last executing test programs: 11.82949221s ago: executing program 0 (id=275): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newsa={0x180, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x81}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0xffffffff, 0x6c}, @in6=@remote, {0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x800000000000}, {0x0, 0x5}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'nhpoly1305\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x70bd26, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 10.928386166s ago: executing program 0 (id=281): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) epoll_create(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="1e"], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x8, 0x8000, 0xfffffff1, 0x1194, {{0xf, 0x4, 0x3, 0xc, 0x3c, 0x67, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @empty, {[@lsrr={0x83, 0x17, 0x27, [@local, @empty, @broadcast, @local, @multicast1]}, @cipso={0x86, 0x11, 0x0, [{0x7, 0xb, "6183d5f33cbf7ea433"}]}]}}}}}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000100)='./file0/../file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000060000000000000040000000183a00000900000000000000000000446aaffc0001000000000000000f0000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xffff8000, 0x62, &(0x7f00000004c0)=""/98, 0x40f00, 0x52, '\x00', r3, 0x0, r0, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x10, 0x200, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0xffffffffffffffff, r1, r1, r1, r1, r1, r1, r0, r0, r0, r1, r1, r1, r1, r4, r4, r4], &(0x7f0000000700)=[{0x0, 0x5, 0xc, 0xa}, {0x2, 0x1, 0x10, 0xa}, {0x0, 0x5, 0x0, 0x9}, {0x3, 0x1, 0x6, 0x1}, {0x4, 0x2, 0x10, 0x6}, {0x5, 0x1002, 0x10, 0xa}, {0x3, 0x4, 0xd, 0x4}], 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f00000063c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x800) recvmsg(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000540)=""/113, 0x71}], 0x1}, 0x40000000) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x40}}, 0xc800) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf25080000006400018014000280080003000700000008000400050000000c0002800800040007000000080003000400000038000400200001000a004e2200000007fe8000000000000000000000000000bb060000001400020002004e23640101010000000000000000300004802c0007800800040000000000080004000600000008000400ffff0000080003000000000008000300000000005400028014000380080002000700000008000200030000003c00038008000100e4fdffff0800010009000000080002000c0000000800010075060000080002000001000008000100600000000800020004000000300002801c00038008000200040000000800010005000000080001000600000008000200a00000000800020002000000"], 0x12c}}, 0x40040088) ioctl$PIO_UNIMAPCLR(r9, 0x4b68, 0x0) socket$isdn(0x22, 0x2, 0x25) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x88901) 7.992176243s ago: executing program 0 (id=285): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='schedstat\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1, 0x1ffe, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) epoll_create1(0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@private2, @local, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8, 0x5, 0x3, 0x400, 0x8000000000000000, 0x108, r6}) pselect6(0x40, &(0x7f00000001c0)={0x1000002, 0x0, 0x3, 0xfffffffffffffffd, 0x40000000000761}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x1e, 0x1, 0xfffffffd, 0x7ffffe, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) close(0x4) sendmmsg(r3, &(0x7f0000000340), 0x0, 0x408c0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[], 0xb7}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 6.814845477s ago: executing program 0 (id=291): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xac, 0x9b, 0xcc, 0x20, 0x18d1, 0x1eaf, 0x5abb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x0, 0x80, 0xb, [{{0x9, 0x4, 0xbb, 0x6, 0x2, 0x3a, 0xe5, 0x4, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x5, 0x0, 0xce}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x75, 0x1, 