last executing test programs: 9.813078587s ago: executing program 0 (id=545): socket$inet6(0xa, 0x3, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.699839066s ago: executing program 0 (id=547): iopl(0x3) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, &(0x7f0000000500)) 7.549161185s ago: executing program 0 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc45", 0xcb}], 0x1}, 0x20048812) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f00002a0000/0x4000)=nil) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x4, 0x1, 0x6c}, 0x2c) 7.548690435s ago: executing program 1 (id=550): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x8, 0x0, 0xf}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r2 = syz_io_uring_setup(0x891, &(0x7f0000000240)={0x0, 0x542e, 0x80, 0x2, 0xc7}, 0x0, &(0x7f00000000c0)=0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0xffffffff, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 6.766303586s ago: executing program 1 (id=553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) setsockopt$ax25_int(r4, 0x101, 0x8, &(0x7f0000000080)=0x9, 0x4) 6.045122974s ago: executing program 3 (id=554): syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000500)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, 0x2, 0xf, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null]}) 5.916088133s ago: executing program 2 (id=556): write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x7}}) r7 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r7, 0x2, 0x5002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x3, @loopback, 0xad}, 0x1c, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000300)="126c94c8f4d9a9ba4882fc5541a636f2c55c2a568d1f1c6ca86552f53ad0f1971aebfe4ca951c4c0cc8b59df6b1b9ba53b97a4571009ddb27e04cdab2aeea066daf8d970ad58850b69ed3549007622c388e3b874c0cd0cf6ba3162548be94c33ad44b3ae8d070ef09f54a434e08a403ed40eae78952b2264c841b2ba55b0f6c131a2b9f9a90ca93586ebe87a0f283ec54e55de993f6d03676b8b6bbaab7e125a506bdbaa230a0de78aafd2499be9f8a94d0ac3233525a484937c8c9f5ebe7b0d91576d38022aff36204ba7905b43e5429c478bce6d", 0xd5}, {&(0x7f0000000180)="4f87929f6d046e15dab65b2b035107cfc8334a75ff0d35005246adec857d2dcc701ca0ef5a777f771e881f797c700e1b4c2fef9cb9021436528a58cd54d7fad2d8560768", 0x44}, {&(0x7f0000000400)="f41bcb8daaad6ddef1c29491e372cc1b1d95653dcb8915b104489800beeddd785fa5e33715b043077916397f85f74980edc9cfda26cb0df66d2941346b0c6026162030b2ffe76a3bcc2144d13430379d813995f53a65a049419a2a7ec0abd63d3e01027e8c7b405c6850b52a99195446e49ece47d411f84961ae994de118a5124fc54f6d9fd9cbc67338ccc246119288c96146df182e0d78a7ffb9967d1c93b22f973b4246b2e7b95b39dd8e706a77b24342ef2094e0db0bc0c11c804044f812d6154d6fa042ed0be4c7fc7b5cf64ab9dcef12c6f74ec7e30530b130d77782853e9fb1c1cce55584554a917edbdc33aebedd49ed8ac7b9dbad4079f7b7890f067a4d9e9c3f9d00ea21488769c8bc79b5e3e1a712a119b5db974c6983ea2482266b10a8d1d1937dee5abe901bfc132f83ae526b40626c3d6224e5bf9fd17b321a7285e3bad872755fba2df5cd8e4a787bc1bc5cc75657f774187ea0499fe05a263ee8138dceaa12f9cf4c0418b40aac4d5f0189e637013b0e695e0ae78deea53d93174c13fb839eff58524eedf215f930528d9a5d1c186ef6e9d8010e740066427e8b93e89912d71a21dc85a47ff72bbcf1f5e59121e0f154bdc2a469f92a15f5c59d935bfb3e03e619a74bcc538ae0e10b7f635733c37812b0695b7908fb550834e9806a342f51f2e33b51fcd868d2c56b803bf94c9b52475cdf9ff7de684cdb3bdf34bc7c44d05e7f4b5e9634ea4772c512ec7e62041c4439a9da27d7cd2a8e8f993cd216f22084a3ca97de83f75a8378b1be94564ec1495f775e7f767492a7a13771e4bcd27a58af53d45b58d390686cfcdeb10eaf6c483711355d5895676c978d490775c436e936ad0f83bb6bfb78bba325df16e45c1641674cc20591820bf343389f967a08b525a2dd90dfd76e930762f173de08790b289a86b9fa523b0f5182409a4586533a182daa363fac9ee87c1480cd4d395c18b44b5b4550553469bdf373710c613c59a572ed3e824e71f99493e4676cf4886495b2f52ce4f89c2fa75aed0231fe8aeb4b7c2ba18a9a841e6a7ac9999842a7f8f19cd2ce196c1b025ca6c382ab3454ad80396d0f61551a8f1d2b00c99c585091209ccb9eda2cfd1d8813818cc14f10010c3625361d2286077ea2603321ded625b554fb6f56057d98232a728b7aabd31694f0f63a5ca9225085ea24fbab76ad2799284a8ce568da0ab60b981d4f0e998e90bf7bfd1ad24a4a4d3e9fea202a9fcd359f30faa83e9166896475f77293d2b7d5d28349d53514315d5e839a0bd3dd2c9ae441af0c11f1e018ea1cc9e5536734391d68150372cefcccae4a96f13cfa6cb8b87649169ad2ddd090a14f7860322b65b8640f50fca3946b47daaa734870a5b8af5a7a2c288c0410e1a6dfea0af3e0b6e3a0e741de28efbd41b8091aa0f573c34c8ba0a2f1dc03a9fd6362ac705cc9d5764152c544280cf74138e4629d89117025a2673a774bdf2cb086fc07a03f69396c681e29bb0d089deb6bb4503961c06b67b02d31722abaf0ff0c956272d0b9610651d4d728cae8185e23bf26ccf32ff634e8d4a2a8845e30baa7a1407cd52d72f7bf7e772cdaa01da28afb226c53d3386ae652ca4560dae48911b6dc41af4297cc7eb3f202c20a1847f8cb4633dd312f3352f9bd67ddb568cf42406d862c8c7f6f3f9a839c795eddf79c2a78529c9f456e7bc0ab6ade668a15b5c05a27253019c83c32b411128e80f66fb833d5767493b17a6aa0d20896d7a4e670247bfd9547964039519bbb9466025485e864161b7b3d9c9a3a7ced7a71fddbfd906dda0da16d83ca4c41d9581729cbb19c0888101531bc91a8faaee5006ab345469ff72e845d6425b6ac70df731118f2f09004d41c2e984d17c6eab5638aed9cb2da24ad3d97083ac7b6909434ba98a4d70a6bc25634d56a40f22b268fdce1cff47b7a736964434a2abd38a28a308344f9900df5ca3e969aab754a63b39f2e4b4a336d5f0a5da00374514cdf7c44bc3294b3666497933bd4b86f9ae5358bd37377194a7222256eaea2e0b862a08ccaeeb61baec6b5cafc25025ea72f697615eb3912e02c5ec06b9592f5b42ca52affd6ebf9f45bd04ac2e47146789bf2f6ede14b068c4b4716fb4f9fb50366f55b3ff24401a8987989454c4a427cd47e83cb39d950984f39e3539f0d0979b928bc94cc3a8ada93c517b799641f1ea9e8b9784311cf34eec979410c8e4b8e192dda14268db644afdeded7904e43b081c019f103fde470bbb7bc16da2b3fb5a7f61b94083ca74de8fac837ab2ba3b93991971d451433d4413997869baf68fe2268c8c0446d7d8cea990ccc7ec1759c6552102c8ae438fa4661325dc055b97ee74e1e537e84acf4d8c6ba8ad2759f0b3cde88d91fa5656dc86be86713fd8258b344584bfa3f6b4940a60bfa1057273fe81c472d0b6a8b4921bd74487452ddfec4d1f47137578ce51996441336daf3cf98b5b6e0dc179a3c8c284ffeb5e7345091e3ebc133142938bc7f9910b8b77c6b6b35389bac78708d2808b923c8e8c3a059cb1bad448c75f0debdb5a4fe09ec7003cfdd7ceef460bbf35c024a6bab76ad9f9f5771ac198743c89f43e3e1df96e266be134a39a28b4b8c451f17292b09d71783159eda6713ffecf95457515719b927a5d218247617b5ee567d9284ed05fbd1635c48b94d9d44e972f5292e955d4efe8d1c0d07e364ac1048fd32822a315510776b031d1ae90d1675fa8074863f6ee1723cba0658a959316fcff55288053340f7762db02a1128c3fc4053a70528a9e88f25283f75b9dfb3a4ea5524cd90c9c9199f8b279c7781135f540ef3e99c40b163003fbc6bc5ebef763748888827d24bdc72e975907effd31f6423b6258119851cb65e394d5e9b5ae1ed48b29870df0bf8002652c8263642f204de26268ff30ad0e006e7566ca14e9f284b36f4be18152ecfb367e8e9bb8c3e1fe6bcb12311a0958d38bdb2a5d38bde9b938396e3fdd7c1fd068e3a4a24c5168b6b616ba7de569a4e4e772a006239cf4cf4645bd1d3e2e3399f53af50ab7b060d16f7a30caee48adca05a88828b0d62b302b77a24777cd8a1439bbd27148bee208e80c6dbb21629686e00018ba4c5d38cd5acb43be764fc0744f7aea69154faa77b20f5423fc5d814bc42e4fe53615a82db0310034b12b0506996bd02a478bf7069169a6af61cd9462a706096bee346bc1463ac67848ed0b77fc4685f9db2aa0109bd279464b0d4b6918fdbfd466bbc867721397d355ede68b19ea5979f4265dbfea0d9d858fb53260b91de1147f4b73b7930032454c4ff41185e733c853893b25f252ac356cdcb0eacca022575e3db3cd4cef002b4f48b57c04de6ea615325ee534b00014f320f5daa7fffc8722c7e395354250c01a9714893daec1ade1fef734bfd50cbd5a2bf5f2893b36b44077d5079c16d51ab4e3bfb88b9e2cc4a2b514695e14e5c8a368f23dbe52709b45aaa0649b98a9df3352bc842d51301779d192bdd2cc56e628c36152bba0e6394e8d18d2c6826f113a32221cd09e029e7c55783b171605f02d82ebe574cfa6913ec75f1f39348ef7a6d87dc6444596ead33ddc7319aa31a49f7cb8bbed86ec2900d819f5392c35bd45b270267bba003c042ab102e7c4ae366c48407a72758844a432cbb00cb31a2a1729adf4ea7096025a748c62f62cd44d6b8c53efd83235f2cfc6fdb3ae74dfd0f3340b5843c4801f89548fff2f9500a88d1abea910eac824543416da1ecbbdf0d473335b073a5360b65315d6079e41817d18a782fea478e697d483aaa3fbc69e1037273c6107c6ef78227640d2be57ff141dc74b93a5fb55829c6e4c92cc54b334c3496b216304bcecae51567b46168f38d847a406dd5763b47ea0d8f39fd995045c5d568db0ab9de9af5e884cf74d4d59d80c37b568c6b364a79593b2b95d8dbdb7a715a15740ff4020c0372b96ffb06a4d6f5dd65d0fd3381bfb273e5d68a7f45fe0f826d7eff168bb5fcc048d40321ad6fe3444bbaf3641bc587133e8095f51715ed9d6429fdfc09b495d19a3527bf7ab9c44faf3ec7436c645d29dcca52d3a770440366e3c112d6fd7999617bb1aee4ead1445f398f6cb51cbf212c77856866395d8836a54bc5aa1f3f0e7bc414db616e3fc78e85ed2ac3a0aa8e649e38dd1613a3d6a326cdc6fd30a860d5031237ac121e3dc835f252d2befb32fd2d9a747d989dc2a024c1097d181a30c92e147e43aadf15b1dea3774d0438698dc1631265d618552c87b4962aba360be004d33b10a5ed691b464ec05ceb6ea9f22120231199087d5e23d69788910f3b8988200f6bfe5556811f28699f0855bdfc576231316c19cbf166489b4dac9ddf39533817b65b2ac990d113e8e718e165e63ae8a743cf3ded2474a1b9bc9f76f9749e826d23d66c3a98ce3de972fba8291a8ab09546571d09a81debfb213495f7cdf713499e322f1c712874ce9375500b5cbd500cd6e6518de562fad218c54a3c6b10de4aec6ee184e1baef8ff266200a401e65867640bce7d0eeab957389cf0c5ba875f1a3551027fa0353ca35d86b90add212467762965a86ca2e889ad2b1f58208b56b20672aab6e236a054aebb907eba93b5bb1795a52bbe8ea08a8aa64b24ea6d8349cdd06029cbbf132df646576c749e5d6ad836cfee68a3dd1e7c0f9998f721261ff865243dd137cff5e6d5a3c00d4bb6d4301b06b87cceef34eb46f0a1f644af0b5acac86a167a28f865b3bd7ddd2a37edc8cc405d44ab0aeddd09db0d9bb108527074b947990abec3315daa28f4c795ee8953081afa7c33ff6766d62981591546b3c3482daa6516cbbd4a77acd57765948adb59c9b713fff83903699e060defe7bba2b9d47d9c71697a0d889bc0005f55fda0b46aedeb7f9448838ba4067dde03f3b906c25973217f9d0b3abd7ae7c1c61e759770abb1529c7ae72cd0c5e80f63049a7f5941636e3a45af3de6c07711ca57df06050bae814248afa34cbff849ccaf040e9d8a912ada85238c8518683ef4740b4a9296a81ee6387c43a79da8192e8ccc13534d8dd108fe3f2f7c729e690fa9c48f2689e1df917789d246a1452ff172217624a2a443bf7871efdcc8277b0c6ce01d90e56fdcc4abd671cdcb00eb323caf5e04b230b0c994c798fd2f9de221f2f84a9b85027337d4351632aaf5be45c3decb2a0d81062474c346ab9fb46c3c0850725e922429e1959b3e0ce066e2db57277466dae59271864f61cd4c80722cdb9a74f12e99383b50e994c273f6e29cbcb15a315ebc829f4edb15245f1fd23385c4439891192534b8ec880a2ebf71a4f9004caa07e8aa99f18bacf8a5d6a56dd82d68c578fe84fa9ef965eee4a525e8a8602d11b404ada7b44953a533186fadd87d710d8833e8636785f9471c67826445867aead7c34b7c7ce18710d8b21f8f57f2648ff626078e241d875ff7d9506f72448b716d2a467e4d17f88cda67004787275d24a3432ece65b396ca3a5b7138dccd09e940088dd30b0332e66c187bc3790c8dc6a89f4f3cc93e60801e55bdea8727362bd344f85a1d87f5238e61d9fe60da8737e8ecb5f17b75753cf04ebfc6f6d0ba98d8bb1c9fa553091b372854bb979784c901d5c37f7b515d0d7e44e2e29184d21e0bed6c79990b02999a19d57befc4dc54bd82abe9f624f4a68d645685f", 0xfc0}], 0x4, &(0x7f0000002a80)=ANY=[@ANYBLOB="c00000000000000029000000370000005c14000000000000c910fc020000000000000000000000000001c20400000000c2040000000407200000000106810600fdfffffffffffffff10b000000000000010000000000000005020003050200070001004a547088f8c5fdb5489984d6bf8aae32e875557bf165db01da2d67fe3efcea668be534c1fd70f29dc3cac2e636b423d646b4b1ca70461aff8b57fc8661710c42c126a916af5ac36f9b2af6837145e8cab6066e5eaec200000000000000180000000000000029000000370000006700000000000000f00000000000000029000000370000005e1a0000000000000414cc37c295288b65bcf0382fc8fdb6e22a25e9a4ed0001000100040108c910fe80000000000000000000000000003e1092faed2e8e6f476f93d0784b4577f3409e6c1db553121eee90f041d18a6a10a14f46b261cb74b10e24361b1f40169081fcbd57dd33a8a99dd0aa05853a255f662ddcd4a89a8dc1fa454f67ab5379c90e136050955453291b2a14fcc6d061246569520a7bcb2691ff65a3e4b20bf323bc96a3a7abc72a6bbcc809820265070f4a0faf9a768ab726c612d96e372d6f671af9056b05020006c20400000007c204000001000000000024000000000000002900000032000000", @ANYRES32=r9, @ANYBLOB="00000000f21e6f3d6722438a2f9ee909eea4271f8c8a289ed7b9c3709c484d18b4df7fd6e963fe79317bc61b5e53d875f85fd0f99651a2d4590c6a0d404d42ccc80d50f0bb444a412c6b09b8e58e7c16a4e3955b76"], 0x1f0}}, {{&(0x7f0000001640)={0xa, 0x4e21, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000002980)=[{&(0x7f0000001700)="879dabc8158488dc982ae34903b057dd60e01a8850b8cba601a7fd117d8a94847a2219a1d27e5909dc8c31554772bb614369b74f90e5385e11210dad79cad8563bf6509f533d0b8e7e23b0d22c5ee6e70b9bd22b59893cff338866ac158fd4516deea1c0df05c57eb9df605e5ff09b75b39621741b4eac2f344e2c4df3a71dfbc1ae84e1204d2674a97076d140f69923653b8b80cd381aa13ffd8c69b8fb3ac52f40073a097aa5603cec8616", 0xac}, {&(0x7f00000017c0)="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", 