 36) [ 205.650280][ T9] usb 2-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 205.650297][ T9] usb 2-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 205.650314][ T9] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 205.650348][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 205.650367][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.754347][ T5918] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 205.912496][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 205.915353][ T5918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.915378][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.915400][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.915420][ T5918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.915457][ T5918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.915476][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.223863][ T9] usb 2-1: string descriptor 0 read error: -71 [ 206.234375][ T9] usb 2-1: USB disconnect, device number 7 [ 207.103121][ T5918] usb 4-1: GET_CAPABILITIES returned 0 [ 207.103171][ T5918] usbtmc 4-1:16.0: can't read capabilities [ 207.358975][ T5918] usb 4-1: USB disconnect, device number 8 [ 207.359160][ T7205] netlink: 'syz.1.539': attribute type 2 has an invalid length. [ 209.674473][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 209.824356][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 209.827142][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.831771][ T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 209.831797][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.831814][ T9] usb 4-1: Product: syz [ 209.831826][ T9] usb 4-1: Manufacturer: syz [ 209.831838][ T9] usb 4-1: SerialNumber: syz [ 210.515218][ T9] usb 4-1: config 0 descriptor?? [ 210.738191][ T5882] usb 4-1: USB disconnect, device number 9 [ 210.916232][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 211.706184][ T9] usb 1-1: config index 0 descriptor too short (expected 24929, got 36) [ 211.706211][ T9] usb 1-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 211.706229][ T9] usb 1-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 211.706245][ T9] usb 1-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 211.706280][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 211.706299][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.975925][ T9] usb 1-1: string descriptor 0 read error: -71 [ 211.981962][ T9] usb 1-1: USB disconnect, device number 4 [ 212.294329][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 212.361147][ T7261] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 212.448271][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 212.450996][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.451021][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.451043][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.451063][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.451100][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.451119][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.700346][ T31] usb 3-1: GET_CAPABILITIES returned 0 [ 212.700394][ T31] usbtmc 3-1:16.0: can't read capabilities [ 213.594041][ T31] usb 3-1: USB disconnect, device number 4 [ 213.708659][ T7279] binder: 7278:7279 ioctl 4018620d 0 returned -22 [ 213.852033][ T7281] netlink: 'syz.3.571': attribute type 2 has an invalid length. [ 216.043290][ T7326] binder: 7325:7326 ioctl 4018620d 0 returned -22 [ 216.074342][ T5875] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 216.224287][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 216.227172][ T5875] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.227198][ T5875] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.227219][ T5875] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.227241][ T5875] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.227280][ T5875] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.227299][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.441731][ T5875] usb 1-1: GET_CAPABILITIES returned 0 [ 216.441779][ T5875] usbtmc 1-1:16.0: can't read capabilities [ 216.649181][ T5924] usb 1-1: USB disconnect, device number 5 [ 219.245903][ T7371] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 219.688453][ T7376] fuseblk: Bad value for 'fd' [ 220.174513][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 220.339396][ T31] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 220.339438][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 97: 97, using maximum allowed: 30 [ 220.339476][ T31] usb 4-1: config 0 interface 0 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 220.339500][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.339539][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 220.339559][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.544498][ T31] usb 4-1: config 0 descriptor?? [ 221.287382][ T31] usb 4-1: string descriptor 0 read error: -71 [ 221.325080][ T31] usb 4-1: USB disconnect, device number 10 [ 222.233917][ T5122] Bluetooth: hci3: command 0x0406 tx timeout [ 222.240064][ T5122] Bluetooth: hci4: command 0x0406 tx timeout [ 222.257468][ T5122] Bluetooth: hci0: command 0x0406 tx timeout [ 222.259668][ T5122] Bluetooth: hci2: command 0x0406 tx timeout [ 222.260405][ T5122] Bluetooth: hci1: command 0x0406 tx timeout [ 222.791431][ T5924] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 222.959521][ T5924] usb 3-1: config 0 has an invalid descriptor of length 165, skipping remainder of the config [ 222.959580][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.959621][ T5924] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 222.959643][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.008962][ T5924] usb 3-1: config 0 descriptor?? [ 223.063671][ T5924] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 223.159370][ T7412] sd 0:0:1:0: device reset [ 227.504683][ T5924] usb 3-1: USB disconnect, device number 5 [ 227.945671][ T7470] fuseblk: Bad value for 'fd' [ 229.154295][ T5924] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 229.318121][ T5924] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 229.318148][ T5924] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 229.318165][ T5924] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 229.318183][ T5924] usb 5-1: config 220 has no interface number 1 [ 229.318228][ T5924] usb 5-1: config 220 interface 0 has no altsetting 0 [ 229.318244][ T5924] usb 5-1: config 220 interface 76 has no altsetting 0 [ 229.323787][ T5924] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 229.323812][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.323829][ T5924] usb 5-1: Product: syz [ 229.323841][ T5924] usb 5-1: Manufacturer: syz [ 229.323852][ T5924] usb 5-1: SerialNumber: syz [ 229.643043][ T5924] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 229.643075][ T5924] uvcvideo 5-1:220.0: No valid video chain found. [ 229.684763][ T5924] usb 5-1: USB disconnect, device number 8 [ 230.084347][ T5875] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 230.254878][ T7501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.664'. [ 230.256614][ T5875] usb 1-1: config 0 has an invalid descriptor of length 165, skipping remainder of the config [ 230.256672][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.256712][ T5875] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 230.256731][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.262208][ T5875] usb 1-1: config 0 descriptor?? [ 230.269685][ T5875] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 234.655829][ T5895] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 234.733159][ T31] usb 1-1: USB disconnect, device number 6 [ 235.004286][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 235.021843][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.021874][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.021911][ T5895] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 235.021930][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.773079][ T5895] usb 5-1: config 0 descriptor?? [ 236.584512][ T5895] usbhid 5-1:0.0: can't add hid device: -71 [ 236.586224][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 236.938750][ T5895] usb 5-1: USB disconnect, device number 9 [ 240.054382][ T993] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 240.236786][ T993] usb 1-1: config 0 has an invalid descriptor of length 165, skipping remainder of the config [ 240.236844][ T993] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.236888][ T993] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 240.236908][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.267176][ T993] usb 1-1: config 0 descriptor?? [ 240.275781][ T993] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 241.791799][ T5821] Bluetooth: hci2: connection err: -111 [ 244.936619][ T5924] usb 1-1: USB disconnect, device number 7 [ 255.973515][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.973685][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.974918][ T993] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 263.640638][ T993] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 263.640673][ T993] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 263.640691][ T993] usb 3-1: config 220 has no interface number 2 [ 263.640772][ T993] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 263.640793][ T993] usb 3-1: config 220 interface 0 has no altsetting 0 [ 263.640808][ T993] usb 3-1: config 220 interface 76 has no altsetting 0 [ 263.640821][ T993] usb 3-1: config 220 interface 1 has no altsetting 0 [ 263.868425][ T993] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 263.868453][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.868468][ T993] usb 3-1: Product: syz [ 263.868480][ T993] usb 3-1: Manufacturer: syz [ 263.868491][ T993] usb 3-1: SerialNumber: syz [ 264.166838][ T993] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 264.166872][ T993] uvcvideo 3-1:220.0: No valid video chain found. [ 264.217400][ T993] usb 3-1: USB disconnect, device number 6 [ 264.461120][ T7796] fuseblk: Bad value for 'fd' [ 266.582631][ T7822] program syz.2.