last executing test programs: 7m36.651749955s ago: executing program 32 (id=1250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x534, 0x14000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) 6m37.259627705s ago: executing program 33 (id=1374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) utime(0x0, 0xfffffffffffffffc) sendto$inet6(r4, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) 4m47.313551469s ago: executing program 2 (id=1815): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) 4m42.738002405s ago: executing program 2 (id=1826): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r1=>0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x6900, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m42.063590028s ago: executing program 2 (id=1830): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5}, {0x6}]}) 4m40.901703207s ago: executing program 2 (id=1834): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4m39.665569956s ago: executing program 2 (id=1842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 4m38.897797214s ago: executing program 2 (id=1844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 4m23.01725121s ago: executing program 34 (id=1844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 4m18.691513948s ago: executing program 6 (id=1914): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 4m17.945882568s ago: executing program 6 (id=1916): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80a02, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x34, r7, 0x1, 0x0, 0x0, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x6c, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x7}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8828}, 0x20040051) r8 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x20480) r9 = socket(0x2a, 0x2, 0x0) sendto(r9, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r8, r9) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 4m14.104319726s ago: executing program 6 (id=1921): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 4m13.370684099s ago: executing program 6 (id=1925): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 4m12.633359971s ago: executing program 6 (id=1929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x0, 0x2000000}) 4m8.502443432s ago: executing program 6 (id=1932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x802442, 0x0) clock_adjtime(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FICLONE(r4, 0x40049409, r4) syz_open_dev$sndctrl(0x0, 0x6, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x48}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000380)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, &(0x7f0000000400)="fa5d2617d5ef1ba08433aabed6bf2c39777c522ab905f6cc832f79b95d30d2ed683683003b0ebaf0bc1b53cb98e7c27516fe083d3e245f142a02eae65673dad1abacc2393bd1ea82f2366985bb662d519cc6c9538c01bacff648035551d209743faab46e36f25bec5eae512fcbf05698ba96529bc3c8d9c47c4e3b73361d3c6ac8b6c9ba41e5ab8d666d27ce035cdbf62a4cc6645915f911b7c014f7272e4825d7d3beffa08a421c"}) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x2284, &(0x7f0000000000)) 3m52.951326943s ago: executing program 35 (id=1932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x802442, 0x0) clock_adjtime(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FICLONE(r4, 0x40049409, r4) syz_open_dev$sndctrl(0x0, 0x6, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x48}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000380)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, &(0x7f0000000400)="fa5d2617d5ef1ba08433aabed6bf2c39777c522ab905f6cc832f79b95d30d2ed683683003b0ebaf0bc1b53cb98e7c27516fe083d3e245f142a02eae65673dad1abacc2393bd1ea82f2366985bb662d519cc6c9538c01bacff648035551d209743faab46e36f25bec5eae512fcbf05698ba96529bc3c8d9c47c4e3b73361d3c6ac8b6c9ba41e5ab8d666d27ce035cdbf62a4cc6645915f911b7c014f7272e4825d7d3beffa08a421c"}) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x2284, &(0x7f0000000000)) 3m5.945939547s ago: executing program 7 (id=2039): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCXONC(r6, 0x4b3a, 0x2) 3m3.614514796s ago: executing program 7 (id=2044): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x167, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001340)=ANY=[], 0xa89) sendto(r0, &(0x7f0000000640)='+', 0x1, 0x1, 0x0, 0x0) 3m2.346114887s ago: executing program 7 (id=2046): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4ec13", 0xeb}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1b, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {}, {}, [@call, @map_val, @ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m1.40737463s ago: executing program 7 (id=2048): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getdents64(r2, 0x0, 0x0) 3m0.793259546s ago: executing program 7 (id=2051): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000101401002cbd7900fedbdf2508004c0000000000080001000000000008004b0013000000080003000100000008004a"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 3m0.311714216s ago: executing program 7 (id=2053): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCXONC(r5, 0x4b3a, 0x2) 2m45.995628322s ago: executing program 8 (id=2094): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 2m44.582324664s ago: executing program 36 (id=2053): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCXONC(r5, 0x4b3a, 0x2) 2m44.492124055s ago: executing program 8 (id=2097): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 2m42.97880326s ago: executing program 8 (id=2101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 2m39.705888988s ago: executing program 8 (id=2105): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r2, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x20000002, 0x100000) 2m38.582222697s ago: executing program 8 (id=2110): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m35.285427923s ago: executing program 8 (id=2114): pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000070000008500000007"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000232000/0x2000)=nil, 0x2000}}) 2m19.949567616s ago: executing program 37 (id=2114): pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000070000008500000007"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000232000/0x2000)=nil, 0x2000}}) 1m18.709949741s ago: executing program 3 (id=2261): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x3}}, 0x10) 1m18.135016164s ago: executing program 3 (id=2264): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) dup3(r1, r2, 0x0) 1m17.299199012s ago: executing program 3 (id=2269): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff85000000040000", @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) eventfd(0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0x14}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m13.282839622s ago: executing program 3 (id=2274): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) 1m7.464428695s ago: executing program 3 (id=2281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0xf}}], 0x1, 0x0) 1m6.389954344s ago: executing program 3 (id=2285): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x11, 0x3, 0x0) r2 = syz_io_uring_setup(0x18cc, &(0x7f00000004c0)={0x0, 0x932c, 0x80}, &(0x7f0000000240)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa145}}) io_uring_enter(r2, 0x47f6, 0x880e, 0x0, 0x0, 0x0) 50.975096088s ago: executing program 38 (id=2285): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x11, 0x3, 0x0) r2 = syz_io_uring_setup(0x18cc, &(0x7f00000004c0)={0x0, 0x932c, 0x80}, &(0x7f0000000240)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa145}}) io_uring_enter(r2, 0x47f6, 0x880e, 0x0, 0x0, 0x0) 10.698374884s ago: executing program 9 (id=2412): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x54, 0x81, 0x11, 0x8, 0x423, 0xa, 0x8c8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x30, 0xe, [{{0x9, 0x4, 0xba, 0x1, 0x0, 0x39, 0x25, 0x40, 0x8}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001ec0)={0x24, 0x0, &(0x7f0000001e00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000002500)={0x2c, 0x0, &(0x7f00000022c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xf8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xa0, 0x3, "8549cda9799b74798c9d391c84f745cc8dc12894312057f541ce75a73f28dc874245bcea53f57c8bf1d0289d7fe0977244e27b936f8d6ebb842f438933822f0e86d8ac2efac2122799f08ff218541b576a455dbec88b6bf68b1f0b2dd4c0110fbcd49c76983a77ddd641707483a22e7a8695a1dd4cad9ecdf66ffd20eaee7b2918584fbe06478e5f04f34e354ec0c89aa64458ddfc2e57eef57b9dd2"}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x30, 0x0, 0x0, {0x2}}}, 0x16c}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_ethernet(0x64, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x2e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0xfffffffd, [{0x0, 0x3, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23"}]}}}}}}, 0x0) 10.375106697s ago: executing program 1 (id=2414): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 9.444219347s ago: executing program 1 (id=2417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404f045db6000000000001090224000100000000090400000103000000092100000001221e0009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00221e00000007c28f1958a2d198a60e4da2"], 0x0}, 0x0) 9.422987894s ago: executing program 5 (id=2418): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x61, 0x30]}}, 0x0, 0x47, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) 8.947376514s ago: executing program 5 (id=2420): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x40488c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="311c", 0x2}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 8.899745019s ago: executing program 4 (id=2421): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x2f, 0x10, 0x3c, &(0x7f0000000580)="0000ffffffffa000", &(0x7f0000000540)=""/23, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.305839296s ago: executing program 4 (id=2422): syz_usb_connect(0x2, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000006693010820505008800000203010902", @ANYRES8], 0x0) 7.49716972s ago: executing program 5 (id=2423): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x30}}], 0x1, 0x0) 7.028908576s ago: executing program 5 (id=2425): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10) socket$kcm(0xa, 0x1, 0x106) 6.959929827s ago: executing program 9 (id=2426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x6e02, 0x0, 0x0, 0x40f00, 0x77, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2a6d2, r0, 0x0, 0x0, 0x0, 0x10, 0x429, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b08d25a806f8c6394f90524fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x6000}, 0x0) 6.527009802s ago: executing program 5 (id=2427): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 6.442294848s ago: executing program 4 (id=2428): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$ppp(0xffffffffffffffff, &(0x7f0000000500), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00', @ANYBLOB="010027bd00000000df", @ANYRES32, @ANYBLOB="08009f000000000008005700fe000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40811}, 0x4042090) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) shutdown(r3, 0x2) 6.312128162s ago: executing program 9 (id=2430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0) 5.805212749s ago: executing program 1 (id=2431): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, <r1=>0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r1}]}, 0x1c}}, 0x0) 4.765633084s ago: executing program 0 (id=2432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000b00), &(0x7f00000000c0)=""/102}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 4.737983679s ago: executing program 1 (id=2433): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x2c0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x1}, 0x2001) 4.426109837s ago: executing program 5 (id=2434): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.338208407s ago: executing program 9 (id=2435): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x30}}], 0x1, 0x0) 4.270683159s ago: executing program 1 (id=2436): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x54, 0x81, 0x11, 0x8, 0x423, 0xa, 0x8c8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x30, 0xe, [{{0x9, 0x4, 0xba, 0x1, 0x0, 0x39, 0x25, 0x40, 0x8}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001ec0)={0x24, 0x0, &(0x7f0000001e00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000002500)={0x2c, 0x0, &(0x7f00000022c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xf8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xa0, 0x3, "8549cda9799b74798c9d391c84f745cc8dc12894312057f541ce75a73f28dc874245bcea53f57c8bf1d0289d7fe0977244e27b936f8d6ebb842f438933822f0e86d8ac2efac2122799f08ff218541b576a455dbec88b6bf68b1f0b2dd4c0110fbcd49c76983a77ddd641707483a22e7a8695a1dd4cad9ecdf66ffd20eaee7b2918584fbe06478e5f04f34e354ec0c89aa64458ddfc2e57eef57b9dd2"}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x30, 0x0, 0x0, {0x2}}}, 0x16c}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_ethernet(0x64, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x2e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0xfffffffd, [{0x0, 0x3, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23"}]}}}}}}, 0x0) 2.517269939s ago: executing program 0 (id=2437): socket$kcm(0xa, 0x1, 0x106) 2.496066708s ago: executing program 9 (id=2438): syz_usb_connect(0x2, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000066930108205050088000002030109021b000100000000090402", @ANYRES8], 0x0) 2.479771322s ago: executing program 4 (id=2439): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.729627913s ago: executing program 0 (id=2440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10) 1.4647341s ago: executing program 1 (id=2441): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404f045db6000000000001090224000100000000090400000103000000092100000001221e00090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00221e00000007c28f1958a2d198a60e4da2"], 0x0}, 0x0) 1.293835541s ago: executing program 4 (id=2442): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x4004880) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c9dd58b4", 0x4}], 0x1}, 0x8000) 1.116557567s ago: executing program 0 (id=2443): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, <r1=>0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r1}]}, 0x1c}}, 0x0) 771.959551ms ago: executing program 0 (id=2444): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 469.444215ms ago: executing program 0 (id=2445): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) write$cgroup_int(r0, &(0x7f0000000240)=0x5e, 0x12) 269.667189ms ago: executing program 9 (id=2446): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000880)="b90103600057f008009e0ff008001f8e9e7e031d7d", 0x0, 0x102, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=2447): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="1c000000180081054e81f782db4cb904021d080406037c09e8fe55a1", 0x1c}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) kernel console output (not intermixed with test programs): 820599][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.926565][ T3586] bridge_slave_0: left allmulticast mode [ 652.932954][ T3586] bridge_slave_0: left promiscuous mode [ 652.939679][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.811491][ T9396] Bluetooth: hci3: command tx timeout [ 654.425467][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.453686][ T3586] bond0 (unregistering): Released all slaves [ 654.480039][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.488951][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.521913][ T9395] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.529743][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.537662][ T9395] bridge_slave_0: entered allmulticast mode [ 654.654159][ T9395] bridge_slave_0: entered promiscuous mode [ 654.680154][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'. [ 654.763816][ T9395] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.772195][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.779924][ T9395] bridge_slave_1: entered allmulticast mode [ 654.789096][ T9395] bridge_slave_1: entered promiscuous mode [ 655.247797][ T9395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.312483][ T9395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.559482][ T9395] team0: Port device team_slave_0 added [ 655.703548][ T9395] team0: Port device team_slave_1 added [ 655.871614][ T9396] Bluetooth: hci3: command tx timeout [ 656.663743][ T3586] hsr_slave_0: left promiscuous mode [ 656.713947][ T3586] hsr_slave_1: left promiscuous mode [ 656.722085][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.729963][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.867277][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.875345][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.216889][ T3586] veth1_macvtap: left promiscuous mode [ 657.223318][ T3586] veth0_macvtap: left promiscuous mode [ 657.229281][ T3586] veth1_vlan: left promiscuous mode [ 657.235564][ T3586] veth0_vlan: left promiscuous mode [ 657.284710][ T9486] evm: overlay not supported [ 657.571159][ T5862] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 657.632903][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.640073][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.672987][ T9395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.745856][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.753387][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.783260][ T9395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.795205][ T5862] usb 5-1: device descriptor read/64, error -71 [ 658.081959][ T5862] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 658.104285][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1443'. [ 658.263070][ T5862] usb 5-1: device descriptor read/64, error -71 [ 658.373997][ T5862] usb usb5-port1: attempt power cycle [ 658.747203][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 658.791683][ T5862] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 658.854140][ T5862] usb 5-1: device descriptor read/8, error -71 [ 658.856611][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 658.873948][ T3548] smc: removing ib device syz1 [ 659.157556][ T9504] cgroup: No subsys list or none specified [ 659.256675][ T5862] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 659.302183][ T9395] hsr_slave_0: entered promiscuous mode [ 659.312488][ T9395] hsr_slave_1: entered promiscuous mode [ 659.361427][ T5862] usb 5-1: device descriptor read/8, error -71 [ 659.472798][ T5862] usb usb5-port1: unable to enumerate USB device [ 664.874515][ T9395] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 664.934903][ T9395] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 665.048736][ T9395] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 665.112496][ T9395] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 665.262014][ T9528] cgroup: No subsys list or none specified [ 665.436956][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 666.322472][ T9395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.489011][ T9395] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.590446][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.598221][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.115509][ T9544] hsr_slave_0: left promiscuous mode [ 667.251830][ T9544] hsr_slave_1: left promiscuous mode [ 667.705211][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.712966][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.202361][ T9395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 668.216465][ T9395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.939383][ T9574] binder: BINDER_SET_CONTEXT_MGR already set [ 669.945996][ T9574] binder: 9573:9574 ioctl 4018620d 20000040 returned -16 [ 670.297715][ T9395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.342057][ T9579] bridge0: port 3(syz_tun) entered blocking state [ 670.349093][ T9579] bridge0: port 3(syz_tun) entered disabled state [ 670.358478][ T9579] syz_tun: entered allmulticast mode [ 670.371460][ T9579] syz_tun: entered promiscuous mode [ 670.378914][ T9579] bridge0: port 3(syz_tun) entered blocking state [ 670.386137][ T9579] bridge0: port 3(syz_tun) entered forwarding state [ 670.951700][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 671.149679][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.160567][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 671.169990][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.263643][ T8] usb 5-1: config 0 descriptor?? [ 671.303252][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 672.339778][ T9395] veth0_vlan: entered promiscuous mode [ 672.422864][ T9395] veth1_vlan: entered promiscuous mode [ 672.582207][ T9395] veth0_macvtap: entered promiscuous mode [ 672.650449][ T9395] veth1_macvtap: entered promiscuous mode [ 672.807125][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.820991][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.832231][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.842994][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.853166][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.864011][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.874209][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.885049][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.899905][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.999170][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.012779][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.026508][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.038072][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.048242][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.059019][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.069293][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.080028][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.094697][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.263130][ T9395] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.272518][ T9395] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.281649][ T9395] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.291133][ T9395] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.793251][ T5837] usb 5-1: USB disconnect, device number 11 [ 674.485183][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1495'. [ 674.586136][ T9632] bond0: (slave bond_slave_0): Releasing backup interface [ 676.492361][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1507'. [ 676.714926][ T9672] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1509'. [ 681.262102][ T4807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.270168][ T4807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.482578][ T1830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.491409][ T1830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.540180][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 682.242117][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1522'. [ 685.028761][ T9740] dvmrp0: entered allmulticast mode [ 685.131530][ T9742] dvmrp0: left allmulticast mode [ 686.206909][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1535'. [ 686.530000][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1536'. [ 688.782274][ T5837] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 689.018853][ T5837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 689.030522][ T5837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 689.042224][ T5837] usb 7-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 689.051596][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.223050][ T5837] usb 7-1: config 0 descriptor?? [ 689.298469][ T9763] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 690.172070][ T5837] usb 7-1: USB disconnect, device number 2 [ 691.374348][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1550'. [ 693.073933][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 693.165831][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 693.243237][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 693.255064][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 693.266906][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 693.276338][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.323111][ T8] usb 4-1: config 0 descriptor?? [ 693.331247][ T9808] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 693.990611][ T8] usb 4-1: USB disconnect, device number 10 [ 695.424169][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1574'. [ 696.812144][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 697.010287][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 697.022650][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 697.034266][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 697.043701][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.173891][ T8] usb 5-1: config 0 descriptor?? [ 697.182058][ T9861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 697.349912][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1587'. [ 697.799187][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 697.844320][ T8] usb 5-1: USB disconnect, device number 12 [ 699.626904][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1602'. [ 699.657444][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1601'. [ 700.469963][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 700.744641][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.755380][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 700.765367][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.930824][ C0] hrtimer: interrupt took 386836 ns [ 700.966823][ T8] usb 3-1: config 0 descriptor?? [ 701.065551][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 701.643459][ T9905] syz.6.1600 (9905) used greatest stack depth: 4872 bytes left [ 703.847480][ T8] usb 3-1: USB disconnect, device number 12 [ 706.237595][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 706.669096][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1616'. [ 708.171848][ T44] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 708.374496][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.384831][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 708.396145][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.478545][ T44] usb 4-1: config 0 descriptor?? [ 708.510012][ T44] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 708.611226][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 708.804725][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.886438][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 708.896016][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.904445][ T8] usb 5-1: Product: syz [ 708.908821][ T8] usb 5-1: Manufacturer: syz [ 708.913828][ T8] usb 5-1: SerialNumber: syz [ 710.084258][ T8] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 710.096672][ T8] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 710.105798][ T8] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 710.288976][ T8] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 710.313304][ T8] cdc_ncm 5-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 710.427335][ T8] usb 5-1: USB disconnect, device number 13 [ 710.435191][ T8] cdc_ncm 5-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 711.134184][ T44] usb 4-1: USB disconnect, device number 11 [ 712.464818][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1647'. [ 712.910532][ T5784] Bluetooth: hci5: command 0x0406 tx timeout [ 713.952334][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 714.261090][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.271717][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 714.281172][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.478450][ T8] usb 3-1: config 0 descriptor?? [ 714.578868][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 715.892167][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.898915][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 715.991116][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1660'. [ 716.079378][T10059] bond0: (slave bond_slave_0): Releasing backup interface [ 716.749244][ T44] usb 3-1: USB disconnect, device number 13 [ 717.066971][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 717.090966][T10079] bond_slave_1: entered promiscuous mode [ 720.791210][ T44] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 720.951599][ T29] audit: type=1326 audit(1737878705.641:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6d8cd29 code=0x7ffc0000 [ 720.976133][ T29] audit: type=1326 audit(1737878705.661:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7c6d8cd29 code=0x7ffc0000 [ 721.010094][ T29] audit: type=1326 audit(1737878705.661:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6d8cd29 code=0x7ffc0000 [ 721.033118][ T29] audit: type=1326 audit(1737878705.661:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7c6d8cd29 code=0x7ffc0000 [ 721.059148][ T29] audit: type=1326 audit(1737878705.661:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6d8cd29 code=0x7ffc0000 [ 721.083112][ T29] audit: type=1326 audit(1737878705.661:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6d8cd29 code=0x7ffc0000 [ 721.105859][ T29] audit: type=1326 audit(1737878705.681:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe7c6d8cd29 code=0x7ffc0000 [ 721.128601][ T29] audit: type=1326 audit(1737878705.681:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6d8cd29 code=0x7ffc0000 [ 721.154719][ T29] audit: type=1326 audit(1737878705.681:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6d8cd29 code=0x7ffc0000 [ 721.178408][ T29] audit: type=1326 audit(1737878705.691:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe7c6d8cd29 code=0x7ffc0000 [ 721.531964][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 721.543650][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 721.555287][ T44] usb 7-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 721.568116][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.753763][ T44] usb 7-1: config 0 descriptor?? [ 721.773214][T10106] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 722.812154][ T8] usb 7-1: USB disconnect, device number 3 [ 723.974882][ T44] IPVS: starting estimator thread 0... [ 724.081732][T10152] IPVS: using max 240 ests per chain, 12000 per kthread [ 726.582700][ T44] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 726.833009][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 726.845278][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 726.856882][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 726.866347][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.133728][ T44] usb 4-1: config 0 descriptor?? [ 727.183915][T10172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 727.949273][ T44] usb 4-1: USB disconnect, device number 12 [ 732.531161][T10212] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1724'. [ 732.605019][T10213] xt_policy: output policy not valid in PREROUTING and INPUT [ 733.147707][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 734.352991][ T5837] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 734.617553][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 734.629339][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 734.641644][ T5837] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 734.651136][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.814271][ T5837] usb 5-1: config 0 descriptor?? [ 