0xff0}, {&(0x7f00000027c0)="2e020f98a0c8d835bbb5419a018c0cd27bd8118e015402b8e87844e02cb7d7a62a76aef0175957e0e700e703f5155b11e50f3a11d4ea4231c5a39cde5623c51daf0b37e872e86535acc198c1628b7d73256199c16a5e73814e9b3d", 0x5b}, {&(0x7f0000002840)="cef13c04eea4a117bf42e360f50cb8e31a24e5080820959d23a3da7adcf802f6957cc01198ad8b433bf2602dead4c88ff9703196187e2c96c466a4bef7", 0x3d}, {&(0x7f0000002880)="b668ce5dde5916a85d70f6f8e4b7c6617c90473aeba071d10db79e888c2fec9c1c74efaa01124d2a993fcb132af331dc6275c18b6d01630f96ac3ef10229b94b8e33e7e8e00463bd978ed3cb43a8b93a3089c23ee47dde708eeb582a6e080dc574f9527d3bd4c8d739fb67545d9fe15853d2014e9b377b4c694c7ffdf05936254ec3fdc50a42eb529a40c63ec53423158dbe3f5832f85dc538959a51deb57dae9d96874398", 0xa5}, {&(0x7f0000002940)="3acd4e94bb3a1f0c4cd0a73eb489aaaf30978906997ec8d7b5940da94a62ae60fb645e", 0x23}], 0x6}}], 0x2, 0x44040) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x22, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r10, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x24040800) 5.477013748s ago: executing program 1 (id=557): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x8000000004) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r7, 0x3ff}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 5.45094918s ago: executing program 0 (id=558): iopl(0x3) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, &(0x7f0000000500)) 4.890541704s ago: executing program 3 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdd4, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 4.119113054s ago: executing program 1 (id=560): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0xe, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4.118568894s ago: executing program 2 (id=561): write$proc_mixer(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xaf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x1e, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd26}, 0x1c}}, 0x0) 3.92516014s ago: executing program 3 (id=562): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0xa2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x26008890) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 3.390667372s ago: executing program 2 (id=563): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 3.193617217s ago: executing program 3 (id=564): socket$inet6(0xa, 0x3, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.993362763s ago: executing program 1 (id=565): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) setsockopt$ax25_int(r4, 0x101, 0x8, &(0x7f0000000080)=0x9, 0x4) 2.717289535s ago: executing program 3 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc45", 0xcb}], 0x1}, 0x20048812) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f00002a0000/0x4000)=nil) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x4, 0x1, 0x6c}, 0x2c) 1.921111158s ago: executing program 1 (id=567): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000002bc0)={0x1, 0xb2, 0x2, &(0x7f0000000200)={0x1b, "2423e017bb456c5c4b7165a6d6af0b920bf04121f03300"}}) 1.907623439s ago: executing program 0 (id=568): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) getrusage(0x0, &(0x7f0000000380)) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a2100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0xe0, 0x100000, 0x0}) poll(&(0x7f00000000c0)=[{r0, 0x9746}], 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x4c, 0x200, 0x258, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@multicast1}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv6=@mcast1}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) close(r0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(0x0, 0xb) 1.807153637s ago: executing program 2 (id=569): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x8000000004) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r7, 0x3ff}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 240.19ms ago: executing program 3 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x488a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 215.155322ms ago: executing program 0 (id=571): syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x240004c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 214.694422ms ago: executing program 2 (id=572): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0xa2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x26008890) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 0s ago: executing program 2 (id=573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r3, @ANYBLOB="50002f800c"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.221' (ED25519) to the list of known hosts. [ 63.265086][ T5748] cgroup: Unknown subsys name 'net' [ 63.400130][ T5748] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.737435][ T5748] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.284892][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.285122][ T5766] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.301569][ T5766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.307922][ T5765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.311265][ T5769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.324982][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.325333][ T5765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.332511][ T5769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.341062][ T5765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.347632][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.354788][ T5765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.368547][ T5765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.376564][ T5765] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.384307][ T5769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.392597][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.400029][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.400455][ T5770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.407958][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.417072][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.422542][ T5769] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.429806][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.443537][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.454038][ T5081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.468797][ T5081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.829364][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 66.906883][ T5760] chnl_net:caif_netlink_parms(): no params data found [ 67.022005][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.042414][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.051295][ T5761] bridge_slave_0: entered allmulticast mode [ 67.058864][ T5761] bridge_slave_0: entered promiscuous mode [ 67.078812][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.086053][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.093168][ T5761] bridge_slave_1: entered allmulticast mode [ 67.100108][ T5761] bridge_slave_1: entered promiscuous mode [ 67.135755][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.153121][ T5759] chnl_net:caif_netlink_parms(): no params data found [ 67.165106][ T5758] chnl_net:caif_netlink_parms(): no params data found [ 67.182195][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.238031][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.245345][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.252487][ T5760] bridge_slave_0: entered allmulticast mode [ 67.260521][ T5760] bridge_slave_0: entered promiscuous mode [ 67.290912][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.298330][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.305604][ T5760] bridge_slave_1: entered allmulticast mode [ 67.312274][ T5760] bridge_slave_1: entered promiscuous mode [ 67.330448][ T5761] team0: Port device team_slave_0 added [ 67.339509][ T5761] team0: Port device team_slave_1 added [ 67.421296][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.441775][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.449288][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.456690][ T5759] bridge_slave_0: entered allmulticast mode [ 67.463410][ T5759] bridge_slave_0: entered promiscuous mode [ 67.471253][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.478590][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.504944][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.518443][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.525471][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.551541][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.564943][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.584736][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.591880][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.599126][ T5758] bridge_slave_0: entered allmulticast mode [ 67.606400][ T5758] bridge_slave_0: entered promiscuous mode [ 67.614791][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.621970][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.629524][ T5758] bridge_slave_1: entered allmulticast mode [ 67.637040][ T5758] bridge_slave_1: entered promiscuous mode [ 67.644086][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.651192][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.658585][ T5759] bridge_slave_1: entered allmulticast mode [ 67.666130][ T5759] bridge_slave_1: entered promiscuous mode [ 67.739831][ T5760] team0: Port device team_slave_0 added [ 67.749428][ T5760] team0: Port device team_slave_1 added [ 67.757918][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.770634][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.791005][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.803221][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.851166][ T5761] hsr_slave_0: entered promiscuous mode [ 67.857845][ T5761] hsr_slave_1: entered promiscuous mode [ 67.887688][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.894807][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.921046][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.948383][ T5758] team0: Port device team_slave_0 added [ 67.956960][ T5758] team0: Port device team_slave_1 added [ 67.972407][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.979513][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.005878][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.049972][ T5759] team0: Port device team_slave_0 added [ 68.058796][ T5759] team0: Port device team_slave_1 added [ 68.086671][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.094774][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.121514][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.138182][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.145193][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.171124][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.188834][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.195912][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.222456][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.262629][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.269650][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.296363][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.333960][ T5760] hsr_slave_0: entered promiscuous mode [ 68.340210][ T5760] hsr_slave_1: entered promiscuous mode [ 68.346679][ T5760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.354599][ T5760] Cannot create hsr debugfs directory [ 68.390391][ T5758] hsr_slave_0: entered promiscuous mode [ 68.396677][ T5758] hsr_slave_1: entered promiscuous mode [ 68.402693][ T5758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.410444][ T5758] Cannot create hsr debugfs directory [ 68.460792][ T5759] hsr_slave_0: entered promiscuous mode [ 68.467616][ T5759] hsr_slave_1: entered promiscuous mode [ 68.474066][ T5759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.481630][ T5759] Cannot create hsr debugfs directory [ 68.488662][ T5081] Bluetooth: hci1: command tx timeout [ 68.488674][ T5766] Bluetooth: hci0: command tx timeout [ 68.494354][ T5081] Bluetooth: hci3: command tx timeout [ 68.564575][ T5766] Bluetooth: hci2: command tx timeout [ 68.790913][ T5761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.804891][ T5761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.814751][ T5761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.832089][ T5761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.892828][ T5760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.903019][ T5760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.926460][ T5760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.939455][ T5760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.999827][ T5759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.013208][ T5759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.025557][ T5759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.035695][ T5759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.100722][ T5758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.116428][ T5758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.135759][ T5758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.145574][ T5758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.296446][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.337781][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.357666][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.369463][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.382622][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.403493][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.410815][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.426900][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.434047][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.449535][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.463284][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.496246][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.503372][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.517218][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.524340][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.533267][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.540412][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.566743][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.573910][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.602744][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.623622][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.630770][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.658946][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.666067][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.699748][ T5760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.812614][ T5759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.157490][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.195292][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.274742][ T5760] veth0_vlan: entered promiscuous mode [ 70.305928][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.326138][ T5760] veth1_vlan: entered promiscuous mode [ 70.339930][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.358970][ T5761] veth0_vlan: entered promiscuous mode [ 70.381912][ T5761] veth1_vlan: entered promiscuous mode [ 70.419125][ T5760] veth0_macvtap: entered promiscuous mode [ 70.449118][ T5759] veth0_vlan: entered promiscuous mode [ 70.461672][ T5760] veth1_macvtap: entered promiscuous mode [ 70.489224][ T5758] veth0_vlan: entered promiscuous mode [ 70.513009][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.526886][ T5759] veth1_vlan: entered promiscuous mode [ 70.540914][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.553432][ T5761] veth0_macvtap: entered promiscuous mode [ 70.564480][ T5771] Bluetooth: hci1: command tx timeout [ 70.564608][ T5081] Bluetooth: hci0: command tx timeout [ 70.569959][ T5766] Bluetooth: hci3: command tx timeout [ 70.583475][ T5758] veth1_vlan: entered promiscuous mode [ 70.596973][ T5760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.608162][ T5760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.617416][ T5760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.626451][ T5760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.638401][ T5761] veth1_macvtap: entered promiscuous mode [ 70.645031][ T5766] Bluetooth: hci2: command tx timeout [ 70.672386][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.683184][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.697034][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.708973][ T5759] veth0_macvtap: entered promiscuous mode [ 70.746087][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.756753][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.769995][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.781897][ T5759] veth1_macvtap: entered promiscuous mode [ 70.811846][ T5758] veth0_macvtap: entered promiscuous mode [ 70.824855][ T5761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.833751][ T5761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.842481][ T5761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.851672][ T5761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.895632][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.906838][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.917739][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.928450][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.945552][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.953618][ T5758] veth1_macvtap: entered promiscuous mode [ 70.980301][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.991561][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.996103][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.005407][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.010618][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.027586][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.038595][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.096097][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.112417][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.122534][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.136096][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.146252][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.157843][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.172022][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.184139][ T5759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.192856][ T5759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.202888][ T5759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.212312][ T5759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.241014][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.249795][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.273149][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.285113][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.296360][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.307068][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.317061][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.327721][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.339297][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.376440][ T5758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.387285][ T5758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.396158][ T5758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.405084][ T5758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.436538][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.453629][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.480407][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.520702][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.530273][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.538497][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.579752][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.611185][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.653946][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.662974][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.824956][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.832818][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.061854][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.278205][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.643924][ T5766] Bluetooth: hci3: command tx timeout [ 72.649629][ T5766] Bluetooth: hci1: command tx timeout [ 72.655775][ T5766] Bluetooth: hci0: command tx timeout [ 72.724344][ T5081] Bluetooth: hci2: command tx timeout [ 73.312239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.320869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.414549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.422872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.431391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.573994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.843629][ T5858] mmap: syz.1.2 (5858) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.927061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.936116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.336404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.724314][ T5771] Bluetooth: hci3: command tx timeout [ 74.729974][ T5766] Bluetooth: hci1: command tx timeout [ 74.735590][ T5081] Bluetooth: hci0: command tx timeout [ 74.804710][ T5766] Bluetooth: hci2: command tx timeout [ 75.045656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.888761][ T5854] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 76.124076][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'. [ 76.951252][ T5879] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 79.191413][ T5872] block device autoloading is deprecated and will be removed. [ 81.101707][ T5908] syz.3.15[5908]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.170536][ T5910] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.542976][ T9] cfg80211: failed to load regulatory.db [ 82.572240][ T5908] process 'syz.3.15' launched '/dev/fd/-1/./file0/file0' with NULL argv: empty string added [ 82.598132][ T5910] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 82.881081][ T5910] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 82.918094][ T5910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.948502][ T5909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.344627][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.597163][ T5910] syz.2.14 (5910) used greatest stack depth: 18992 bytes left [ 84.268406][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'. [ 84.502631][ T5933] ip6gretap0: entered promiscuous mode [ 84.508605][ T5933] vlan2: entered promiscuous mode [ 85.711678][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.368516][ T5950] Bluetooth: MGMT ver 1.22 [ 86.494762][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.626368][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.858713][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 86.868736][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.911671][ T23] usb 1-1: config 0 descriptor?? [ 87.971140][ T23] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 88.031840][ T23] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 88.136742][ T23] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 89.334976][ T23] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 89.438331][ T23] usb 1-1: USB disconnect, device number 2 [ 90.264745][ T5980] netlink: 'syz.3.33': attribute type 10 has an invalid length. [ 90.389354][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.399401][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.877835][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.885377][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.894568][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.902492][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.058154][ T5980] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 91.541027][ T5994] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 92.194603][ T5992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.351656][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 92.363238][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 