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.116194][ T7830] binder: 7829:7830 ioctl 4018620d 0 returned -22 [ 270.939396][ T7856] program syz.1.800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.434689][ T7905] No control pipe specified [ 274.773041][ T7931] program syz.1.833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.962024][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 274.962052][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 275.149662][ T7941] No control pipe specified [ 276.055466][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.851'. [ 276.055490][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.851'. [ 276.147664][ T7962] bond5 (unregistering): Released all slaves [ 276.826582][ T7980] syz.1.856 (7980) used greatest stack depth: 18568 bytes left [ 276.956078][ T7982] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 277.094893][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.859'. [ 277.164086][ T7982] bond5: entered promiscuous mode [ 277.164110][ T7982] bond5: entered allmulticast mode [ 279.845468][ T8042] netlink: 'syz.2.873': attribute type 1 has an invalid length. [ 279.946305][ T8042] bond2: entered promiscuous mode [ 279.946335][ T8042] bond2: entered allmulticast mode [ 279.980508][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.873'. [ 280.856743][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'. [ 280.856767][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'. [ 282.312125][ T8074] netlink: 'syz.2.897': attribute type 1 has an invalid length. [ 282.492950][ T8074] bond3: entered promiscuous mode [ 282.492975][ T8074] bond3: entered allmulticast mode [ 282.514085][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.897'. [ 283.632076][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 284.946880][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 284.946903][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 290.363195][ T8151] tty tty29: ldisc open failed (-12), clearing slot 28 [ 290.608469][ T8160] bond6 (unregistering): Released all slaves [ 291.735020][ T8180] program syz.2.939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.338237][ T8201] syz_tun: entered allmulticast mode [ 295.555269][ T8219] program syz.3.952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.385346][ T8256] program syz.2.966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.346222][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'. [ 301.505019][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.977'. [ 301.693892][ T8281] bond2 (unregistering): Released all slaves [ 301.904425][ T1237] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 302.054362][ T1237] usb 4-1: Using ep0 maxpacket: 8 [ 302.057245][ T1237] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 302.057277][ T1237] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.057299][ T1237] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.057310][ T1237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.158070][ T1237] usbtmc 4-1:16.0: bulk endpoints not found [ 303.350496][ T8303] sd 0:0:1:0: device reset [ 304.171945][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.989'. [ 304.706632][ T1237] usb 4-1: USB disconnect, device number 11 [ 306.513278][ T8349] program syz.0.1006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.538397][ T8382] sd 0:0:1:0: device reset [ 309.651013][ T8381] fuseblk: Bad value for 'fd' [ 309.991336][ T8390] netlink: 'syz.4.1023': attribute type 1 has an invalid length. [ 310.001235][ T8390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1023'. [ 310.322824][ T8393] program syz.4.1024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.405960][ T8419] fuseblk: Bad value for 'fd' [ 313.607037][ T8425] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 313.607381][ T8425] ip6gretap2: entered allmulticast mode [ 313.900758][ T8429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1034'. [ 317.410109][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.410180][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.245139][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 318.278577][ T8466] sd 0:0:1:0: device reset [ 318.601044][ T31] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 318.601073][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.601090][ T31] usb 1-1: Product: syz [ 318.601102][ T31] usb 1-1: Manufacturer: syz [ 318.601114][ T31] usb 1-1: SerialNumber: syz [ 318.739918][ T8471] syz_tun: entered allmulticast mode [ 318.966272][ T31] rtl8150 1-1:1.0: couldn't reset the device [ 318.966916][ T31] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 319.056183][ T31] usb 1-1: USB disconnect, device number 8 [ 321.184338][ T1237] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 321.346732][ T1237] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 321.346758][ T1237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.376397][ T1237] usb 4-1: config 0 descriptor?? [ 321.384165][ T1237] cp210x 4-1:0.0: cp210x converter detected [ 322.030695][ T1237] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 322.068107][ T1237] usb 4-1: cp210x converter now attached to ttyUSB0 [ 322.667403][ T5875] usb 4-1: USB disconnect, device number 12 [ 322.916133][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 323.906104][ T5875] cp210x 4-1:0.0: device disconnected [ 324.333665][ T8539] syz_tun: entered allmulticast mode [ 325.152572][ T5821] Bluetooth: hci4: connection err: -111 [ 325.417876][ T8547] sd 0:0:1:0: device reset [ 327.806521][ T8574] syz.2.1091 (8574) used greatest stack depth: 17800 bytes left [ 328.316443][ T5821] Bluetooth: hci3: connection err: -111 [ 