734.825146][T10222] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 735.576607][ T5837] usb 5-1: USB disconnect, device number 14 [ 742.006164][ T5862] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 742.151131][ T5837] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 742.198470][ T5862] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.209145][ T5862] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.311256][ T5862] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.320668][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.329158][ T5862] usb 6-1: Product: syz [ 742.333695][ T5862] usb 6-1: Manufacturer: syz [ 742.338511][ T5862] usb 6-1: SerialNumber: syz [ 742.358255][ T5837] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 742.367332][ T5837] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.377852][ T5837] usb 5-1: config 0 has no interface number 0 [ 742.384264][ T5837] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 742.394296][ T5837] usb 5-1: config 0 interface 3 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 742.394499][ T5837] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 742.394638][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.488362][ T5837] usb 5-1: config 0 descriptor?? [ 742.620600][ T5837] hub 5-1:0.3: bad descriptor, ignoring hub [ 742.627153][ T5837] hub 5-1:0.3: probe with driver hub failed with error -5 [ 742.685081][ T5862] usb 6-1: 0:2 : does not exist [ 742.715992][ T5837] sierra 5-1:0.3: Sierra USB modem converter detected [ 742.774411][ T5862] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 742.792787][ T5837] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 742.873816][ T5837] usb 5-1: USB disconnect, device number 15 [ 742.907950][ T5837] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 742.923273][ T5837] sierra 5-1:0.3: device disconnected [ 743.042677][ T5862] usb 6-1: USB disconnect, device number 2 [ 743.378109][ T8969] udevd[8969]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.176428][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 744.279107][T10316] fuse: Bad value for 'fd' [ 745.051991][ T5862] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 745.221988][ T5862] usb 7-1: Using ep0 maxpacket: 32 [ 745.247869][ T5862] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.259813][ T5862] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.270093][ T5862] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 745.279821][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.381209][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 745.486978][ T5862] hub 7-1:4.0: USB hub found [ 745.571424][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 745.583253][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 745.595086][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 745.604735][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.728867][ T5862] hub 7-1:4.0: 8 ports detected [ 745.735883][ T5862] hub 7-1:4.0: insufficient power available to use all downstream ports [ 745.749830][ T8] usb 6-1: config 0 descriptor?? [ 745.759889][T10330] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 745.945208][ T5862] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 745.952192][ T5862] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 746.068508][ T5862] usb 7-1: USB disconnect, device number 4 [ 746.472621][ T8] usb 6-1: USB disconnect, device number 3 [ 746.734609][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'. [ 747.092779][T10352] fuse: Bad value for 'fd' [ 751.606051][T10398] ceph: No mds server is up or the cluster is laggy [ 758.198282][T10447] fuse: Bad value for 'fd' [ 760.628023][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 760.628092][ T29] audit: type=1326 audit(1737878745.321:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10468 comm="syz.2.1830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6d8cd29 code=0x0 [ 761.561574][T10483] fuse: Bad value for 'fd' [ 762.780862][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 764.143496][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 764.383459][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 764.423945][ T8] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.435893][ T8] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.446355][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 764.455853][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.631630][ T8] hub 4-1:4.0: USB hub found [ 764.916567][ T8] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 765.022743][ T8] usb 4-1: USB disconnect, device number 13 [ 766.999697][T10515] fuse: Bad value for 'fd' [ 767.809099][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1854'. [ 768.311224][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 768.532609][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.544137][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.554267][ T8] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 768.565899][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.670720][ T8] usb 5-1: config 0 descriptor?? [ 769.145203][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.153389][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.161656][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.169729][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.181227][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.189242][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.198261][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.206338][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.214416][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.222500][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.230501][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.239334][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.247482][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.255688][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.263782][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.271921][ T8] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 769.283385][ T8] hid-thrustmaster 0003:044F:B65D.000F: unbalanced collection at end of report description [ 769.446774][ T8] hid-thrustmaster 0003:044F:B65D.000F: parse failed with error -22 [ 769.455591][ T8] hid-thrustmaster 0003:044F:B65D.000F: probe with driver hid-thrustmaster failed with error -22 [ 769.612893][ T8] usb 5-1: USB disconnect, device number 16 [ 772.528019][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1868'. [ 773.431072][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 773.621695][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 773.697012][ T8] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 773.706998][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.717154][ T8] usb 5-1: Product: syz [ 773.721797][ T8] usb 5-1: Manufacturer: syz [ 773.726669][ T8] usb 5-1: SerialNumber: syz [ 773.824173][ T8] usb 5-1: config 0 descriptor?? [ 774.271594][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 774.304470][ T8] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 774.320451][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 774.389394][ T8] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 774.402567][ T8] usb 5-1: media controller created [ 774.535633][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 774.666052][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1879'. [ 774.689763][T10581] vlan2: entered promiscuous mode [ 774.719663][ T8] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 774.727984][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 774.950921][ T8] usb 5-1: USB disconnect, device number 17 [ 775.274710][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 775.444649][T10588] syzkaller0: entered allmulticast mode [ 775.793878][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1882'. [ 775.847397][T10593] fuse: Bad value for 'fd' [ 777.336033][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.343076][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 779.478776][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1892'. [ 779.503458][T10617] vlan2: entered promiscuous mode [ 780.073919][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1896'. [ 780.157438][T10626] fuse: Bad value for 'fd' [ 780.303108][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 780.322615][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 780.345816][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 780.366512][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 780.379564][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 780.390505][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 780.764724][ T29] audit: type=1326 audit(1737878765.451:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.4.1901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f610c78cd29 code=0x0 [ 781.232607][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1900'. [ 781.549411][T10643] tipc: Started in network mode [ 781.554582][T10643] tipc: Node identity 4, cluster identity 4711 [ 781.561061][T10643] tipc: Node number set to 4 [ 781.636506][T10627] chnl_net:caif_netlink_parms(): no params data found [ 782.510994][ T9396] Bluetooth: hci0: command tx timeout [ 782.684258][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'. [ 782.714908][T10655] vlan2: entered promiscuous mode [ 782.986335][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1909'. [ 783.002031][T10661] fuse: Bad value for 'fd' [ 783.832647][T10672] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1915'. [ 783.875769][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.886093][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.894183][T10627] bridge_slave_0: entered allmulticast mode [ 783.903494][T10627] bridge_slave_0: entered promiscuous mode [ 784.008615][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.017043][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.030440][T10627] bridge_slave_1: entered allmulticast mode [ 784.040123][T10627] bridge_slave_1: entered promiscuous mode [ 784.435984][T10627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.601083][ T9396] Bluetooth: hci0: command tx timeout [ 786.692120][ T9396] Bluetooth: hci0: command tx timeout [ 786.721110][T10627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.779357][T10627] team0: Port device team_slave_0 added [ 787.841363][T10627] team0: Port device team_slave_1 added [ 788.378480][T10627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.385832][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.412303][T10627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.614361][T10627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.621720][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.652305][T10627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.677157][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1923'. [ 788.751763][ T9396] Bluetooth: hci0: command tx timeout [ 789.303921][T10703] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1926'. [ 789.365177][T10705] xt_TCPMSS: Only works on TCP SYN packets [ 789.423360][T10627] hsr_slave_0: entered promiscuous mode [ 789.433396][T10627] hsr_slave_1: entered promiscuous mode [ 789.442288][T10627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 789.454262][T10627] Cannot create hsr debugfs directory [ 789.472029][T10703] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1926'. [ 789.481556][T10703] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1926'. [ 789.723869][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1928'. [ 797.317780][T10627] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 798.380056][T10627] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 799.347453][T10627] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 799.483021][T10627] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 799.824477][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 800.592417][T10745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1940'. [ 804.038348][T10627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.266210][T10627] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.391498][ T4807] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.399262][ T4807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.539483][ T4807] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.547210][ T4807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.925434][T10627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 804.936479][T10627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.532372][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1946'. [ 808.247872][T10500] bridge0: port 3(syz_tun) entered disabled state [ 808.342297][T10500] syz_tun (unregistering): left allmulticast mode [ 808.349062][T10500] syz_tun (unregistering): left promiscuous mode [ 808.356242][T10500] bridge0: port 3(syz_tun) entered disabled state [ 808.595185][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.859864][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.891496][T10627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.962466][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1950'. [ 809.096019][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.383242][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.006404][ T59] bridge_slave_1: left allmulticast mode [ 810.012685][ T59] bridge_slave_1: left promiscuous mode [ 810.019349][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.183386][ T59] bridge_slave_0: left allmulticast mode [ 810.189273][ T59] bridge_slave_0: left promiscuous mode [ 810.196252][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.725630][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 811.736827][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 811.850484][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 811.908659][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 811.962585][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 811.975243][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 813.185657][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.226148][ T59] bond0 (unregistering): Released all slaves [ 814.112198][ T5784] Bluetooth: hci4: command tx timeout [ 814.802599][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 815.062858][ T59] hsr_slave_0: left promiscuous mode [ 815.111100][ T59] hsr_slave_1: left promiscuous mode [ 815.118805][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.126949][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.263538][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.271443][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.423295][ T59] veth1_macvtap: left promiscuous mode [ 815.429060][ T59] veth0_macvtap: left promiscuous mode [ 815.435198][ T59] veth1_vlan: left promiscuous mode [ 815.440645][ T59] veth0_vlan: left promiscuous mode [ 817.145115][ T5784] Bluetooth: hci4: command tx timeout [ 817.371518][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1961'. [ 818.072792][ T59] team0 (unregistering): Port device team_slave_1 removed [ 818.101409][ T59] team0 (unregistering): Port device team_slave_0 removed [ 819.261236][ T5784] Bluetooth: hci4: command tx timeout [ 819.637086][T10627] veth0_vlan: entered promiscuous mode [ 819.875934][T10627] veth1_vlan: entered promiscuous mode [ 820.481106][T10797] chnl_net:caif_netlink_parms(): no params data found [ 820.670601][T10627] veth0_macvtap: entered promiscuous mode [ 821.071614][T10627] veth1_macvtap: entered promiscuous mode [ 821.854000][ T5784] Bluetooth: hci4: command tx timeout [ 