96.940863][ T6021] syz.2.38 (6021): drop_caches: 2 [ 97.770196][ T6035] binder: 6034:6035 unknown command 1074553619 [ 97.803785][ T6035] binder: 6034:6035 ioctl c0306201 200000000640 returned -22 [ 98.140696][ T6044] netlink: 'syz.1.45': attribute type 10 has an invalid length. [ 98.333871][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.342823][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.506951][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.514131][ T6044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.521497][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.528704][ T6044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.566682][ T6044] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.626033][ T6046] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 98.744551][ T5846] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.576639][ T6049] sched: RT throttling activated [ 100.737778][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.404846][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.423714][ T5846] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 101.445167][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.484347][ T5846] usb 4-1: config 0 descriptor?? [ 101.558179][ T5846] usb 4-1: can't set config #0, error -71 [ 101.584706][ T5846] usb 4-1: USB disconnect, device number 2 [ 102.331854][ T6064] Cannot find set identified by id 65534 to match [ 103.440813][ T6058] syz.0.50 (6058): drop_caches: 2 [ 103.554068][ T6077] binder: 6075:6077 unknown command 1074553619 [ 103.581417][ T6077] binder: 6075:6077 ioctl c0306201 200000000640 returned -22 [ 103.952576][ T6085] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 106.623658][ T28] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.918106][ T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.947780][ T28] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 107.697507][ T28] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.706749][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.828660][ T28] usb 1-1: Product: syz [ 107.853752][ T28] usb 1-1: Manufacturer: syz [ 107.868080][ T28] usb 1-1: SerialNumber: syz [ 108.158848][ T6103] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.204113][ T6103] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.222816][ T6122] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 109.506965][ T28] cdc_ncm 1-1:1.0: failed to get mac address [ 109.530420][ T28] cdc_ncm 1-1:1.0: bind() failure [ 109.545763][ T28] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 109.552936][ T28] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 109.561244][ T28] usbtest: probe of 1-1:1.1 failed with error -71 [ 109.574261][ T28] usb 1-1: USB disconnect, device number 3 [ 111.809258][ T28] libceph: connect (1)[c::]:6789 error -101 [ 111.827605][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 111.849660][ T6134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.966026][ T6137] ceph: No mds server is up or the cluster is laggy [ 117.324869][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.332335][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.708325][ T6179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.836065][ T6179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.960842][ T6224] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.318464][ T27] audit: type=1326 audit(1765668311.819:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.98" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f991198f749 code=0x0 [ 122.013460][ T6179] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.037170][ T6179] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.253787][ T6179] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.273876][ T6179] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.349694][ T6253] comedi comedi0: dt2814: I/O port conflict (0x3,2) [ 124.703983][ T6264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.143807][ T27] audit: type=1326 audit(1765668315.619:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.2.109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f199c58f749 code=0x0 [ 125.253727][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.518542][ T6285] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 126.113769][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 126.175115][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 126.183500][ T9] usb 4-1: config 0 has no interface number 0 [ 126.198198][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 126.209591][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.218819][ T9] usb 4-1: Product: syz [ 126.232128][ T9] usb 4-1: Manufacturer: syz [ 126.237377][ T9] usb 4-1: SerialNumber: syz [ 126.250031][ T9] usb 4-1: config 0 descriptor?? [ 126.293963][ T9] smsc95xx v2.0.0 [ 126.297668][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 126.324621][ T9] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 126.922604][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 128.194917][ T5750] usb 4-1: USB disconnect, device number 3 [ 128.423690][ T6243] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.322796][ T6243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.419789][ T6243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.444660][ T6243] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 129.454419][ T6243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.509624][ T6243] usb 3-1: config 0 descriptor?? [ 129.826356][ T6315] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 130.597852][ T6243] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 130.660792][ T6243] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 130.808147][ T6243] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 131.191090][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.123'. [ 131.518101][ T6243] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 132.801554][ T6243] usb 3-1: USB disconnect, device number 2 [ 132.968730][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.975685][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.537449][ T6352] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 135.430517][ T6354] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 135.437349][ T6354] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 135.446184][ T6354] vhci_hcd vhci_hcd.0: Device attached [ 136.477434][ T6355] vhci_hcd: connection closed [ 136.494711][ T6170] vhci_hcd: stop threads [ 136.574861][ T6170] vhci_hcd: release socket [ 136.579397][ T6170] vhci_hcd: disconnect device [ 136.956923][ T6366] syz.0.132 uses obsolete (PF_INET,SOCK_PACKET) [ 137.897808][ T6231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.065927][ T6244] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.176741][ T6231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.214736][ T6231] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 139.233629][ T6231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.256035][ T6231] usb 3-1: config 0 descriptor?? [ 139.284862][ T6244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.320631][ T6244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.347135][ T6244] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 139.378488][ T6244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.418026][ T6244] usb 1-1: config 0 descriptor?? [ 139.746936][ T6231] aquacomputer_d5next 0003:0C70:F00B.0003: unknown main item tag 0x0 [ 139.769899][ T6231] aquacomputer_d5next 0003:0C70:F00B.0003: item fetching failed at offset 3/7 [ 139.804517][ T6231] aquacomputer_d5next: probe of 0003:0C70:F00B.0003 failed with error -22 [ 139.868429][ T6244] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 139.906357][ T6244] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 139.947494][ T9] usb 3-1: USB disconnect, device number 3 [ 140.064938][ T6244] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 140.140947][ T27] audit: type=1800 audit(1765668330.649:4): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.139" name="bus" dev="ramfs" ino=9001 res=0 errno=0 [ 140.680309][ T6389] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 141.320231][ T6244] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 141.335731][ T6244] usb 1-1: USB disconnect, device number 4 [ 141.813650][ T6227] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.886748][ T6406] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 142.013733][ T6227] usb 4-1: Using ep0 maxpacket: 16 [ 142.023509][ T6227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.036384][ T6227] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 142.062934][ T6227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.088751][ T6227] usb 4-1: config 0 descriptor?? [ 142.134018][ T6227] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 142.362392][ T6406] 9pnet_virtio: no channels available for device syz [ 142.470478][ T6395] input: syz0 as /devices/virtual/input/input7 [ 142.553293][ T5120] bcm5974 4-1:0.0: could not read from device [ 142.601271][ T5120] bcm5974 4-1:0.0: could not read from device [ 142.620074][ T5120] bcm5974 4-1:0.0: could not read from device [ 142.648331][ T6227] usb 4-1: USB disconnect, device number 4 [ 142.679539][ T5120] bcm5974 4-1:0.0: could not read from device [ 144.453153][ T6422] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 145.433688][ T6227] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.552552][ T6228] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.726732][ T6439] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.777502][ T9] IPVS: starting estimator thread 0... [ 145.872657][ T6227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.905440][ T6228] usb 4-1: Using ep0 maxpacket: 16 [ 145.985735][ T6441] IPVS: using max 18 ests per chain, 43200 per kthread [ 146.043218][ T6228] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 146.086333][ T6227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.103895][ T6228] usb 4-1: config 0 has no interface number 0 [ 146.110060][ T6228] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 146.123749][ T6227] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 146.143041][ T6227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.151153][ T6228] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 146.168205][ T6227] usb 1-1: config 0 descriptor?? [ 146.362136][ T6228] usb 4-1: config 0 interface 41 has no altsetting 0 [ 146.376501][ T6228] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 146.391284][ T6228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.399610][ T6228] usb 4-1: Product: syz [ 146.404897][ T6228] usb 4-1: Manufacturer: syz [ 146.409558][ T6228] usb 4-1: SerialNumber: syz [ 146.820320][ T6228] usb 4-1: config 0 descriptor?? [ 146.831277][ T6428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.839883][ T6428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 147.054823][ T6428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 147.062347][ T6428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 147.090794][ T6227] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 147.114152][ T6227] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 147.200033][ T6444] delete_channel: no stack [ 147.357947][ T6227] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 147.583280][ T6460] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 147.820041][ T6228] Error reading MAC address [ 147.884776][ T6428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 148.080361][ T6428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 148.340166][ T6228] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 148.359354][ T6227] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 148.386011][ T6228] usb 4-1: USB disconnect, device number 5 [ 149.182739][ T6474] random: crng reseeded on system resumption [ 149.200469][ T6227] usb 1-1: USB disconnect, device number 5 [ 150.545805][ T6495] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 153.743682][ T6243] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.005067][ T6243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.029595][ T6243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.051791][ T6243] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 154.161842][ T6243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.172131][ T6243] usb 2-1: config 0 descriptor?? [ 155.490059][ T6243] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 155.829910][ T6243] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 155.948486][ T6243] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 156.153369][ T6527] program syz.3.182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.322517][ T6243] cp2112 0003:10C4:EA90.0006: error setting SMBus config [ 156.338738][ T6243] cp2112: probe of 0003:10C4:EA90.0006 failed with error -71 [ 156.349592][ T6243] usb 2-1: USB disconnect, device number 2 [ 156.430704][ T6534] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 163.598475][ T6561] program syz.1.191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.113833][ T6243] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.371750][ T6243] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 164.440780][ T6243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.515414][ T6243] usb 2-1: config 0 descriptor?? [ 164.535847][ T6243] pwc: Creative Labs Webcam Pro Ex detected. [ 166.080134][ T6573] sctp: failed to load transform for md5: -2 [ 166.466616][ T6593] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 167.605438][ T6243] pwc: Failed to set LED on/off time (-71) [ 167.718959][ T6243] pwc: send_video_command error -71 [ 167.867926][ T6243] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 167.876764][ T6243] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 167.886023][ T6243] usb 2-1: USB disconnect, device number 3 [ 168.855371][ T6616] program syz.0.