0x2}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) (async) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000ac0)={{0x3, @rose}, [@remote, @default, @null, @default, @bcast, @bcast, @netrom]}, &(0x7f00000009c0)=0x48) sendmsg(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b40)="9e0ce0909e5d6d7dea2baeb0a2df517f5ad74fa47d1ba47dff5d75c024af7bd7c83501a324f6b6457d3e6b14125f20cb1f4579e95fa2a4bfc9800056263c90", 0x3f}], 0x1, &(0x7f0000000f40)=[{0xf0, 0x112, 0x6, "1ee1ea862d58ada4db3d826e77b074a687bc14a95c5ddc99b94ebd893b288a0b3f458a92eb3299815db576fa394c2110453c5ac3babef4121ad818ff772e5939d41dd4e399795170a541de35a99cb04dedb94bc2789f6951ca7057264d0ff49a42674297979fcb02eced0cb9f526a1c51bc47c80b29da96648f2d7c085cf85480c92003d5977b8789c79c56383303d6f2b72cd470bda72c74e3ddceb126cbbec072db7a292c1bfd3be7cf35ad604e091a8b86ec3e4285a122e021e2528c4ffdd3964d94e894ce78dacdfd88b8695ea9b0caa59dac718687f27ba83b8bb2e"}, {0x78, 0x0, 0x7, "215a7cc8052472e1fc793f4f2f96375a60c63a74c7991289af321daf2eafba529ee26e8ab9aaa28e12a1bea9b89c93d5e0dd804413a491ef0dfa3ec100bc72b41ed672d19617a016d3ebacc366a4b8967cd9882f3dbc8fb2d9577e63bf889a2a948888"}, {0xa0, 0x1e, 0x0, "1f9f42d02e4113a7d928e02a145aac1e7c71c4848c3b878f7ae601c22628b4a9a79a1533db8c301a3eb833f0d4b528007becda662525a1eb8021f6f1412206770f0829ca7ab8d834dd9d44d222c5ef236fbf8d94f54a67c43d721d0329ec494e585bef897a47f9606f367222b9191318ef13651e841e8ed665d487ec0e993fa56ca36a1d134151f10e5449"}, {0x1010, 0x1, 0x1, "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"}, {0xe0, 0x110, 0xff, "11358b9805b74f6f4478636b77a992c19c5809095c77e3ef570f7e981a2736d656f35338bb2cdc530c9541ada67261de163f5c9288f6e3ecda40c0a4fd5ff81e972da19514ef8ea3f565d91f28d40400d4e7e22fff0ec0f36510b6ab54eb473778428ac210ccf301a9fd73925c6b8ae67c3d872272a6735b87df634a7f02b42c888272f894d29ca0ff4ae7cda872a6d5a1496a57a7aeb2b672e648a58b2153ba5cd8d9fd36cdbebd8ca6761d7c3d584616e0ddc66c70615a8069a22ffb7515bd7455a3dc7037049f89dd"}, {0x20, 0x1, 0x4, "8bd6e4da8b8cb0c62655f99a15"}, {0x110, 0x1, 0xd582, "8b1b665a3c01bf9f07972c976f3598b2d3a1cfbddb479e7f81c488c1209f6908837ef63cb1ad2113a4208ec5a0c2207ddbd3a608502acbdf8a82148efd48f0082f246aff3382dcacf571720d65cf1a708bc25f7b94e993271dccfd22e342c23fc342884b4d4a0728da4e4ccf71fd5bbb3398c48bcc4f3992330298e3601e5e1edb232908006909ce764c98866977d49ff91024a107f6f4794dff2494e5dc0658d0a79af1e4162b30891ebc6b28c347e3aac319de812ba1c6c0f2ae1e7839ea32e0ff745feaed72f2818ca616ee3e180609ec90f6b0b12c51e0b23eacb679972f70729196074f125fcb48e81b3d7df77e10eb8050c39c7bb0d7b2a81a"}], 0x1428}, 0x20000000) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000180)={0x18, 0x0, {0x5, @random="2ca0ca309c75", 'gretap0\x00'}}, 0x1e) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) (async) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) (async) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000380)=0x7fff) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000a00)=ANY=[@ANYBLOB="ed0004b9bf1073d3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x5, 0x628, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x41, 0xfc, 0xf5, 0x10, 0x12d1, 0x1406, 0xbbc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x616, 0x1, 0x2, 0x1, 0x0, 0x7, [{{0x9, 0x4, 0xeb, 0x68, 0xd, 0xff, 0xff, 0xff, 0xf, [@generic={0xc5, 0x5, "ae5a42c00b0a12779b8fdb59f512babfa19e43382a2dca5da62d26719ad5eeee555ea8ed44a44ff5cb7501b41657e8a1d2ac06635625809131b10a8c1dba2761a9793075e12b586738832d0c0fcf9da1b2176776b4314c0b24f25b9417c9368f06a42f7958df484ea3cf8a55a7022c13b9338544d301220706ba2d0a86ae737af76f617ce7cd82a0b31b17e01fd9538d28c94f05cad083bc5011d9fe44355c6327e6d5288f328e99ec5e202c74bfe1c8db93b5ebd4ce75a340b546e1dfff925a75c2ea"}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}, [@extension_unit={0x8, 0x24, 0x8, 0x4, 0xfffe, 0x0, '@'}]}], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x9}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0xf8, 0x5, 0x5e, [@generic={0xf5, 0x31, "1841d50d4fdfc306d273479914160a017bb235fbef91725bd2d21619ecc2fecf53b66e6ab5076952b9de531c691b34220cbbe8570b35a9c642cb3289d7f077a5903d585034abf2a52f76f2b9be665e14370cd31111d3e741c1129fb8641cfb0f3408ff55605526c94e7ba5333fc405c19da6817fe238bb830c94585c86f01a8c8e17e233d3a37c9ccb3543341a5d9909847446548a8cf4fd4edceb26e62ac648004f7a1eafdb00ae41ac087cdbecbb6383eca4fb2eb85b9237cccb248092710dcb19052daa4b950edd27cb78b77fcbac3bdba58e4e989da78eb48cd1f2cc37869c1da31ecf2ca441cea3f8de51adadcb442e6b"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x600, 