824.362934][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.377622][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.388719][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.399618][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.410336][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.421259][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.431650][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.442433][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.457140][T10627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.537237][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.548188][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.558469][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.569241][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.582409][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.594091][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.604267][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.615128][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.629622][T10627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.695952][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1968'. [ 824.710534][T10627] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.719990][T10627] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.729990][T10627] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.739226][T10627] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.865784][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.094634][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.318889][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.545654][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.032877][T10797] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.040621][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.048587][T10797] bridge_slave_0: entered allmulticast mode [ 826.057758][T10797] bridge_slave_0: entered promiscuous mode [ 826.234855][T10797] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.242858][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.250637][T10797] bridge_slave_1: entered allmulticast mode [ 826.259796][T10797] bridge_slave_1: entered promiscuous mode [ 826.376216][ T59] bridge_slave_1: left allmulticast mode [ 826.382674][ T59] bridge_slave_1: left promiscuous mode [ 826.389271][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.531685][ T59] bridge_slave_0: left allmulticast mode [ 826.537767][ T59] bridge_slave_0: left promiscuous mode [ 826.544571][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.407388][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.476935][ T59] bond0 (unregistering): Released all slaves [ 827.652957][T10797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.764298][T10797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.394641][T10797] team0: Port device team_slave_0 added [ 829.379448][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 829.381543][ T59] hsr_slave_0: left promiscuous mode [ 829.451469][ T59] hsr_slave_1: left promiscuous mode [ 829.459440][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.467444][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.564000][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.571842][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.636061][ T59] veth1_macvtap: left promiscuous mode [ 829.642467][ T59] veth0_macvtap: left promiscuous mode [ 829.644162][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1979'. [ 829.648263][ T59] veth1_vlan: left promiscuous mode [ 829.663089][ T59] veth0_vlan: left promiscuous mode [ 830.006397][T10797] team0: Port device team_slave_1 added [ 830.045359][T10881] vlan2: entered promiscuous mode [ 830.883118][ T59] team0 (unregistering): Port device team_slave_1 removed [ 830.964025][ T59] team0 (unregistering): Port device team_slave_0 removed [ 832.024564][T10797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.032904][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.062495][T10797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.229265][ T59] IPVS: stop unused estimator thread 0... [ 832.238000][T10797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.245635][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.275085][T10797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.537395][T10797] hsr_slave_0: entered promiscuous mode [ 832.547452][T10797] hsr_slave_1: entered promiscuous mode [ 833.103282][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 834.294118][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1989'. [ 834.320316][T10914] vlan2: entered promiscuous mode [ 835.565385][T10797] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 835.702368][T10797] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 835.786130][T10797] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 835.877552][T10797] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 836.633863][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.642667][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.845772][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 836.958922][ T4049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.969675][ T4049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.204378][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2000'. [ 837.230487][T10944] vlan2: entered promiscuous mode [ 837.521715][T10797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.705758][T10797] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.854178][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.862015][ T4049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.877902][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.885677][ T4049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.052629][ T5784] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 838.072208][ T5837] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 838.301868][ T5837] usb 8-1: Using ep0 maxpacket: 8 [ 838.382691][ T5837] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 838.392178][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.403965][ T5837] usb 8-1: Product: syz [ 838.408354][ T5837] usb 8-1: Manufacturer: syz [ 838.414386][ T5837] usb 8-1: SerialNumber: syz [ 838.497968][ T5837] usb 8-1: config 0 descriptor?? [ 838.560960][ T5837] gspca_main: se401-2.14.0 probing 047d:5003 [ 838.784556][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.791584][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.024154][ T5837] gspca_se401: ExtraFeatures: 3 [ 839.132125][ T5862] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 839.250224][ T5837] input: se401 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input38 [ 839.343336][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 839.369678][ T5837] usb 8-1: USB disconnect, device number 2 [ 839.379902][ T5862] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 839.388593][ T5862] usb 6-1: config 0 has no interface number 0 [ 839.395274][ T5862] usb 6-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 839.406583][ T5862] usb 6-1: config 0 interface 244 has no altsetting 0 [ 839.532545][ T5862] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 839.542386][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.550622][ T5862] usb 6-1: Product: syz [ 839.555198][ T5862] usb 6-1: Manufacturer: syz [ 839.560005][ T5862] usb 6-1: SerialNumber: syz [ 839.623519][ T5862] usb 6-1: config 0 descriptor?? [ 839.660230][ T5862] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort found [ 839.882613][ T5862] snd_usb_toneport 6-1:0.244: cannot get proper max packet size [ 839.891032][ T5862] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort now disconnected [ 839.910067][ T5862] snd_usb_toneport 6-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 840.105238][ T5862] usb 6-1: USB disconnect, device number 4 [ 840.460273][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2010'. [ 840.581863][T10797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.000985][ T44] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 841.064000][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2012'. [ 841.088177][T10983] vlan2: entered promiscuous mode [ 842.092389][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 842.140185][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.150721][ T44] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 843.183838][ T44] usb 5-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31 [ 843.193363][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.202113][ T44] usb 5-1: Product: syz [ 843.206489][ T44] usb 5-1: Manufacturer: syz [ 843.214860][ T44] usb 5-1: SerialNumber: syz [ 843.282800][ T44] usb 5-1: config 0 descriptor?? [ 843.942608][ T44] usb 5-1: USB disconnect, device number 18 [ 843.962736][T11004] loop7: detected capacity change from 0 to 16384 [ 844.617362][T11006] loop7: detected capacity change from 16384 to 16383 [ 844.726582][T11004] I/O error, dev loop7, sector 1800 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 845.101880][T11006] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 845.112326][T11006] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 845.121095][T11006] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 845.129660][T11006] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 845.138388][T11006] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 845.147051][T11006] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 845.161118][T11006] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 845.169753][T11006] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 845.179737][T11006] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 845.188472][T11006] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 845.197226][T11006] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 845.213814][T11011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2018'. [ 845.855944][T11006] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 80 prio class 0 [ 845.998025][T10797] veth0_vlan: entered promiscuous mode [ 846.136258][T10797] veth1_vlan: entered promiscuous mode [ 846.174270][T11006] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.189081][T11006] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.200845][T11006] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.210353][T11006] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.220069][T11006] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.229728][T11006] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.239386][T11006] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.249022][T11006] ldm_validate_partition_table(): Disk read failed. [ 846.256444][T11006] Dev loop7: unable to read RDB block 0 [ 846.263109][T11006] loop7: unable to read partition table [ 846.451337][T10797] veth0_macvtap: entered promiscuous mode [ 846.512818][T10797] veth1_macvtap: entered promiscuous mode [ 846.533111][T11006] loop_reread_partitions: partition scan of loop7 (R%0���T�$7�)]W����?�18��;9��C?��-��z���� ������97d���) failed (rc=-5) [ 846.742996][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.754601][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.764885][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.775684][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.786338][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.799026][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.809816][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.820633][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.835326][T10797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.938678][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.949939][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.960285][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.971187][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.981434][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.992218][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.004344][T10797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.015674][T10797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.030398][T10797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.377876][T10797] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.387134][T10797] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.396378][T10797] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.405461][T10797] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.578725][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 848.013573][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2025'. [ 848.112943][T11029] vlan2: entered promiscuous mode [ 852.499355][ T9396] Bluetooth: hci4: command 0x0405 tx timeout [ 852.891672][T11055] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 854.705867][ T5868] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 854.994015][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 855.064257][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.075738][ T5868] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 855.085327][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.234825][ T5868] usb 4-1: config 0 descriptor?? [ 855.757057][ T5868] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 855.981972][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2038'. [ 856.006005][T11081] vlan2: entered promiscuous mode [ 856.141699][ T8] usb 4-1: USB disconnect, device number 14 [ 859.509443][T11105] Bluetooth: MGMT ver 1.23 [ 860.887649][T11114] overlayfs: missing 'lowerdir' [ 861.418652][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2050'. [ 861.446373][T11119] vlan2: entered promiscuous mode [ 861.477943][T11104] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 863.073391][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 864.994064][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 865.002520][ T4021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.010651][ T4021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.019065][T10795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.030022][T10795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.087453][ T8] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 865.097673][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.106202][ T8] usb 5-1: Product: syz [ 865.110588][ T8] usb 5-1: Manufacturer: syz [ 865.115524][ T8] usb 5-1: SerialNumber: syz [ 865.244569][ T8] usb 5-1: config 0 descriptor?? [ 865.288248][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 865.712884][T11154] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1952'. [ 865.747034][ T8] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 865.754974][ T8] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 865.852186][ T8] usb 5-1: USB disconnect, device number 19 [ 865.887693][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 865.911878][T11156] vlan2: entered promiscuous mode [ 866.808436][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2068'. [ 868.081267][ T44] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 868.337187][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.347829][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 868.413239][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 868.422857][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.431240][ T44] usb 5-1: Product: syz [ 868.435596][ T44] usb 5-1: Manufacturer: syz [ 868.440390][ T44] usb 5-1: SerialNumber: syz [ 868.743137][ T44] usb 5-1: 0:2 : does not exist [ 868.785317][ T44] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 869.672972][ T44] usb 5-1: USB disconnect, device number 20 [ 870.193443][T10868] udevd[10868]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.581525][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2075'. [ 870.781122][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2076'. [ 870.805115][T11185] vlan2: entered promiscuous mode [ 871.513093][T11192] 9pnet_fd: Insufficient options for