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.336902][ T6639] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 171.811339][ T6648] program syz.2.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.283308][ T6661] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.777403][ T6243] IPVS: starting estimator thread 0... [ 173.915173][ T6663] IPVS: using max 19 ests per chain, 45600 per kthread [ 174.072404][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 174.282253][ T6669] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 175.648987][ T6675] delete_channel: no stack [ 179.007086][ T6717] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 179.597394][ T6231] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.913744][ T6231] usb 4-1: Using ep0 maxpacket: 16 [ 179.926030][ T6231] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 179.936451][ T6231] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 179.947987][ T6231] usb 4-1: Product: syz [ 179.954017][ T6231] usb 4-1: SerialNumber: syz [ 180.756519][ T6231] usb 4-1: config 0 descriptor?? [ 180.773068][ T6231] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 180.786237][ T6231] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 180.796298][ T6231] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 180.825775][ T6231] dvb_usb_af9035: probe of 4-1:0.0 failed with error -22 [ 182.048883][ T9] usb 4-1: USB disconnect, device number 6 [ 182.221017][ T6739] Zero length message leads to an empty skb [ 183.448543][ T6754] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 184.801671][ T6244] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 185.054605][ T6242] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 185.097845][ T6244] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 185.107170][ T6244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.115303][ T6244] usb 4-1: Product: syz [ 185.869061][ T6244] usb 4-1: Manufacturer: syz [ 185.874811][ T6244] usb 4-1: SerialNumber: syz [ 185.881777][ T6244] usb 4-1: config 0 descriptor?? [ 185.890054][ T6244] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 185.978344][ T6242] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 186.001916][ T6242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.033408][ T6242] usb 1-1: config 0 descriptor?? [ 186.048404][ T6242] pwc: Creative Labs Webcam Pro Ex detected. [ 186.555696][ T6244] gspca_stk1135: reg_w 0x2 err -110 [ 186.677080][ T6244] gspca_stk1135: serial bus timeout: status=0x00 [ 186.938246][ T6244] gspca_stk1135: Sensor write failed [ 186.944004][ T6244] gspca_stk1135: serial bus timeout: status=0x00 [ 186.950393][ T6244] gspca_stk1135: Sensor write failed [ 186.959755][ T6244] gspca_stk1135: serial bus timeout: status=0x00 [ 186.986100][ T6244] gspca_stk1135: Sensor read failed [ 186.991380][ T6244] gspca_stk1135: serial bus timeout: status=0x00 [ 187.703982][ T6244] gspca_stk1135: Sensor read failed [ 187.709378][ T6244] gspca_stk1135: Detected sensor type unknown (0x0) [ 187.716198][ T6244] gspca_stk1135: serial bus timeout: status=0x00 [ 187.725231][ T6244] gspca_stk1135: Sensor read failed [ 187.730676][ T6244] gspca_stk1135: serial bus timeout: status=0x00 [ 187.737193][ T6244] gspca_stk1135: Sensor read failed [ 187.742545][ T6244] gspca_stk1135: serial bus timeout: status=0x00 [ 187.754572][ T6244] gspca_stk1135: Sensor write failed [ 187.773694][ T6244] gspca_stk1135: serial bus timeout: status=0x00 [ 187.780100][ T6244] gspca_stk1135: Sensor write failed [ 187.786468][ T6244] stk1135: probe of 4-1:0.0 failed with error -110 [ 187.798596][ T6244] usb 4-1: USB disconnect, device number 7 [ 188.040918][ T6795] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 188.131922][ T6782] delete_channel: no stack [ 188.440422][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 188.886602][ T6242] pwc: Failed to set LED on/off time (-71) [ 189.015825][ T6806] fuse: Unknown parameter 'fd00000000000000000000' [ 189.477023][ T6242] pwc: send_video_command error -71 [ 189.482371][ T6242] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 189.490733][ T6242] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 189.653613][ T6242] usb 1-1: USB disconnect, device number 6 [ 191.837337][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 191.844927][ T5769] Bluetooth: hci3: command 0x0406 tx timeout [ 191.851150][ T5769] Bluetooth: hci1: command 0x0406 tx timeout [ 192.147156][ T6833] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 192.421672][ T6817] mkiss: ax0: crc mode is auto. [ 192.943864][ T27] audit: type=1326 audit(1765668383.199:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f199c58f749 code=0x0 [ 194.260105][ T6851] delete_channel: no stack [ 194.420199][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.426650][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.772602][ T6231] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 194.861897][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 195.023738][ T6231] usb 1-1: device descriptor read/64, error -32 [ 195.303699][ T6231] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.708717][ T6873] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 196.100718][ T6231] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.146756][ T6231] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.274129][ T6231] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.308464][ T6231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.850824][ T6851] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.869799][ T6881] mkiss: ax0: crc mode is auto. [ 198.499097][ T6231] usb 1-1: can't set config #27, error -71 [ 198.556966][ T6231] usb 1-1: USB disconnect, device number 8 [ 199.227016][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.234468][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.054944][ T6910] fuse: Unknown parameter 'fd00000000000000000000' [ 200.909047][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.022460][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.441176][ T6243] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 203.546674][ T6890] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.556106][ T6890] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.566392][ T6890] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.575571][ T6890] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.669819][ T6243] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.60 [ 203.688103][ T6243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.696608][ T6243] usb 4-1: Product: syz [ 203.706901][ T6243] usb 4-1: Manufacturer: syz [ 203.719694][ T6243] usb 4-1: SerialNumber: syz [ 203.734755][ T6243] usb 4-1: config 0 descriptor?? [ 203.751935][ T6243] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 203.768821][ T6243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.780041][ T6243] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 203.791108][ T6243] usb 4-1: media controller created [ 203.829618][ T6243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.931666][ T6243] DVB: Unable to find symbol mt352_attach() [ 204.648622][ T6929] nvme_fabrics: missing parameter 'transport=%s' [ 204.655452][ T6929] nvme_fabrics: missing parameter 'nqn=%s' [ 204.657963][ T6243] DVB: Unable to find symbol nxt6000_attach() [ 204.668008][ T6243] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 204.687068][ T6243] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 205.867895][ T6243] dvb-usb: schedule remote query interval to 1000 msecs. [ 205.878237][ T6243] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 205.934657][ T6243] dvb-usb: bulk message failed: -22 (7/0) [ 205.947673][ T6243] dvb-usb: bulk message failed: -22 (7/0) [ 206.115579][ T9] usb 4-1: USB disconnect, device number 8 [ 206.223602][ T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 206.367745][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 206.516451][ T8] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 206.603777][ T8] usb 2-1: config 8 has no interface number 0 [ 206.627001][ T8] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 206.672739][ T8] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 206.713573][ T8] usb 2-1: config 8 interface 177 has no altsetting 0 [ 206.730737][ T8] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 206.743813][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.873300][ T6946] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 207.227309][ T8] usb 2-1: string descriptor 0 read error: -71 [ 207.370361][ T8] ir_toy 2-1:8.177: required endpoints not found [ 207.505901][ T8] usb 2-1: USB disconnect, device number 4 [ 213.442929][ T7002] netlink: 84 bytes leftover after parsing attributes in process `syz.1.309'. [ 213.906830][ T7013] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 215.679591][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 215.701176][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 215.725176][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 215.751444][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 215.761137][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 215.771078][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 215.786393][ T6243] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 215.794615][ T7032] syzkaller0: entered promiscuous mode [ 215.800481][ T7032] syzkaller0: entered allmulticast mode [ 215.813639][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 215.823568][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 215.844271][ T7033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 215.976676][ T6243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.990422][ T6243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.043687][ T6243] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.061295][ T6243] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 216.077955][ T6243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.108103][ T6243] usb 2-1: config 0 descriptor?? [ 216.426898][ T7046] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 217.147488][ T6243] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0007/input/input9 [ 217.410364][ T6243] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0007/input/input10 [ 217.481574][ T6243] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0007/input/input11 [ 217.546128][ T6243] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0007/input/input12 [ 217.591233][ T6243] hid-udraw 0003:20D6:CB17.0007: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 217.626980][ T6243] usb 2-1: USB disconnect, device number 5 [ 217.914912][ T7056] fido_id[7056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 217.948436][ T7059] program syz.0.