332.083107][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.610725][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.822168][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.616424][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.464492][ T991] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 334.507310][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.105663][ T991] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 335.105693][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.105711][ T991] usb 2-1: Product: syz [ 335.105725][ T991] usb 2-1: Manufacturer: syz [ 335.105738][ T991] usb 2-1: SerialNumber: syz [ 335.251238][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.761774][ T991] rtl8150 2-1:1.0: couldn't reset the device [ 335.762157][ T991] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 335.833881][ T991] usb 2-1: USB disconnect, device number 8 [ 335.997826][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.391237][ T8685] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 336.391583][ T8685] ip6gretap2: entered allmulticast mode [ 336.448288][ T8686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1135'. [ 337.964779][ T9] BUG: unable to handle page fault for address: ffffc9000ef9b010 [ 337.964794][ T9] #PF: supervisor read access in kernel mode [ 337.964802][ T9] #PF: error_code(0x0000) - not-present page [ 337.964811][ T9] PGD 13ff9a067 P4D 13ff9a067 PUD 19acb067 PMD 32335067 PTE 0 [ 337.964853][ T9] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 337.964887][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.964904][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.964912][ T9] Workqueue: usb_hub_wq hub_event [ 337.964946][ T9] RIP: 0010:kcov_remote_start+0x2a2/0x6f0 [ 337.964969][ T9] Code: f9 8c 4c 8b b8 b0 1b a3 91 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 db 5f 8d 4d 8b 3f 49 81 ff 00 db 5f 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 e0 f9 c3 02 84 c0 74 0e 49 8b 07 49 [ 337.964983][ T9] RSP: 0018:ffffc900000e7748 EFLAGS: 00010287 [ 337.964996][ T9] RAX: 0000000000000000 RBX: ffff88801b2e8000 RCX: 0000000000000000 [ 337.965008][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8b3ddf80 [ 337.965018][ T9] RBP: 0000000000100000 R08: 0000000000000000 R09: ffffffff8ac2db41 [ 337.965029][ T9] R10: dffffc0000000000 R11: fffffbfff1dac80f R12: 0000000000000002 [ 337.965041][ T9] R13: 0000000000000001 R14: ffff888027584000 R15: ffffc9000ef9b000 [ 337.965052][ T9] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 337.965066][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.965077][ T9] CR2: ffffc9000ef9b010 CR3: 000000003620c000 CR4: 00000000003526f0 [ 337.965092][ T9] Call Trace: [ 337.965098][ T9] [ 337.965107][ T9] hub_event+0x158/0x4a20 [ 337.965126][ T9] ? __lock_acquire+0xab9/0xd20 [ 337.965154][ T9] ? do_raw_spin_lock+0x121/0x290 [ 337.965171][ T9] ? look_up_lock_class+0x74/0x170 [ 337.965193][ T9] ? register_lock_class+0x51/0x320 [ 337.965214][ T9] ? __lock_acquire+0xab9/0xd20 [ 337.965234][ T9] ? __pfx_hub_event+0x10/0x10 [ 337.965251][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 337.965272][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.965294][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 337.965311][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 337.965329][ T9] process_scheduled_works+0xae1/0x17b0 [ 337.965358][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.965382][ T9] worker_thread+0x8a0/0xda0 [ 337.965410][ T9] kthread+0x711/0x8a0 [ 337.965431][ T9] ? __pfx_worker_thread+0x10/0x10 [ 337.965449][ T9] ? __pfx_kthread+0x10/0x10 [ 337.965468][ T9] ? rt_spin_unlock+0x150/0x200 [ 337.965486][ T9] ? rt_spin_unlock+0x161/0x200 [ 337.965502][ T9] ? __pfx_kthread+0x10/0x10 [ 337.965523][ T9] ret_from_fork+0x4bc/0x870 [ 337.965541][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 337.965561][ T9] ? __switch_to_asm+0x39/0x70 [ 337.965577][ T9] ? __switch_to_asm+0x33/0x70 [ 337.965591][ T9] ? __pfx_kthread+0x10/0x10 [ 337.965611][ T9] ret_from_fork_asm+0x1a/0x30 [ 337.965633][ T9] [ 337.965644][ T9] Modules linked in: [ 337.965654][ T9] CR2: ffffc9000ef9b010 [ 337.965667][ T9] ---[ end trace 0000000000000000 ]--- [ 337.965678][ T9] RIP: 0010:kcov_remote_start+0x2a2/0x6f0 [ 337.965695][ T9] Code: f9 8c 4c 8b b8 b0 1b a3 91 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 db 5f 8d 4d 8b 3f 49 81 ff 00 db 5f 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 e0 f9 c3 02 84 c0 74 0e 49 8b 07 49 [ 337.965708][ T9] RSP: 0018:ffffc900000e7748 EFLAGS: 00010287 [ 337.965721][ T9] RAX: 0000000000000000 RBX: ffff88801b2e8000 RCX: 0000000000000000 [ 337.965731][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8b3ddf80 [ 337.965742][ T9] RBP: 0000000000100000 R08: 0000000000000000 R09: ffffffff8ac2db41 [ 337.965752][ T9] R10: dffffc0000000000 R11: fffffbfff1dac80f R12: 0000000000000002 [ 337.965764][ T9] R13: 0000000000000001 R14: ffff888027584000 R15: ffffc9000ef9b000 [ 337.965775][ T9] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 337.965788][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.965800][ T9] CR2: ffffc9000ef9b010 CR3: 000000003620c000 CR4: 00000000003526f0 [ 337.965820][ T9] Kernel panic - not syncing: Fatal exception [ 337.966138][ T9] Kernel Offset: disabled