proto=fd [ 871.525507][T11192] 9pnet_fd: Insufficient options for proto=fd [ 871.951689][ T44] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 872.142046][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 872.198470][ T44] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 872.208184][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.216568][ T44] usb 6-1: Product: syz [ 872.221050][ T44] usb 6-1: Manufacturer: syz [ 872.225844][ T44] usb 6-1: SerialNumber: syz [ 872.313587][ T44] usb 6-1: config 0 descriptor?? [ 872.370006][ T44] gspca_main: se401-2.14.0 probing 047d:5003 [ 872.831877][ T44] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 872.839837][ T44] se401 6-1:0.0: probe with driver se401 failed with error -71 [ 872.992403][ T44] usb 6-1: USB disconnect, device number 5 [ 873.783850][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2081'. [ 875.068213][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2089'. [ 875.921350][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 876.111258][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 876.176661][ T8] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 876.189327][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.198772][ T8] usb 4-1: Product: syz [ 876.203320][ T8] usb 4-1: Manufacturer: syz [ 876.208112][ T8] usb 4-1: SerialNumber: syz [ 876.383784][ T8] usb 4-1: config 0 descriptor?? [ 876.806188][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2094'. [ 877.374549][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 878.484581][ T8] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 878.492447][ T8] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 878.532282][ T8] usb 4-1: USB disconnect, device number 15 [ 880.652178][T11252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2102'. [ 882.251513][ T9396] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 882.292009][ T9396] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 882.312104][ T9396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 882.361445][ T9396] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 882.382856][ T9396] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 882.401780][ T9396] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 882.874375][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2106'. [ 883.076214][ T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.340531][ T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.706677][ T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.072369][ T44] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 884.369541][ T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.402555][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 884.511047][ T9396] Bluetooth: hci3: command tx timeout [ 885.169919][ T44] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 885.179560][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.188196][ T44] usb 9-1: Product: syz [ 885.192645][ T44] usb 9-1: Manufacturer: syz [ 885.200987][ T44] usb 9-1: SerialNumber: syz [ 885.526264][ T44] usb 9-1: config 0 descriptor?? [ 885.609471][ T44] gspca_main: se401-2.14.0 probing 047d:5003 [ 886.388137][ T34] bridge_slave_1: left allmulticast mode [ 886.394882][ T34] bridge_slave_1: left promiscuous mode [ 886.401879][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.550328][ T34] bridge_slave_0: left allmulticast mode [ 886.556520][ T34] bridge_slave_0: left promiscuous mode [ 886.563243][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.648591][T11291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2113'. [ 886.696120][ T44] gspca_se401: read req failed req 0x06 error -19 [ 886.788666][ T44] usb 9-1: USB disconnect, device number 2 [ 886.955069][T11256] chnl_net:caif_netlink_parms(): no params data found [ 886.987200][ T9396] Bluetooth: hci3: command tx timeout [ 887.613692][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.723062][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.792683][ T34] bond0 (unregistering): Released all slaves [ 888.833998][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2117'. [ 889.071117][ T9396] Bluetooth: hci3: command tx timeout [ 889.170164][ T34] hsr_slave_0: left promiscuous mode [ 889.225404][ T34] hsr_slave_1: left promiscuous mode [ 889.233377][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.241258][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.321220][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.328993][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.455834][ T34] veth1_macvtap: left promiscuous mode [ 889.461714][ T34] veth0_macvtap: left promiscuous mode [ 889.467585][ T34] veth1_vlan: left promiscuous mode [ 889.473380][ T34] veth0_vlan: left promiscuous mode [ 889.788204][ T44] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 890.071092][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 890.086342][ T44] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 890.097247][ T44] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 890.106701][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 890.118727][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.610695][ T34] team0 (unregistering): Port device team_slave_1 removed [ 890.665310][ T34] team0 (unregistering): Port device team_slave_0 removed [ 891.126767][T11326] sch_fq: defrate 0 ignored. [ 891.170167][ T9396] Bluetooth: hci3: command tx timeout [ 891.274183][T11256] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.281982][T11256] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.289753][T11256] bridge_slave_0: entered allmulticast mode [ 891.298797][T11256] bridge_slave_0: entered promiscuous mode [ 891.346341][T11256] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.354306][T11256] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.362433][T11256] bridge_slave_1: entered allmulticast mode [ 891.371580][T11256] bridge_slave_1: entered promiscuous mode [ 891.522983][T11256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.618239][T11256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.642802][ T9140] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 891.854661][ T9140] usb 5-1: Using ep0 maxpacket: 8 [ 891.913219][ T9140] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 891.916245][T11256] team0: Port device team_slave_0 added [ 891.923246][ T9140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.936940][ T9140] usb 5-1: Product: syz [ 891.941450][ T9140] usb 5-1: Manufacturer: syz [ 891.946245][ T9140] usb 5-1: SerialNumber: syz [ 892.010936][T11256] team0: Port device team_slave_1 added [ 892.083410][ T9140] usb 5-1: config 0 descriptor?? [ 892.127533][ T9140] gspca_main: se401-2.14.0 probing 047d:5003 [ 892.474637][T11256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.482127][T11256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.508904][T11256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.564027][ T44] usb 4-1: USB disconnect, device number 16 [ 892.651526][T11334] bridge_slave_0: left allmulticast mode [ 892.657462][T11334] bridge_slave_0: left promiscuous mode [ 892.664320][T11334] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.805439][T11334] bridge_slave_1: left allmulticast mode [ 892.811555][T11334] bridge_slave_1: left promiscuous mode [ 892.818259][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.995115][T11334] bond0: (slave bond_slave_1): Releasing backup interface [ 893.122833][T11334] team0: Port device team_slave_0 removed [ 893.126174][ T9140] gspca_se401: read req failed req 0x06 error -19 [ 893.177495][ T9140] usb 5-1: USB disconnect, device number 21 [ 893.231091][T11334] team0: Port device team_slave_1 removed [ 893.241985][T11334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.249729][T11334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.337337][T11334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.345554][T11334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.549789][T11256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.557480][T11256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.584029][T11256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.635544][T11335] team0: Mode changed to "loadbalance" [ 893.648921][T11336] vlan0: entered promiscuous mode [ 893.738934][T11343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2127'. [ 894.316663][T11256] hsr_slave_0: entered promiscuous mode [ 894.326488][T11256] hsr_slave_1: entered promiscuous mode [ 894.335135][T11256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.342986][T11256] Cannot create hsr debugfs directory [ 894.497216][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 895.105361][ T9140] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 895.351639][ T9140] usb 4-1: Using ep0 maxpacket: 8 [ 895.369406][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2132'. [ 895.401819][ T9140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 895.413376][ T9140] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 895.422966][ T9140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.567843][ T9140] usb 4-1: config 0 descriptor?? [ 895.860098][ T9140] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 896.301138][ T9396] Bluetooth: hci5: unknown advertising packet type: 0xaa [ 896.301264][ T9396] Bluetooth: hci5: unknown advertising packet type: 0x79 [ 896.317421][ T8] usb 4-1: USB disconnect, device number 17 [ 896.364157][T11256] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 896.401225][ T9140] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 896.553772][T11256] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 896.680629][ T9140] usb 5-1: Using ep0 maxpacket: 32 [ 896.729161][T11256] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 896.735285][ T9140] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 896.746953][ T9140] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 896.757177][ T9140] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 896.772595][ T9140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.848561][T11256] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 899.627318][T11256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.153062][T11256] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.281410][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.288286][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.459546][ T1830] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.461248][ T8] usb 5-1: USB disconnect, device number 22 [ 900.467226][ T1830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.663762][ T1830] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.671520][ T1830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.064417][T11256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 901.904016][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2141'. [ 902.708782][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 902.756417][T11386] capability: warning: `syz.5.2145' uses 32-bit capabilities (legacy support in use) [ 903.934910][T11397] Illegal XDP return value 4294967274 on prog (id 288) dev N/A, expect packet loss! [ 904.027392][T11256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.053204][ T44] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 904.281263][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 904.356732][ T44] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 904.367359][ T44] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 904.380877][ T44] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 904.390169][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.032255][ T44] hub 6-1:4.0: bad descriptor, ignoring hub [ 905.038567][ T44] hub 6-1:4.0: probe with driver hub failed with error -5 [ 905.053100][ T44] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 905.200157][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 905.215713][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 905.230466][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 905.250704][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 905.276178][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 905.287545][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 907.391168][ T9396] Bluetooth: hci0: command tx timeout [ 908.291970][ T8] usb 6-1: USB disconnect, device number 6 [ 909.101399][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 909.374737][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2153'. [ 909.387976][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.472711][ T9396] Bluetooth: hci0: command tx timeout [ 909.496463][ T8] usb 6-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 909.506498][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.514892][ T8] usb 6-1: Product: syz [ 909.519256][ T8] usb 6-1: Manufacturer: syz [ 909.524195][ T8] usb 6-1: SerialNumber: syz [ 909.721919][T11401] chnl_net:caif_netlink_parms(): no params data found [ 909.814153][ T8] qmi_wwan 6-1:1.0: skipping garbage [ 909.820396][ T8] qmi_wwan 6-1:1.0: probe with driver qmi_wwan failed with error -22 [ 910.031167][ T8] usb 6-1: USB disconnect, device number 7 [ 910.295438][T11423] fuse: Unknown parameter 'grou00000000000000000000' [ 910.550675][ T9512] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.786263][ T9512] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.859290][T11256] veth0_vlan: entered promiscuous mode [ 911.004079][T11256] veth1_vlan: entered promiscuous mode [ 911.144829][ T9512] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.384018][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2155'. [ 911.412901][ T9512] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.468698][T11256] veth0_macvtap: entered promiscuous mode [ 911.552461][ T9396] Bluetooth: hci0: command tx timeout [ 911.596018][T11256] veth1_macvtap: entered promiscuous mode [ 912.540125][ T9512] bridge_slave_1: left allmulticast mode [ 912.546132][ T9512] bridge_slave_1: left promiscuous mode [ 912.553010][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.649057][ T9512] bridge_slave_0: left allmulticast mode [ 912.655065][ T9512] bridge_slave_0: left promiscuous mode [ 912.661818][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.552683][ T9512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.634307][ T9396] Bluetooth: hci0: command tx timeout [ 913.674243][ T9512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.716289][ T9512] bond0 (unregistering): Released all slaves [ 913.759307][T11256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.774097][T11256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.786796][T11256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.798893][T11256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.810499][T11256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.822501][T11256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.859520][T11256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.910060][T11401] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.918149][T11401] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.926051][T11401] bridge_slave_0: entered allmulticast mode [ 913.935076][T11401] bridge_slave_0: entered promiscuous mode [ 914.047364][T11401] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.055343][T11401] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.063305][T11401] bridge_slave_1: entered allmulticast mode [ 914.077288][T11401] bridge_slave_1: entered promiscuous mode [ 914.216518][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2162'. [ 