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.055469][ T7062] fuse: Unknown parameter '' [ 218.083606][ T6227] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 222.028504][ T6227] usb 3-1: device descriptor read/all, error -71 [ 225.913602][ T6227] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 226.108624][ T6227] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 226.133835][ T6227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.129834][ T6227] usb 3-1: config 0 descriptor?? [ 227.148615][ T6227] pwc: Creative Labs Webcam Pro Ex detected. [ 227.601053][ T7142] program syz.0.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.561677][ T7150] __nla_validate_parse: 29 callbacks suppressed [ 228.562314][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 229.018275][ T5750] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 229.823352][ T6227] pwc: Failed to set LED on/off time (-71) [ 229.842878][ T6227] pwc: send_video_command error -71 [ 229.851939][ T6227] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 229.866800][ T6227] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 229.923214][ T6227] usb 3-1: USB disconnect, device number 6 [ 229.948024][ T5750] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 229.972990][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.025110][ T5750] usb 1-1: config 0 descriptor?? [ 230.052678][ T5750] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 230.252410][ T5750] gspca_sn9c2028: read1 error -32 [ 230.262239][ T5750] gspca_sn9c2028: read1 error -32 [ 230.363668][ T6227] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 230.443649][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 230.616125][ T6227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.003772][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 231.032044][ T6227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.045555][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 231.053923][ T6227] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.067745][ T9] usb 4-1: config 6 has an invalid interface number: 3 but max is 0 [ 231.076139][ T6227] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.085440][ T9] usb 4-1: config 6 has no interface number 0 [ 231.101795][ T9] usb 4-1: config 6 interface 3 has no altsetting 0 [ 231.145371][ T6227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.159098][ T9] usb 4-1: New USB device found, idVendor=1bc7, idProduct=10c4, bcdDevice=2b.b0 [ 231.169665][ T6227] usb 3-1: config 0 descriptor?? [ 231.219870][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.231373][ T9] usb 4-1: Product: syz [ 231.235737][ T9] usb 4-1: Manufacturer: syz [ 231.240593][ T9] usb 4-1: SerialNumber: syz [ 231.380217][ T7175] program syz.1.360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.463855][ T9] option 4-1:6.3: GSM modem (1-port) converter detected [ 231.533667][ T9] usb 4-1: USB disconnect, device number 9 [ 231.573187][ T9] option 4-1:6.3: device disconnected [ 231.574678][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 231.627090][ T6227] plantronics 0003:047F:FFFF.0008: collection stack underflow [ 231.642992][ T6227] plantronics 0003:047F:FFFF.0008: item 0 4 0 12 parsing failed [ 231.652966][ T6227] plantronics 0003:047F:FFFF.0008: parse failed [ 231.667504][ T6227] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22 [ 231.830919][ T6227] usb 3-1: USB disconnect, device number 7 [ 233.013813][ T6242] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 233.986301][ T7198] program syz.3.369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.009345][ T6242] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 234.131539][ T6242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.156886][ T6227] usb 1-1: USB disconnect, device number 9 [ 234.166997][ T6242] usb 2-1: config 0 descriptor?? [ 234.510729][ T6242] pwc: Creative Labs Webcam Pro Ex detected. [ 235.693958][ T6227] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 236.103591][ T6227] usb 3-1: Using ep0 maxpacket: 16 [ 236.111040][ T6227] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.133536][ T6227] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.642630][ T6227] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.649791][ T6227] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 236.666290][ T6227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.685669][ T6227] usb 3-1: config 0 descriptor?? [ 236.959372][ T6242] pwc: Failed to set LED on/off time (-71) [ 236.966177][ T6242] pwc: send_video_command error -71 [ 236.971406][ T6242] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 236.979603][ T6242] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 236.988623][ T6242] usb 2-1: USB disconnect, device number 6 [ 237.174908][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.206010][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.298785][ T6227] hid (null): invalid report_count 16974337 [ 237.304896][ T6227] hid (null): report_id 766643193 is invalid [ 237.310938][ T6227] hid (null): unknown global tag 0xc [ 237.316572][ T6227] hid (null): unknown global tag 0xd [ 237.325704][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.332696][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.344125][ T7223] netlink: 32 bytes leftover after parsing attributes in process `syz.3.374'. [ 237.355392][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 237.368322][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.383594][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.393669][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.400657][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.417476][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.433579][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.440575][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.460833][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.472533][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.488076][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.503637][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.510692][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 237.530144][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.633572][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.640598][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.657962][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.665321][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.672371][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.685782][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.692782][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.720262][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.728353][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.741099][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.749380][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.761767][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.777850][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.787303][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.799298][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.806746][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.814225][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.837186][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.860141][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.878994][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 238.915689][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.712071][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.730165][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.740172][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.750967][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.771264][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.786582][ T7247] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 239.957124][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.964656][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.971706][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.979186][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.986760][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.994166][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 239.994487][ T7252] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 240.001133][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.001181][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.001203][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.001500][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.622406][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.629519][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.639509][ T7254] netlink: 'syz.3.385': attribute type 12 has an invalid length. [ 240.647367][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.647397][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.647418][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.647440][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.647462][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.647485][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.647508][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.647530][ T6227] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 240.647552][ T6227] cougar 0003:060B:500A.0009: unexpected long global item [ 240.648235][ T6227] cougar 0003:060B:500A.0009: parse failed [ 240.686299][ T7252] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 240.730328][ T7254] netlink: 132 bytes leftover after parsing attributes in process `syz.3.385'. [ 240.913385][ T6227] cougar: probe of 0003:060B:500A.0009 failed with error -22 [ 241.990759][ T6227] usb 3-1: USB disconnect, device number 8 [ 242.383710][ T6243] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 246.656645][ T7289] xt_socket: unknown flags 0x4c [ 247.779141][ T6243] usb 4-1: device descriptor read/all, error -71 [ 248.181795][ T7306] netlink: 'syz.3.397': attribute type 4 has an invalid length. [ 248.221334][ T7306] netlink: 'syz.3.397': attribute type 4 has an invalid length. [ 248.688746][ T7307] bridge0: entered allmulticast mode [ 248.705485][ T7307] bridge_slave_1: left allmulticast mode [ 248.711455][ T7307] bridge_slave_1: left promiscuous mode [ 248.719537][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.797802][ T7307] bridge_slave_0: left allmulticast mode [ 248.803881][ T7307] bridge_slave_0: left promiscuous mode [ 248.811072][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.950232][ T7307] bond0: (slave bridge0): Releasing backup interface [ 249.287469][ T7313] bridge0: port 3(gretap0) entered blocking state [ 249.294422][ T7313] bridge0: port 3(gretap0) entered disabled state [ 249.301730][ T7313] gretap0: entered allmulticast mode [ 249.313133][ T7313] gretap0: entered promiscuous mode [ 249.320637][ T7313] bridge0: port 3(gretap0) entered blocking state [ 249.327204][ T7313] bridge0: port 3(gretap0) entered forwarding state [ 251.263376][ T7325] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 251.906710][ T6227] IPVS: starting estimator thread 0... [ 252.079244][ T7328] IPVS: using max 27 ests per chain, 64800 per kthread [ 252.402624][ T7336] fuse: Unknown parameter 'fd00000000000000000000' [ 253.218925][ T7345] netlink: 'syz.0.407': attribute type 12 has an invalid length. [ 253.233599][ T7345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.407'. [ 253.250761][ T7346] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 253.596305][ T7352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 253.609556][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 253.714163][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 