914.484061][T11401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.498811][T11256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.509861][T11256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.519957][T11256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.530694][T11256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.540958][T11256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.551945][T11256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.566411][T11256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.616884][T11452] fuse: Unknown parameter 'grou00000000000000000000' [ 914.740017][T11401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.186148][T11256] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.195444][T11256] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.207306][T11256] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.217066][T11256] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.244547][T11401] team0: Port device team_slave_0 added [ 915.307008][T11401] team0: Port device team_slave_1 added [ 915.661944][ T9512] hsr_slave_0: left promiscuous mode [ 915.722109][ T9512] hsr_slave_1: left promiscuous mode [ 915.730138][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.738057][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.873953][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.882018][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.081727][ T9512] veth1_macvtap: left promiscuous mode [ 916.087588][ T9512] veth0_macvtap: left promiscuous mode [ 916.094458][ T9512] veth1_vlan: left promiscuous mode [ 916.100020][ T9512] veth0_vlan: left promiscuous mode [ 916.761146][T11265] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 916.985813][T11401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.995099][T11401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.021530][T11401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.043189][T11265] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.054546][T11265] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 917.067933][T11265] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 917.077367][T11265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.293904][T11265] usb 4-1: config 0 descriptor?? [ 917.310733][T11265] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 917.838080][ T9512] team0 (unregistering): Port device team_slave_1 removed [ 917.965302][ T9512] team0 (unregistering): Port device team_slave_0 removed [ 918.128537][T11401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.135839][T11401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.163230][T11401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.917059][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2174'. [ 919.077529][T11401] hsr_slave_0: entered promiscuous mode [ 919.092150][T11401] hsr_slave_1: entered promiscuous mode [ 919.495068][T11487] fuse: Unknown parameter 'grou00000000000000000000' [ 919.774153][T11265] usb 4-1: USB disconnect, device number 18 [ 921.941070][T11265] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 922.203241][T11265] usb 4-1: Using ep0 maxpacket: 8 [ 922.268032][T11265] usb 4-1: config 254 has an invalid interface number: 240 but max is 0 [ 922.276887][T11265] usb 4-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 922.287587][T11265] usb 4-1: config 254 has no interface number 0 [ 922.294192][T11265] usb 4-1: config 254 interface 240 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 922.441252][ T9140] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 922.547572][T11265] usb 4-1: New USB device found, idVendor=17ef, idProduct=3069, bcdDevice=3e.9b [ 922.557089][T11265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.565467][T11265] usb 4-1: Product: syz [ 922.571413][T11265] usb 4-1: Manufacturer: syz [ 922.576233][T11265] usb 4-1: SerialNumber: syz [ 922.676345][ T9140] usb 6-1: Using ep0 maxpacket: 16 [ 922.717798][ T9140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.729189][ T9140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.739495][ T9140] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 922.748914][ T9140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.982665][T11265] r8152-cfgselector 4-1: Unknown version 0x0000 [ 923.244846][ T9140] usb 6-1: config 0 descriptor?? [ 923.335970][T11265] r8152-cfgselector 4-1: USB disconnect, device number 19 [ 923.565641][T11401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 923.717689][ T9140] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0011/input/input39 [ 923.954537][ T9140] appleir 0003:05AC:8241.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 924.182368][ T9140] usb 6-1: USB disconnect, device number 8 [ 924.582458][T11401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 924.732141][T11401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 924.862183][T11401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 925.032785][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2184'. [ 925.294056][T11524] fuse: Unknown parameter 'group_i00000000000000000000' [ 925.341562][ T44] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 925.576374][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.587035][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 925.600554][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 925.610011][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.894345][ T44] usb 5-1: config 0 descriptor?? [ 925.962808][ T44] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 926.801953][T11530] netlink: 'syz.3.2187': attribute type 10 has an invalid length. [ 926.810512][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.819073][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.842989][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.850732][T11530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.859531][T11530] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.867424][T11530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.889060][T11530] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 926.932488][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2187'. [ 926.941914][T11534] bridge_slave_1: left allmulticast mode [ 926.947762][T11534] bridge_slave_1: left promiscuous mode [ 926.954574][T11534] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.166739][T11534] bridge_slave_0: left allmulticast mode [ 927.173047][T11534] bridge_slave_0: left promiscuous mode [ 927.182447][T11534] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.371603][T11534] bond0: (slave bridge0): Releasing backup interface [ 927.641396][T11401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.825051][T11401] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.843106][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.851392][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.155043][T10795] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.162807][T10795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.233455][ T4021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.241681][ T4021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.363541][ T5837] usb 5-1: USB disconnect, device number 23 [ 928.382985][T10795] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.390608][T10795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.795701][T11401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 931.163246][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2195'. [ 932.263585][T11565] fuse: Unknown parameter 'group_i00000000000000000000' [ 932.564394][T11401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.634867][T11570] overlayfs: missing 'lowerdir' [ 932.653154][T11265] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 932.901208][T11265] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.914676][T11265] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 932.925059][T11265] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.063603][T11265] usb 10-1: config 0 descriptor?? [ 933.155650][T11265] pwc: Askey VC010 type 2 USB webcam detected. [ 933.232307][T11401] veth0_vlan: entered promiscuous mode [ 933.334898][ T44] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 933.349867][T11265] pwc: send_video_command error -71 [ 933.356026][T11265] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 933.364284][T11265] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 933.374224][T11401] veth1_vlan: entered promiscuous mode [ 933.506370][T11265] usb 10-1: USB disconnect, device number 2 [ 933.590401][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.601802][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 933.615345][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 933.624882][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.717961][T11401] veth0_macvtap: entered promiscuous mode [ 933.738303][T11401] veth1_macvtap: entered promiscuous mode [ 933.830400][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.830499][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.830558][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.830640][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.830736][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.831248][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.839910][T11401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.843125][ T44] usb 5-1: config 0 descriptor?? [ 933.868006][ T44] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 933.951278][T11265] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 933.973295][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.973389][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.973449][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.973538][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.973634][T11401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.973713][T11401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.978039][T11401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.074091][T11401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.074280][T11401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.074460][T11401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.074630][T11401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.150399][T11265] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.150588][T11265] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 934.150731][T11265] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.157024][T11265] usb 10-1: config 0 descriptor?? [ 934.208136][T11265] pwc: Askey VC010 type 2 USB webcam detected. [ 934.600576][T11265] pwc: recv_control_msg error -32 req 02 val 2b00 [ 934.615011][T11265] pwc: recv_control_msg error -32 req 02 val 2700 [ 935.439105][T11265] pwc: recv_control_msg error -32 req 02 val 2c00 [ 935.501960][T11265] pwc: recv_control_msg error -32 req 04 val 1000 [ 935.569564][T11265] pwc: recv_control_msg error -32 req 04 val 1300 [ 935.641802][T11265] pwc: recv_control_msg error -32 req 04 val 1400 [ 935.700733][T11265] pwc: recv_control_msg error -32 req 02 val 2000 [ 935.753606][T11265] pwc: recv_control_msg error -32 req 02 val 2100 [ 935.771722][T11265] pwc: recv_control_msg error -32 req 04 val 1500 [ 935.800060][T11265] pwc: recv_control_msg error -32 req 02 val 2500 [ 935.840460][T11265] pwc: recv_control_msg error -32 req 02 val 2400 [ 936.068888][T11265] pwc: recv_control_msg error -71 req 02 val 2900 [ 936.103927][T11265] pwc: recv_control_msg error -71 req 02 val 2800 [ 936.171516][T11265] pwc: recv_control_msg error -71 req 04 val 1100 [ 936.203412][T11265] pwc: recv_control_msg error -71 req 04 val 1200 [ 936.270125][T11265] pwc: Registered as video103. [ 936.277281][T11265] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input40 [ 936.507607][T11265] usb 10-1: USB disconnect, device number 3 [ 936.714934][ T9140] usb 5-1: USB disconnect, device number 24 [ 938.521249][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2207'. [ 939.520983][T11612] fuse: Unknown parameter 'group_i00000000000000000000' [ 940.190334][T11616] overlayfs: missing 'workdir' [ 942.060435][T11265] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 942.273251][T11265] usb 10-1: Using ep0 maxpacket: 16 [ 942.357146][T11265] usb 10-1: config 0 interface 0 has no altsetting 0 [ 942.557394][T11265] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 942.567584][T11265] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.576503][T11265] usb 10-1: Product: syz [ 942.581407][T11265] usb 10-1: Manufacturer: syz [ 942.586611][T11265] usb 10-1: SerialNumber: syz [ 942.741240][T11265] r8152-cfgselector 10-1: Unknown version 0x0000 [ 942.757740][T11265] r8152-cfgselector 10-1: config 0 descriptor?? [ 943.257638][T11265] r8152-cfgselector 10-1: Unknown version 0x0000 [ 943.264874][T11265] r8152-cfgselector 10-1: bad CDC descriptors [ 943.476452][T11265] r8152-cfgselector 10-1: USB disconnect, device number 4 [ 944.367475][ T5837] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 945.948410][T11654] fuse: Unknown parameter 'group_id00000000000000000000' [ 946.230232][T11657] overlayfs: missing 'workdir' [ 946.452287][ T5837] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.487568][ T5837] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 946.496992][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.505298][ T5837] usb 6-1: Product: syz [ 946.524619][ T5837] usb 6-1: Manufacturer: syz [ 946.529459][ T5837] usb 6-1: SerialNumber: syz [ 947.321330][ T5837] cdc_ncm 6-1:1.0: bind() failure [ 947.338252][ T5837] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 947.345486][ T5837] cdc_ncm 6-1:1.1: bind() failure [ 947.470130][ T5837] usb 6-1: USB disconnect, device number 9 [ 948.522955][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.531641][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.055926][ T3586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.066167][ T3586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.977875][T11687] fuse: Unknown parameter 'group_id00000000000000000000' [ 950.776306][T11693] overlayfs: missing 'workdir' [ 954.661958][T11707] netlink: 'syz.9.2237': attribute type 4 has an invalid length. [ 954.731823][T11708] netlink: 'syz.9.2237': attribute type 4 has an invalid length. [ 957.416192][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'. [ 957.559711][T11735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2249'. [ 957.998191][T11740] netlink: 'syz.9.2251': attribute type 4 has an invalid length. [ 958.055713][T11742] netlink: 'syz.9.2251': attribute type 4 has an invalid length. [ 961.774936][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.781730][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 963.021941][ T5837] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 963.221183][ T5837] usb 5-1: Using ep0 maxpacket: 8 [ 963.269463][ T5837] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 963.279272][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.287703][ T5837] usb 5-1: Product: syz [ 963.292160][ T5837] usb 5-1: Manufacturer: syz [ 963.296973][ T5837] usb 5-1: SerialNumber: syz [ 963.401295][ T5837] usb 5-1: config 0 descriptor?? [ 963.471747][ T5837] gspca_main: se401-2.14.0 probing 047d:5003 [ 963.798949][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'. [ 964.034139][T11776] loop2: detected capacity change from 0 to 7 [ 964.091750][T11776] Dev loop2: unable to read RDB block 7 [ 964.097901][T11776] loop2: unable to read partition table [ 964.122492][T11778] netlink: 'syz.3.2264': attribute type 4 has an invalid length. [ 964.136423][T11776] loop2: partition table beyond EOD, truncated [ 964.143417][T11776] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5) [ 964.203215][T11780] netlink: 'syz.3.2264': attribute type 4 has an invalid length. [ 964.444133][ T5837] gspca_se401: read req failed req 0x06 error -19 [ 964.505164][ T9140] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 964.522155][ T5837] usb 5-1: USB disconnect, device number 25 [ 964.740101][ T9140] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 964.748840][ T9140] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 964.762519][ T9140] usb 1-1: config 7 has no interface number 0 [ 964.768848][ T9140] usb 1-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 964.783425][ T9140] usb 1-1: config 7 interface 252 has no altsetting 0 [ 965.201531][ T5837] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 965.691407][ T5837] usb 10-1: Using ep0 maxpacket: 16 [ 965.788251][ T9140] usb 1-1: string descriptor 0 read error: -22 [ 965.795679][ T9140] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 965.805460][ T9140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.845419][ T5837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 965.855839][ T5837] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 965.866112][ T5837] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 966.434265][ T5837] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 966.443854][ T5837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.452341][ T5837] usb 10-1: Product: syz [ 966.456790][ T5837] usb 10-1: Manufacturer: syz [ 966.461882][ T5837] usb 10-1: SerialNumber: syz [ 966.623296][ T5837] usb 10-1: config 0 descriptor?? [ 966.633756][T11792] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 966.885901][ T5837] mcba_usb 10-1:0.0 can0: failed tx_urb -90 [ 966.892292][ T5837] mcba_usb 10-1:0.0 can0: Failed to send cmd (169) [ 966.899343][ T5837] mcba_usb 10-1:0.0 can0: failed tx_urb -90 [ 966.905781][ T5837] mcba_usb 10-1:0.0 can0: Failed to send cmd (169) [ 966.917698][ T5837] mcba_usb 10-1:0.0: Microchip CAN BUS Analyzer connected [ 968.505950][ T5837] usb 10-1: USB disconnect, device number 5 [ 968.514025][ T5837] mcba_usb 10-1:0.0 can0: device disconnected [ 968.721054][ T9140] usb 1-1: USB disconnect, device number 11 [ 969.210241][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'. [ 971.222280][ T9140] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 971.287946][T11820] netlink: 'syz.5.2279': attribute type 4 has an invalid length. [ 971.396249][T11821] netlink: 'syz.5.2279': attribute type 4 has an invalid length. [ 972.460374][ T9140] usb 5-1: Using ep0 maxpacket: 8 [ 973.446793][ T9140] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 973.456623][ T9140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.472036][ T9140] usb 5-1: Product: syz [ 973.476545][ T9140] usb 5-1: Manufacturer: syz [ 973.481491][ T9140] usb 5-1: SerialNumber: syz [ 973.507972][ T9140] usb 5-1: config 0 descriptor?? [ 974.971541][ T9140] usb 5-1: can't set config #0, error -71 [ 975.063240][ T9140] usb 5-1: USB disconnect, device number 26 [ 976.779542][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2287'. [ 976.815122][T11841] Bluetooth: MGMT ver 1.23 [ 978.181170][ T9140] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 978.391801][ T9140] usb 6-1: Using ep0 maxpacket: 8 [ 978.484702][ T9140] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 978.494171][ T9140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.502469][ T9140] usb 6-1: Product: syz [ 978.506734][ T9140] usb 6-1: Manufacturer: syz [ 978.511558][ T9140] usb 6-1: SerialNumber: syz [ 978.529475][T11860] netlink: 'syz.0.2293': attribute type 4 has an invalid length. [ 978.613730][T11862] netlink: 'syz.0.2293': attribute type 4 has an invalid length. [ 978.644210][ T9140] usb 6-1: config 0 descriptor?? [ 978.701259][ T9140] gspca_main: se401-2.14.0 probing 047d:5003 [ 980.796522][ T9140] gspca_se401: read req failed req 0x06 error -19 [ 980.850243][ T9140] usb 6-1: USB disconnect, device number 10 [ 981.788873][T11880] binder: 11879:11880 ioctl 4018620d 0 returned -22 [ 981.826623][T11878] netlink: 704 bytes leftover after parsing attributes in process `syz.5.2301'. [ 982.170702][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2302'. [ 984.879197][T11897] netlink: 'syz.9.2306': attribute type 4 has an invalid length. [ 984.949393][T11901] netlink: 'syz.9.2306': attribute type 4 has an invalid length. [ 987.502946][T11918] IPv6: NLM_F_REPLACE set, but no existing node found! [ 988.671424][T11923] binder: 11922:11923 ioctl 4018620d 0 returned -22 [ 988.989346][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2316'. [ 990.722782][T11940] netlink: 'syz.4.2322': attribute type 4 has an invalid length. [ 990.813434][T11941] netlink: 'syz.4.2322': attribute type 4 has an invalid length. [ 991.964194][T11944] netlink: 'syz.0.2323': attribute type 10 has an invalid length. [ 991.972397][T11944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2323'. [ 991.981877][T11944] batadv0: entered promiscuous mode [ 991.987289][T11944] batadv0: entered allmulticast mode [ 992.001525][T11944] bridge0: port 3(batadv0) entered blocking state [ 992.008867][T11944] bridge0: port 3(batadv0) entered disabled state [ 992.020379][T11944] bridge0: port 3(batadv0) entered blocking state [ 992.027283][T11944] bridge0: port 3(batadv0) entered forwarding state [ 992.365607][T10845] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 992.375202][T10845] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 992.777378][T11956] binder: 11954:11956 ioctl 4018620d 0 returned -22 [ 993.494236][T11967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 993.563935][T11967] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 993.576665][T11967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 993.602199][T11967] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 993.621303][T11967] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 993.653080][T11967] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 995.711260][ T9396] Bluetooth: hci4: command tx timeout [ 996.802226][T11982] netlink: 'syz.9.2336': attribute type 4 has an invalid length. [ 996.837655][T11982] netlink: 'syz.9.2336': attribute type 4 has an invalid length. [ 997.714094][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2340'. [ 997.723462][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2340'. [ 997.811583][ T9396] Bluetooth: hci4: command tx timeout [ 998.171490][T11992] fuse: Bad value for 'fd' [ 998.591859][T11995] binder: BINDER_SET_CONTEXT_MGR already set [ 998.598089][T11995] binder: 11994:11995 ioctl 4018620d 20000040 returned -16 [ 998.732279][T11963] chnl_net:caif_netlink_parms(): no params data found [ 999.871057][ T9396] Bluetooth: hci4: command tx timeout [ 1002.512280][ T9396] Bluetooth: hci4: command tx timeout [ 1002.770440][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.778570][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.787216][T11963] bridge_slave_0: entered allmulticast mode [ 1002.797318][T11963] bridge_slave_0: entered promiscuous mode [ 1004.113269][T12020] netlink: 'syz.5.2348': attribute type 4 has an invalid length. [ 1004.177426][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.191091][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.199078][T11963] bridge_slave_1: entered allmulticast mode [ 1004.208352][T11963] bridge_slave_1: entered promiscuous mode [ 1004.633155][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.672699][T11967] Bluetooth: hci3: command 0x0406 tx timeout [ 1004.727748][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.860411][T11963] team0: Port device team_slave_0 added [ 1004.934300][T11963] team0: Port device team_slave_1 added [ 1005.357622][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.365031][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.391899][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.515062][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.522374][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.552388][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.143944][T12040] fuse: Bad value for 'fd' [ 1008.292437][T11963] hsr_slave_0: entered promiscuous mode [ 1008.303380][T11963] hsr_slave_1: entered promiscuous mode [ 1008.311290][T11963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1008.318964][T11963] Cannot create hsr debugfs directory [ 1008.515439][T12045] binder: BINDER_SET_CONTEXT_MGR already set [ 1008.522522][T12045] binder: 12044:12045 ioctl 4018620d 20000040 returned -16 [ 1009.513171][T12054] netlink: 'syz.0.2359': attribute type 4 has an invalid length. [ 1011.815911][T11963] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1011.882325][T11963] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1011.958515][T11963] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1012.074687][T11963] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1013.984334][ T9140] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1014.211697][ T9140] usb 1-1: device descriptor read/64, error -71 [ 1014.461605][ T9140] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1014.624870][T12084] netlink: 704 bytes leftover after parsing attributes in process `syz.9.2369'. [ 1014.652000][ T9140] usb 1-1: device descriptor read/64, error -71 [ 1014.768544][ T9140] usb usb1-port1: attempt power cycle [ 1015.137537][T11963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.161558][ T9140] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1015.223744][ T9140] usb 1-1: device descriptor read/8, error -71 [ 1015.363442][T12091] loop7: detected capacity change from 0 to 16384 [ 1015.392293][T12091] loop7: detected capacity change from 16384 to 16383 [ 1015.467452][T11963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.481433][ T9140] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1015.576159][ T9140] usb 1-1: device descriptor read/8, error -71 [ 1015.656634][T10845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.665111][T10845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.719289][ T9140] usb usb1-port1: unable to enumerate USB device [ 1015.833006][T10845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.841114][T10845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.713674][ T8] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1017.023694][ T8] usb 10-1: device descriptor read/64, error -71 [ 1017.302916][ T8] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1017.505665][ T8] usb 10-1: device descriptor read/64, error -71 [ 1017.657523][ T8] usb usb10-port1: attempt power cycle [ 1017.778659][T12105] netlink: 'syz.0.2375': attribute type 4 has an invalid length. [ 1018.205701][ T8] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1018.285337][ T8] usb 10-1: device descriptor read/8, error -71 [ 1018.562681][ T8] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1018.634803][ T8] usb 10-1: device descriptor read/8, error -71 [ 1018.782976][ T8] usb usb10-port1: unable to enumerate USB device [ 1019.764159][T11963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.302425][T12117] netlink: 544 bytes leftover after parsing attributes in process `syz.9.2380'. [ 1021.081882][T11963] veth0_vlan: entered promiscuous mode [ 1021.572267][T11963] veth1_vlan: entered promiscuous mode [ 1021.980095][T11963] veth0_macvtap: entered promiscuous mode [ 1022.073144][T11963] veth1_macvtap: entered promiscuous mode [ 1022.163599][ T5837] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1022.240195][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.251928][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.262149][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.272931][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.283191][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.293918][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.304021][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.319218][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.335527][T11963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.417029][ T5837] usb 10-1: device descriptor read/64, error -71 [ 1022.731520][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.742272][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.752561][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.763296][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.773481][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.784274][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.794437][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.805214][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.826425][T11963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.873885][T11963] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.883023][T11963] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.892156][T11963] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.901216][T11963] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.926696][ T5837] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1023.095275][ T5837] usb 10-1: device descriptor read/64, error -71 [ 1023.107845][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.114678][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.122394][T12135] netlink: 'syz.4.2386': attribute type 4 has an invalid length. [ 1023.217732][ T5837] usb usb10-port1: attempt power cycle [ 1023.601365][ T5837] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1023.658771][ T5837] usb 10-1: device descriptor read/8, error -71 [ 1023.922747][ T5837] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1023.982584][ T5837] usb 10-1: device descriptor read/8, error -71 [ 1023.992012][ T44] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1024.096125][ T5837] usb usb10-port1: unable to enumerate USB device [ 1024.184775][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 1024.228976][ T44] usb 1-1: config index 0 descriptor too short (expected 255, got 27) [ 1024.237690][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.248322][ T44] usb 1-1: config 0 has no interfaces? [ 1024.288689][ T44] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1024.298854][ T44] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1024.309141][ T44] usb 1-1: Product: syz [ 1024.313627][ T44] usb 1-1: SerialNumber: syz [ 1024.344152][ T44] usb 1-1: config 0 descriptor?? [ 1024.580232][ T5837] usb 1-1: USB disconnect, device number 16 [ 1024.611562][T12159] netlink: 544 bytes leftover after parsing attributes in process `syz.4.2393'. [ 1025.461986][T12170] netlink: 'syz.0.2397': attribute type 4 has an invalid length. [ 1025.491863][ T8] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1025.657449][ T8] usb 10-1: config 2 has an invalid interface number: 186 but max is 0 [ 1025.666399][ T8] usb 10-1: config 2 has no interface number 0 [ 1025.673074][ T8] usb 10-1: config 2 interface 186 has no altsetting 0 [ 1025.736677][ T8] usb 10-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 1025.746535][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.755238][ T8] usb 10-1: Product: syz [ 1025.759698][ T8] usb 10-1: Manufacturer: syz [ 1025.764710][ T8] usb 10-1: SerialNumber: syz [ 1026.601688][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1026.672340][T12165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.682252][T12165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.791286][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 1026.876394][ T44] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1026.879267][ T8] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.9-1, 30:19:84:68:80:88. [ 1026.886515][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.903711][ T44] usb 1-1: Product: syz [ 1026.908074][ T44] usb 1-1: Manufacturer: syz [ 1026.913759][ T44] usb 1-1: SerialNumber: syz [ 1026.956172][ T8] usb 10-1: USB disconnect, device number 14 [ 1027.003238][ T44] usb 1-1: config 0 descriptor?? [ 1027.032430][ T44] gspca_main: se401-2.14.0 probing 047d:5003 [ 1027.670183][ T44] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input41 [ 1027.769781][ T44] usb 1-1: USB disconnect, device number 17 [ 1027.876298][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2402'. [ 1028.269885][ T4021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.280125][ T4021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.646363][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.655519][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.721244][ T8] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1028.792184][ T9140] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1028.942531][ T8] usb 10-1: config index 0 descriptor too short (expected 255, got 27) [ 1028.951274][ T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.962020][ T8] usb 10-1: config 0 has no interfaces? [ 1028.977410][ T9140] usb 5-1: device descriptor read/64, error -71 [ 1029.014499][ T8] usb 10-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1029.024218][ T8] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1029.032887][ T8] usb 10-1: Product: syz [ 1029.037341][ T8] usb 10-1: SerialNumber: syz [ 1029.070436][ T8] usb 10-1: config 0 descriptor?? [ 1029.248868][ T9140] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1029.329391][ T8] usb 10-1: USB disconnect, device number 15 [ 1029.441096][ T9140] usb 5-1: device descriptor read/64, error -71 [ 1029.553373][ T9140] usb usb5-port1: attempt power cycle [ 1030.422493][T11967] Bluetooth: hci0: command 0x0406 tx timeout [ 1030.781119][ T9140] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1030.838081][ T9140] usb 5-1: device descriptor read/8, error -71 [ 1031.352903][ T9140] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1031.434108][ T9140] usb 5-1: device descriptor read/8, error -71 [ 1031.591756][ T9140] usb usb5-port1: unable to enumerate USB device [ 1032.104279][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 1032.831676][ T5837] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1032.901379][ T44] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1032.971546][T10772] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1033.019312][ T5837] usb 10-1: config 2 has an invalid interface number: 186 but max is 0 [ 1033.028311][ T5837] usb 10-1: config 2 has no interface number 0 [ 1033.034999][ T5837] usb 10-1: config 2 interface 186 has no altsetting 0 [ 1033.094353][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 1033.127890][ T5837] usb 10-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 1033.137535][ T5837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.146040][ T5837] usb 10-1: Product: syz [ 1033.150494][ T5837] usb 10-1: Manufacturer: syz [ 1033.155503][ T5837] usb 10-1: SerialNumber: syz [ 1033.212999][T10772] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1033.226423][T10772] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1033.236455][T10772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.252210][ T44] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1033.261698][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.274239][ T44] usb 1-1: Product: syz [ 1033.278624][ T44] usb 1-1: Manufacturer: syz [ 1033.284943][ T44] usb 1-1: SerialNumber: syz [ 1033.310892][T10772] usb 2-1: config 0 descriptor?? [ 1033.332819][ T44] usb 1-1: config 0 descriptor?? [ 1033.373482][T10772] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1033.405772][ T44] gspca_main: se401-2.14.0 probing 047d:5003 [ 1034.014526][ T9140] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1034.022890][ T44] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 1034.058134][ T44] usb 1-1: USB disconnect, device number 18 [ 1034.170147][T12226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.182069][T12226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.256981][ T9140] usb 5-1: config index 0 descriptor too short (expected 255, got 27) [ 1034.265600][ T9140] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.276514][ T9140] usb 5-1: config 0 has no interfaces? [ 1034.294933][ T5837] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.9-1, b8:87:55:1a:81:88. [ 1034.330508][ T9140] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1034.340397][ T9140] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1034.349006][ T9140] usb 5-1: Product: syz [ 1034.353565][ T9140] usb 5-1: SerialNumber: syz [ 1034.418582][ T9140] usb 5-1: config 0 descriptor?? [ 1034.434176][ T5837] usb 10-1: USB disconnect, device number 16 [ 1034.663103][ T9140] usb 5-1: USB disconnect, device number 31 [ 1035.161701][T12248] netlink: 'syz.0.2424': attribute type 8 has an invalid length. [ 1035.169834][T12248] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.2424'. [ 1035.366211][T12252] netlink: 'syz.9.2426': attribute type 2 has an invalid length. [ 1035.374484][T12252] netlink: 85376 bytes leftover after parsing attributes in process `syz.9.2426'. [ 1036.124832][ T9140] usb 2-1: USB disconnect, device number 9 [ 1038.273561][ T5837] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1038.460193][ T5837] usb 2-1: config 2 has an invalid interface number: 186 but max is 0 [ 1038.468802][ T5837] usb 2-1: config 2 has no interface number 0 [ 1038.475524][ T5837] usb 2-1: config 2 interface 186 has no altsetting 0 [ 1038.575178][ T5837] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 1038.584849][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.597649][ T5837] usb 2-1: Product: syz [ 1038.603386][ T5837] usb 2-1: Manufacturer: syz [ 1038.608188][ T5837] usb 2-1: SerialNumber: syz [ 1039.577603][T12270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.587964][T12270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.756880][ T5837] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, c0:87:55:1a:81:88. [ 1039.866196][ T5837] usb 2-1: USB disconnect, device number 10 [ 1040.041897][ T44] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1040.241319][ T44] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1040.249875][ T44] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.261016][ T44] usb 10-1: config 0 has no interface number 0 [ 1040.267441][ T44] usb 10-1: config 0 interface 2 has no altsetting 0 [ 1040.368053][ T44] usb 10-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1040.377648][ T44] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1040.386359][ T44] usb 10-1: Product: syz [ 1040.390933][ T44] usb 10-1: SerialNumber: syz [ 1040.497803][T11967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1040.509116][T11967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1040.513639][ T44] usb 10-1: config 0 descriptor?? [ 1040.546377][T11967] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1040.583963][T11967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1040.600670][T11967] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1040.610707][ T44] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1040.625522][T11967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1040.755849][ T44] snd-usb-audio 10-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 1040.862491][ T44] usb 10-1: USB disconnect, device number 17 [ 1040.883805][T10790] udevd[10790]: setting owner of /dev/bus/usb/010/017 to uid=0, gid=0 failed: No such file or directory [ 1041.147902][ T9140] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1041.214781][T10868] udevd[10868]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.352405][ T9140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.366811][ T9140] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1041.377576][ T9140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.465671][ T9140] usb 2-1: config 0 descriptor?? [ 1041.537054][ T9140] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1042.024075][T12280] chnl_net:caif_netlink_parms(): no params data found [ 1042.123809][T12301] ===================================================== [ 1042.131238][T12301] BUG: KMSAN: uninit-value in batadv_get_vid+0x215/0x360 [ 1042.138458][T12301] batadv_get_vid+0x215/0x360 [ 1042.143515][T12301] batadv_interface_tx+0x31c/0x1db0 [ 1042.148917][T12301] dev_hard_start_xmit+0x247/0xa20 [ 1042.154437][T12301] __dev_queue_xmit+0x366a/0x57d0 [ 1042.159691][T12301] __bpf_redirect+0x1511/0x1690 [ 1042.164981][T12301] bpf_clone_redirect+0x37e/0x500 [ 1042.170216][T12301] ___bpf_prog_run+0x13fe/0xe0f0 [ 1042.175498][T12301] __bpf_prog_run512+0xc5/0xf0 [ 1042.180425][T12301] bpf_test_run+0x546/0xd20 [ 1042.185235][T12301] bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1042.190964][T12301] bpf_prog_test_run+0x5e5/0xa30 [ 1042.196078][T12301] __sys_bpf+0x6aa/0xd90 [ 1042.200527][T12301] __x64_sys_bpf+0xa0/0xe0 [ 1042.205272][T12301] x64_sys_call+0x329c/0x3c30 [ 1042.210140][T12301] do_syscall_64+0xcd/0x1e0 [ 1042.214959][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.221168][T12301] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1042.223583][T12301] Uninit was created at: [ 1042.228061][T12301] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 1042.234271][T12301] kmalloc_reserve+0x13d/0x4a0 [ 1042.239237][T12301] pskb_expand_head+0x226/0x1a60 [ 1042.244459][T12301] skb_ensure_writable+0x496/0x520 [ 1042.249782][T12301] bpf_clone_redirect+0x1c5/0x500 [ 1042.255121][T12301] ___bpf_prog_run+0x13fe/0xe0f0 [ 1042.260280][T12301] __bpf_prog_run512+0xc5/0xf0 [ 1042.265333][T12301] bpf_test_run+0x546/0xd20 [ 1042.270012][T12301] bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1042.275785][T12301] bpf_prog_test_run+0x5e5/0xa30 [ 1042.280974][T12301] __sys_bpf+0x6aa/0xd90 [ 1042.285430][T12301] __x64_sys_bpf+0xa0/0xe0 [ 1042.290047][T12301] x64_sys_call+0x329c/0x3c30 [ 1042.295013][T12301] do_syscall_64+0xcd/0x1e0 [ 1042.299713][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.305943][T12301] [ 1042.308459][T12301] CPU: 0 UID: 0 PID: 12301 Comm: syz.9.2446 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 1042.319233][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1042.329694][T12301] ===================================================== [ 1042.336866][T12301] Disabling lock debugging due to kernel taint [ 1042.343252][T12301] Kernel panic - not syncing: kmsan.panic set ... [ 1042.349816][T12301] CPU: 0 UID: 0 PID: 12301 Comm: syz.9.2446 Tainted: G B 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 1042.361926][T12301] Tainted: [B]=BAD_PAGE [ 1042.366206][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1042.376430][T12301] Call Trace: [ 1042.379829][T12301] <TASK> [ 1042.382874][T12301] dump_stack_lvl+0x216/0x2d0 [ 1042.387739][T12301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.393791][T12301] dump_stack+0x1e/0x24 [ 1042.398121][T12301] panic+0x4e2/0xcf0 [ 1042.402239][T12301] ? kmsan_get_metadata+0x51/0x1c0 [ 1042.407635][T12301] kmsan_report+0x2c7/0x2d0 [ 1042.412361][T12301] ? is_module_text_address+0x1b3/0x250 [ 1042.418101][T12301] ? __msan_warning+0x95/0x120 [ 1042.423072][T12301] ? batadv_get_vid+0x215/0x360 [ 1042.428113][T12301] ? batadv_interface_tx+0x31c/0x1db0 [ 1042.433694][T12301] ? dev_hard_start_xmit+0x247/0xa20 [ 1042.439201][T12301] ? __dev_queue_xmit+0x366a/0x57d0 [ 1042.444612][T12301] ? __bpf_redirect+0x1511/0x1690 [ 1042.449839][T12301] ? bpf_clone_redirect+0x37e/0x500 [ 1042.455239][T12301] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 1042.460563][T12301] ? __bpf_prog_run512+0xc5/0xf0 [ 1042.465653][T12301] ? bpf_test_run+0x546/0xd20 [ 1042.470498][T12301] ? bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1042.476303][T12301] ? bpf_prog_test_run+0x5e5/0xa30 [ 1042.481582][T12301] ? __sys_bpf+0x6aa/0xd90 [ 1042.486207][T12301] ? __x64_sys_bpf+0xa0/0xe0 [ 1042.490989][T12301] ? x64_sys_call+0x329c/0x3c30 [ 1042.496014][T12301] ? do_syscall_64+0xcd/0x1e0 [ 1042.500881][T12301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.507157][T12301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.513191][T12301] ? do_syscall_64+0xcd/0x1e0 [ 1042.518060][T12301] ? filter_irq_stacks+0x60/0x1a0 [ 1042.523303][T12301] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.528700][T12301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.534712][T12301] ? batadv_interface_tx+0xc6/0x1db0 [ 1042.540180][T12301] ? filter_irq_stacks+0x60/0x1a0 [ 1042.545421][T12301] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.550819][T12301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.557011][T12301] __msan_warning+0x95/0x120 [ 1042.561784][T12301] batadv_get_vid+0x215/0x360 [ 1042.566628][T12301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.572648][T12301] batadv_interface_tx+0x31c/0x1db0 [ 1042.578035][T12301] ? netif_skb_features+0x11fa/0x13f0 [ 1042.583626][T12301] ? __dev_queue_xmit+0xac/0x57d0 [ 1042.588859][T12301] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.594271][T12301] ? __pfx_batadv_interface_tx+0x10/0x10 [ 1042.600095][T12301] ? __pfx_batadv_interface_tx+0x10/0x10 [ 1042.605927][T12301] dev_hard_start_xmit+0x247/0xa20 [ 1042.611278][T12301] __dev_queue_xmit+0x366a/0x57d0 [ 1042.616511][T12301] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.621911][T12301] ? __dev_queue_xmit+0x3d6/0x57d0 [ 1042.627268][T12301] __bpf_redirect+0x1511/0x1690 [ 1042.632341][T12301] bpf_clone_redirect+0x37e/0x500 [ 1042.637583][T12301] ___bpf_prog_run+0x13fe/0xe0f0 [ 1042.642751][T12301] __bpf_prog_run512+0xc5/0xf0 [ 1042.647680][T12301] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1042.654214][T12301] ? kmsan_internal_poison_memory+0x7d/0x90 [ 1042.660289][T12301] ? kmsan_internal_poison_memory+0x49/0x90 [ 1042.666370][T12301] ? kmsan_slab_alloc+0xdf/0x160 [ 1042.671490][T12301] ? kmem_cache_alloc_noprof+0x915/0xe10 [ 1042.677300][T12301] ? slab_build_skb+0x5c/0x560 [ 1042.682258][T12301] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.687661][T12301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.693701][T12301] ? bpf_test_run+0x101/0xd20 [ 1042.698560][T12301] ? filter_irq_stacks+0x60/0x1a0 [ 1042.703805][T12301] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.709228][T12301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.715253][T12301] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.720758][T12301] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.726182][T12301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.732206][T12301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.738223][T12301] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1042.743850][T12301] bpf_test_run+0x546/0xd20 [ 1042.748523][T12301] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.753924][T12301] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1042.760459][T12301] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.765862][T12301] ? bpf_test_run+0x3af/0xd20 [ 1042.770714][T12301] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.776733][T12301] bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1042.782393][T12301] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1042.788382][T12301] bpf_prog_test_run+0x5e5/0xa30 [ 1042.793524][T12301] __sys_bpf+0x6aa/0xd90 [ 1042.798008][T12301] __x64_sys_bpf+0xa0/0xe0 [ 1042.802621][T12301] x64_sys_call+0x329c/0x3c30 [ 1042.807482][T12301] do_syscall_64+0xcd/0x1e0 [ 1042.812174][T12301] ? clear_bhb_loop+0x25/0x80 [ 1042.817052][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.823155][T12301] RIP: 0033:0x7f4eb758cd29 [ 1042.827712][T12301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.847594][T12301] RSP: 002b:00007f4eb8327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1042.856183][T12301] RAX: ffffffffffffffda RBX: 00007f4eb77a5fa0 RCX: 00007f4eb758cd29 [ 1042.864304][T12301] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 000000000000000a [ 1042.872410][T12301] RBP: 00007f4eb760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1042.880521][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.888621][T12301] R13: 0000000000000000 R14: 00007f4eb77a5fa0 R15: 00007ffc3ef46098 [ 1042.896749][T12301] </TASK> [ 1042.900147][T12301] Kernel Offset: disabled [ 1042.904532][T12301] Rebooting in 86400 seconds..