254.370054][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.106605][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 255.218152][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.230859][ T9] usb 1-1: config 0 descriptor?? [ 255.297487][ T9] usbhid 1-1:0.0: can't add hid device: -22 [ 255.303717][ T9] usbhid: probe of 1-1:0.0 failed with error -22 [ 255.603628][ T6240] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 255.859296][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.865746][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.865757][ T6240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.891397][ T6240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.943544][ T6240] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 255.963121][ T6240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.988091][ T6240] usb 2-1: config 0 descriptor?? [ 255.999466][ T6238] usb 1-1: USB disconnect, device number 10 [ 256.467586][ T6240] usbhid 2-1:0.0: can't add hid device: -71 [ 256.543591][ T7379] fuse: Unknown parameter 'fd00000000000000000000' [ 256.563014][ T6240] usbhid: probe of 2-1:0.0 failed with error -71 [ 256.680912][ T6240] usb 2-1: USB disconnect, device number 7 [ 257.160606][ T7386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.192244][ T5766] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 257.527111][ T7394] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.138081][ T7396] overlayfs: failed to decode file handle (len=5, type=196856, flags=0, err=-22) [ 258.545386][ T6243] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 258.816094][ T6243] usb 2-1: Using ep0 maxpacket: 32 [ 259.040798][ T6243] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 259.049069][ T6243] usb 2-1: config 0 has no interface number 0 [ 259.076018][ T6243] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 259.085766][ T6243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.095248][ T6243] usb 2-1: Product: syz [ 259.127248][ T6243] usb 2-1: Manufacturer: syz [ 259.133576][ T6243] usb 2-1: SerialNumber: syz [ 259.199661][ T6243] usb 2-1: config 0 descriptor?? [ 259.266620][ T6243] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 259.491417][ T6243] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 259.554629][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.431'. [ 259.872363][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 260.260016][ T6243] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 260.276057][ T6243] usb 2-1: USB disconnect, device number 8 [ 260.293233][ T6243] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 260.346183][ T7416] netlink: 11 bytes leftover after parsing attributes in process `syz.2.433'. [ 260.355951][ T6243] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 260.499680][ T6243] quatech2 2-1:0.51: device disconnected [ 260.516907][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 260.543859][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 260.680378][ T7419] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.699448][ T5750] IPVS: starting estimator thread 0... [ 260.843985][ T7421] IPVS: using max 22 ests per chain, 52800 per kthread [ 261.773656][ T5750] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 261.944178][ T7430] ======================================================= [ 261.944178][ T7430] WARNING: The mand mount option has been deprecated and [ 261.944178][ T7430] and is ignored by this kernel. Remove the mand [ 261.944178][ T7430] option from the mount to silence this warning. [ 261.944178][ T7430] ======================================================= [ 262.114174][ T7429] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 263.355786][ T5750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.385669][ T5750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.416050][ T5750] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 263.416067][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.428173][ T5750] usb 3-1: config 0 descriptor?? [ 263.857724][ T5750] usbhid 3-1:0.0: can't add hid device: -71 [ 263.893673][ T5750] usbhid: probe of 3-1:0.0 failed with error -71 [ 263.915314][ T5750] usb 3-1: USB disconnect, device number 9 [ 266.342993][ T7460] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 272.419576][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 272.578062][ T7492] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.454'. [ 272.743996][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.483650][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.519074][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 273.553539][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.594330][ T9] usb 4-1: config 0 descriptor?? [ 274.041286][ T7506] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 274.518488][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 274.524871][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 274.539556][ T9] usb 4-1: USB disconnect, device number 12 [ 277.536617][ T5766] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 277.898085][ T7538] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.611263][ T7541] program syz.1.470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.417151][ T7553] fuse: Unknown parameter 'fd00000000000000000000' [ 281.605525][ T5766] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 281.617568][ T5766] Bluetooth: hci3: Injecting HCI hardware error event [ 281.626919][ T5766] Bluetooth: hci3: hardware error 0x00 [ 282.300979][ T7573] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 283.913296][ T5766] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 287.604677][ T7610] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 287.956336][ T7608] gre1: entered promiscuous mode [ 287.961809][ T7608] gre1: entered allmulticast mode [ 288.073727][ T7604] Process accounting resumed [ 288.653726][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 288.670593][ T7619] macvlan2: entered allmulticast mode [ 288.676098][ T7619] veth1_to_hsr: entered allmulticast mode [ 289.429302][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'. [ 290.207946][ T7623] macvlan2: entered promiscuous mode [ 290.272465][ T7623] macvlan2: entered allmulticast mode [ 290.283176][ T7623] bond1: entered promiscuous mode [ 290.300202][ T7623] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.322860][ T7623] bond1: left promiscuous mode [ 292.736741][ T7649] use of bytesused == 0 is deprecated and will be removed in the future, [ 292.745551][ T7649] use the actual size instead. [ 294.046377][ T7660] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 295.022969][ T7673] program syz.2.505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.663557][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 296.857875][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.885610][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.896299][ T8] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 296.906708][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.921379][ T7687] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 296.924751][ T8] usb 3-1: config 0 descriptor?? [ 297.356872][ T8] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 297.404453][ T8] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 297.601855][ T8] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 300.458565][ T8] cp2112 0003:10C4:EA90.000A: error reading lock byte: -71 [ 300.492852][ T7714] program syz.0.516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.873980][ T9] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 300.904570][ T9] usb 3-1: device reset changed ep0 maxpacket size! [ 300.915185][ T8] usb 3-1: USB disconnect, device number 10 [ 300.944413][ T5750] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 301.115221][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 301.153715][ T5750] usb 1-1: Using ep0 maxpacket: 32 [ 301.161066][ T5750] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 301.173533][ T5750] usb 1-1: config 0 has no interface number 0 [ 301.189904][ T5750] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 301.216427][ T5750] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 301.225953][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.238573][ T5750] usb 1-1: Product: syz [ 301.242762][ T5750] usb 1-1: Manufacturer: syz [ 301.247765][ T5750] usb 1-1: SerialNumber: syz [ 301.254960][ T5750] usb 1-1: config 0 descriptor?? [ 301.262104][ T7718] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 301.313613][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 301.331524][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 301.356494][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 301.383582][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.393551][ T8] usb 3-1: Product: syz [ 301.401880][ T8] usb 3-1: Manufacturer: syz [ 301.410376][ T8] usb 3-1: SerialNumber: syz [ 301.574029][ T7718] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 302.274765][ T8] usb 3-1: config 0 descriptor?? [ 304.721865][ T5750] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 304.743639][ T5750] asix: probe of 1-1:0.188 failed with error -71 [ 304.746342][ T6243] usb 3-1: USB disconnect, device number 11 [ 304.784104][ T5750] usb 1-1: USB disconnect, device number 11 [ 304.963688][ T6238] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 305.155477][ T6238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.173622][ T6238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.188114][ T6238] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 305.200145][ T6238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.213592][ T6243] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 305.242025][ T6238] usb 4-1: config 0 descriptor?? [ 305.393701][ T6243] usb 3-1: Using ep0 maxpacket: 32 [ 305.407302][ T6243] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 305.422794][ T6243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.433065][ T6243] usb 3-1: Product: syz [ 305.440285][ T6243] usb 3-1: Manufacturer: syz [ 305.457588][ T6243] usb 3-1: SerialNumber: syz [ 305.490867][ T6243] usb 3-1: config 0 descriptor?? [ 305.512568][ T6243] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 305.677197][ T6238] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 305.705106][ T7753] program syz.1.527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.734263][ T6238] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 305.868932][ T6238] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 306.300306][ T7760] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 306.944894][ T6238] cp2112 0003:10C4:EA90.000B: error reading lock byte: -71 [ 306.976157][ T6238] usb 4-1: USB disconnect, device number 13 [ 307.292117][ T6243] gspca_ov534_9: reg_r err -71 [ 307.986154][ T6243] gspca_ov534_9: Unknown sensor 0000 [ 307.986237][ T6243] ov534_9: probe of 3-1:0.0 failed with error -22 [ 308.116776][ T6243] usb 3-1: USB disconnect, device number 12 [ 309.518717][ T7781] program syz.2.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.705033][ T5750] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 309.903839][ T5750] usb 2-1: Using ep0 maxpacket: 16 [ 309.931471][ T7786] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 309.992721][ T5750] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.088291][ T5750] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.237606][ T5750] usb 2-1: config 0 interface 0 has no altsetting 0 [ 310.363244][ T5750] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 310.492383][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.537282][ T5750] usb 2-1: config 0 descriptor?? [ 310.970596][ T5750] hid (null): unknown global tag 0xc [ 311.671599][ T6243] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 311.742150][ T5750] cougar 0003:060B:500A.000C: usage count exceeds max: fixing up report descriptor [ 311.754298][ T5750] cougar 0003:060B:500A.000C: unexpected long global item [ 311.762161][ T5750] cougar 0003:060B:500A.000C: parse failed [ 311.775636][ T5750] cougar: probe of 0003:060B:500A.000C failed with error -22 [ 311.786460][ T5750] usb 2-1: USB disconnect, device number 9 [ 311.915332][ T6243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 311.939125][ T6243] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 311.959616][ T6243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.975515][ T6243] usb 3-1: config 0 descriptor?? [ 312.001756][ T7790] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 314.131890][ T6243] usbhid 3-1:0.0: can't add hid device: -71 [ 314.153961][ T6243] usbhid: probe of 3-1:0.0 failed with error -71 [ 314.179182][ T6243] usb 3-1: USB disconnect, device number 13 [ 314.191458][ T7816] capability: warning: `syz.1.550' uses deprecated v2 capabilities in a way that may be insecure [ 315.471343][ T7833] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 317.370608][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.377094][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.532539][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 317.542885][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 317.747926][ T7856] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 319.929567][ T7880] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 320.004411][ T6241] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 320.853235][ T7881] fuse: Unknown parameter 'fd00000000000000000000' [ 321.354381][ T6241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.403718][ T6241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.433886][ T6241] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 321.457082][ T6241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.469385][ T6241] usb 2-1: config 0 descriptor?? [ 321.578343][ T7890] netlink: 'syz.3.570': attribute type 10 has an invalid length. [ 321.597531][ T7890] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 321.623652][ T7890] ------------[ cut here ]------------ [ 321.629513][ T7890] WARNING: CPU: 1 PID: 7890 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 321.641131][ T7890] Modules linked in: [ 321.645271][ T7890] CPU: 1 PID: 7890 Comm: syz.3.570 Not tainted syzkaller #0 [ 321.652607][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.662810][ T7890] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 321.670890][ T7890] Code: 48 89 df e8 0a bf f0 f7 e9 dc fc ff ff e8 30 51 99 f7 eb 24 e8 29 51 99 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 18 51 99 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 0a 51 99 f7 48 8b 7c 24 08 4c 8b 7c [ 321.690698][ T7890] RSP: 0018:ffffc900034d6e20 EFLAGS: 00010287 [ 321.697683][ T7890] RAX: ffffffff89ec3bae RBX: 0000000000000001 RCX: 0000000000080000 [ 321.705815][ T7890] RDX: ffffc9000d4fa000 RSI: 0000000000007394 RDI: 0000000000007395 [ 321.713905][ T7890] RBP: dffffc0000000000 R08: ffffffff90d945c7 R09: 1ffffffff21b28b8 [ 321.721929][ T7890] R10: dffffc0000000000 R11: fffffbfff21b28b9 R12: 0000000000000001 [ 321.730026][ T7890] R13: ffff88802ff725d9 R14: ffff88807dfd2c70 R15: ffff88807dfd2ce8 [ 321.738679][ T7890] FS: 00007f4a122c26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 321.747819][ T7890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.754555][ T7890] CR2: 0000001b34f0aff8 CR3: 000000007e488000 CR4: 00000000003506e0 [ 321.762589][ T7890] Call Trace: [ 321.766205][ T7890] [ 321.769327][ T7890] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 321.776050][ T7890] ieee80211_csa_finalize+0x59a/0xf00 [ 321.781491][ T7890] ? ieee80211_csa_finalize_work+0x140/0x140 [ 321.787602][ T7890] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 321.794220][ T7890] ieee80211_channel_switch+0xa8a/0xe30 [ 321.799847][ T7890] ? ieee80211_csa_finalize+0xf00/0xf00 [ 321.805533][ T7890] ? mutex_lock_nested+0x20/0x20 [ 321.810532][ T7890] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 321.816514][ T7890] rdev_channel_switch+0xeb/0x240 [ 321.821606][ T7890] nl80211_channel_switch+0xa07/0x1040 [ 321.827190][ T7890] ? genl_family_rcv_msg_doit+0xb9/0x2f0 [ 321.832900][ T7890] ? nl80211_set_coalesce+0x1310/0x1310 [ 321.839224][ T7890] ? __nla_parse+0x40/0x50 [ 321.843872][ T7890] ? nl80211_pre_doit+0x4f1/0x930 [ 321.848975][ T7890] genl_family_rcv_msg_doit+0x209/0x2f0 [ 321.854659][ T7890] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 321.860634][ T7890] ? bpf_lsm_capable+0x9/0x10 [ 321.865428][ T7890] ? security_capable+0x89/0xb0 [ 321.870357][ T7890] genl_rcv_msg+0x60b/0x790 [ 321.875060][ T7890] ? genl_bind+0x360/0x360 [ 321.879540][ T7890] ? nl80211_exit+0x30/0x30 [ 321.884176][ T7890] ? nl80211_set_coalesce+0x1310/0x1310 [ 321.889791][ T7890] ? nl80211_pre_doit+0x930/0x930 [ 321.894964][ T7890] netlink_rcv_skb+0x216/0x480 [ 321.899783][ T7890] ? genl_bind+0x360/0x360 [ 321.904320][ T7890] ? netlink_ack+0x1110/0x1110 [ 321.909155][ T7890] ? __lock_acquire+0x7c80/0x7c80 [ 321.914324][ T7890] ? net_generic+0x1e/0x240 [ 321.918893][ T7890] ? down_read+0x1ac/0x2e0 [ 321.923363][ T7890] genl_rcv+0x28/0x40 [ 321.927444][ T7890] netlink_unicast+0x751/0x8d0 [ 321.932383][ T7890] netlink_sendmsg+0x8c1/0xbe0 [ 321.937308][ T7890] ? netlink_getsockopt+0x580/0x580 [ 321.943156][ T7890] ? aa_sock_msg_perm+0x94/0x150 [ 321.948307][ T7890] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 321.953701][ T7890] ? security_socket_sendmsg+0x80/0xa0 [ 321.959220][ T7890] ? netlink_getsockopt+0x580/0x580 [ 321.964536][ T7890] ____sys_sendmsg+0x5bf/0x950 [ 321.969369][ T7890] ? __asan_memset+0x22/0x40 [ 321.974079][ T7890] ? __sys_sendmsg_sock+0x30/0x30 [ 321.979149][ T7890] ? __import_iovec+0x5f2/0x860 [ 321.984105][ T7890] ? import_iovec+0x73/0xa0 [ 321.988641][ T7890] ___sys_sendmsg+0x220/0x290 [ 321.993362][ T7890] ? __sys_sendmsg+0x270/0x270 [ 321.998288][ T7890] __se_sys_sendmsg+0x1a5/0x270 [ 322.003159][ T7890] ? __x64_sys_sendmsg+0x80/0x80 [ 322.008199][ T7890] ? lockdep_hardirqs_on+0x98/0x150 [ 322.013506][ T7890] do_syscall_64+0x55/0xb0 [ 322.017968][ T7890] ? clear_bhb_loop+0x40/0x90 [ 322.022692][ T7890] ? clear_bhb_loop+0x40/0x90 [ 322.027464][ T7890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.033368][ T7890] RIP: 0033:0x7f4a1138f749 [ 322.037831][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.057866][ T7890] RSP: 002b:00007f4a122c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.066466][ T7890] RAX: ffffffffffffffda RBX: 00007f4a115e5fa0 RCX: 00007f4a1138f749 [ 322.074504][ T7890] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 322.082476][ T7890] RBP: 00007f4a11413f91 R08: 0000000000000000 R09: 0000000000000000 [ 322.090552][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.098618][ T7890] R13: 00007f4a115e6038 R14: 00007f4a115e5fa0 R15: 00007ffd1a04fba8 [ 322.106688][ T7890] [ 322.109768][ T7890] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.117054][ T7890] CPU: 1 PID: 7890 Comm: syz.3.570 Not tainted syzkaller #0 [ 322.124338][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.134373][ T7890] Call Trace: [ 322.137632][ T7890] [ 322.140541][ T7890] dump_stack_lvl+0x16c/0x230 [ 322.145205][ T7890] ? show_regs_print_info+0x20/0x20 [ 322.150387][ T7890] ? load_image+0x3b0/0x3b0 [ 322.154877][ T7890] panic+0x2c0/0x710 [ 322.158756][ T7890] ? bpf_jit_dump+0xd0/0xd0 [ 322.163246][ T7890] __warn+0x2e0/0x470 [ 322.167211][ T7890] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 322.173871][ T7890] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 322.180526][ T7890] report_bug+0x2be/0x4f0 [ 322.184833][ T7890] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 322.191490][ T7890] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 322.198143][ T7890] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 322.204795][ T7890] handle_bug+0xcf/0x120 [ 322.209013][ T7890] exc_invalid_op+0x1a/0x50 [ 322.213502][ T7890] asm_exc_invalid_op+0x1a/0x20 [ 322.218350][ T7890] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 322.225619][ T7890] Code: 48 89 df e8 0a bf f0 f7 e9 dc fc ff ff e8 30 51 99 f7 eb 24 e8 29 51 99 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 18 51 99 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 0a 51 99 f7 48 8b 7c 24 08 4c 8b 7c [ 322.245215][ T7890] RSP: 0018:ffffc900034d6e20 EFLAGS: 00010287 [ 322.251260][ T7890] RAX: ffffffff89ec3bae RBX: 0000000000000001 RCX: 0000000000080000 [ 322.259211][ T7890] RDX: ffffc9000d4fa000 RSI: 0000000000007394 RDI: 0000000000007395 [ 322.267163][ T7890] RBP: dffffc0000000000 R08: ffffffff90d945c7 R09: 1ffffffff21b28b8 [ 322.275113][ T7890] R10: dffffc0000000000 R11: fffffbfff21b28b9 R12: 0000000000000001 [ 322.283065][ T7890] R13: ffff88802ff725d9 R14: ffff88807dfd2c70 R15: ffff88807dfd2ce8 [ 322.291019][ T7890] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 322.297604][ T7890] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 322.304088][ T7890] ieee80211_csa_finalize+0x59a/0xf00 [ 322.309493][ T7890] ? ieee80211_csa_finalize_work+0x140/0x140 [ 322.315460][ T7890] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 322.321949][ T7890] ieee80211_channel_switch+0xa8a/0xe30 [ 322.327487][ T7890] ? ieee80211_csa_finalize+0xf00/0xf00 [ 322.333018][ T7890] ? mutex_lock_nested+0x20/0x20 [ 322.337939][ T7890] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 322.343740][ T7890] rdev_channel_switch+0xeb/0x240 [ 322.348748][ T7890] nl80211_channel_switch+0xa07/0x1040 [ 322.354188][ T7890] ? genl_family_rcv_msg_doit+0xb9/0x2f0 [ 322.359826][ T7890] ? nl80211_set_coalesce+0x1310/0x1310 [ 322.365434][ T7890] ? __nla_parse+0x40/0x50 [ 322.369868][ T7890] ? nl80211_pre_doit+0x4f1/0x930 [ 322.374883][ T7890] genl_family_rcv_msg_doit+0x209/0x2f0 [ 322.380424][ T7890] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 322.386319][ T7890] ? bpf_lsm_capable+0x9/0x10 [ 322.391037][ T7890] ? security_capable+0x89/0xb0 [ 322.395891][ T7890] genl_rcv_msg+0x60b/0x790 [ 322.400402][ T7890] ? genl_bind+0x360/0x360 [ 322.404811][ T7890] ? nl80211_exit+0x30/0x30 [ 322.409303][ T7890] ? nl80211_set_coalesce+0x1310/0x1310 [ 322.414854][ T7890] ? nl80211_pre_doit+0x930/0x930 [ 322.419922][ T7890] netlink_rcv_skb+0x216/0x480 [ 322.424725][ T7890] ? genl_bind+0x360/0x360 [ 322.429125][ T7890] ? netlink_ack+0x1110/0x1110 [ 322.433883][ T7890] ? __lock_acquire+0x7c80/0x7c80 [ 322.438907][ T7890] ? net_generic+0x1e/0x240 [ 322.443410][ T7890] ? down_read+0x1ac/0x2e0 [ 322.447817][ T7890] genl_rcv+0x28/0x40 [ 322.451787][ T7890] netlink_unicast+0x751/0x8d0 [ 322.456549][ T7890] netlink_sendmsg+0x8c1/0xbe0 [ 322.461303][ T7890] ? netlink_getsockopt+0x580/0x580 [ 322.466491][ T7890] ? aa_sock_msg_perm+0x94/0x150 [ 322.471449][ T7890] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 322.476720][ T7890] ? security_socket_sendmsg+0x80/0xa0 [ 322.482157][ T7890] ? netlink_getsockopt+0x580/0x580 [ 322.487352][ T7890] ____sys_sendmsg+0x5bf/0x950 [ 322.492101][ T7890] ? __asan_memset+0x22/0x40 [ 322.496676][ T7890] ? __sys_sendmsg_sock+0x30/0x30 [ 322.501679][ T7890] ? __import_iovec+0x5f2/0x860 [ 322.506553][ T7890] ? import_iovec+0x73/0xa0 [ 322.511048][ T7890] ___sys_sendmsg+0x220/0x290 [ 322.515722][ T7890] ? __sys_sendmsg+0x270/0x270 [ 322.520527][ T7890] __se_sys_sendmsg+0x1a5/0x270 [ 322.525363][ T7890] ? __x64_sys_sendmsg+0x80/0x80 [ 322.530295][ T7890] ? lockdep_hardirqs_on+0x98/0x150 [ 322.535480][ T7890] do_syscall_64+0x55/0xb0 [ 322.539873][ T7890] ? clear_bhb_loop+0x40/0x90 [ 322.544530][ T7890] ? clear_bhb_loop+0x40/0x90 [ 322.549186][ T7890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.555057][ T7890] RIP: 0033:0x7f4a1138f749 [ 322.559454][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.579044][ T7890] RSP: 002b:00007f4a122c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.587443][ T7890] RAX: ffffffffffffffda RBX: 00007f4a115e5fa0 RCX: 00007f4a1138f749 [ 322.595399][ T7890] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 322.603350][ T7890] RBP: 00007f4a11413f91 R08: 0000000000000000 R09: 0000000000000000 [ 322.611329][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.619285][ T7890] R13: 00007f4a115e6038 R14: 00007f4a115e5fa0 R15: 00007ffd1a04fba8 [ 322.627248][ T7890] [ 322.630638][ T7890] Kernel Offset: disabled [ 322.635037][ T7890] Rebooting in 86400 seconds..