0x4, 0x0, 0x6, [@generic={0x33, 0x31, "ab802474a90795f20981e6c6c261497e55bd45fa8a086f2f10d7d8ccbbeda64453b038d67d9fab92cd173950980f1ec32a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0xf, 0xc, 0x1f2f39d6e01cc089, 0xe0, 0x3, 0xc9, [@generic={0x2a, 0x0, "4557216354368ffbf4c80583645fcac3b8a887dde260e16e54713c04c9fe4777d9ff983ccc3d8231"}, @generic={0xe9, 0x7, "c9fb99ed5ac080f31dbba520a90d5f91b4719c1fb63dd5dcde98e41e5fd2b3af4145df769421792847cfbc8d84352ea7d720ef757684cbb19f222b95965edcbc5b9c683a6cd2a966f06d59112d0ed860636ed922d56b2eab8c79446c82632a7919e00348d332f177c591c6bb9041d542e800ebd5a7ed546726d1c254c25cca0b0616c5f88fb0d32e7c52a38ffbdc5013f22be12d445113c254bf191eaace4f338850e08e0f9ba834aaaaccd65b54c21c85e199f2b46df5b20589ca7f5f39812ae50fc4271c7923267034f38f538c8c2614c8c8abb6369b6109a10cc7af464576ff8228d4a39612"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x0, 0xba, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x8}]}}, {{0x9, 0x5, 0x0, 0x19328be12430efa, 0x214, 0x7, 0xd, 0x6, [@generic={0x8c, 0x10, "9c8ced3560a65a5b084c4faa497111c432ce72f731b0f69f7620e30469aaf5f77e2df791f65a65eacb7b4cc40ce06ae3d6e5baae49abc1dfa935d3ce3d682bb1940b3a75a45e7b2a042c4394b92c5e776ce211a97c44eb9c4556e02bcf417f63e9b42506c760b516b77308c3cec40a67a8b13abde891e30920687a206dca0df2381ff42b021844c6555e"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x9d, 0x400}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x1, 0x4, 0x6}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xbe, 0x1, 0x1}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0xd, 0x1, 0x80, [@generic={0xdc, 0x24, "c1aea8870c2b41b09f64ff0d6651fe895517e42f37e7e533c9a843c4737413516ec6d270c7beefa091eddf239e564de6076cdf319b6b9e775aa23f46a0328223e9b67d6b4699a22ddf6b760312f879149879c9aad690a687003c9088f186c215f25076dd130ae7a6e7608255a5d2b411db6f4d097ddd45cb179020d473afc700b57741b7379cba1daf68a75e052b4ad55946695888a91ea5b6844e944442cc4b59a290d2567dfdce04842575f1bcfa0f6dae707caf7d95fb8918c0d39ead8387207d30a5dd2d279984dfd5516247cb30f90c6ef63da476fdf6e9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x6}]}}, {{0x9, 0x5, 0x3, 0xc, 0x210, 0x7, 0x43, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x87, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x8, 0xff, 0xc}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x0, 0x85, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x3, 0xd8, [@generic={0x54, 0x22, "7756eb498f443ed52836a9cd0f83e70f2a17c2c17023c527f0b84163bf93806984d86a6b180386500d574e946492d20e705673cd483dd2c354c83c4f7d3bfa4a765bd03c1d3349480ab6ec7e3309dac031a4"}, @generic={0x91, 0x3, "fee2330b236cb5c236e8eee1331f0044b5001da9a383931bbe594d7424adc36d75d7d1972e11814918b135f5057542e83a52b0b8d2c2b2fdbcf0ef259ff59e6e3a9e7d6ba48117738302a969a6a1768ace14ad8ddab181494ac784b576dbb73201b7c21f9ba7648d8984f29e210cb9dc5905983cd774366ab6ecbb9858b6abed97a13d2f00f757d0846b184a72f584"}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x0, 0x3, 0x1, 0xb, 0x8, 0x81}, 0x26, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f2600037d77f15e699207b0141004030fdd902e92d98de1df289e31bd2d430503100b0a10"], 0x5, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x424}}, {0x87, &(0x7f00000007c0)=@string={0x87, 0x3, "2bb3997d00327009839d87faf3dfc21a394a56651e87104d27de3adff3fb06cb5e4bb865bb6a6252396a6bc062911e162a7222d9abacb934994a905739d10073878becb3030711e9c81af34f22ada4c09eace27f0b774561ea5fb27cfe1e8d23845e631097a3f32154b8e36bcd7ae58a91e4dac008c1769b9e084cee4e94fc9f699fd38d7a"}}, {0xe6, &(0x7f0000000880)=@string={0xe6, 0x3, "ac1b417b1d09aabeec5b08798847bd9130823d67133d2f115e3895b5d4ee9bec58d9a40f6d2d64be0e2b3cd0766c3a1b4c511424f452bf2f31c688f21f49ef602d6d86935b2a458a94df8ad6b20da78730db68d62122785d85983944a7c858c0fad818475a17daaa60a184201926aa4a4006d1884695788d366e1e822dd770d59475ea68a8e440ed24bd432822294be65d1b7a5d649b85a4625aec6f95679bbb42ccb1016c5d3e2b93f5377ebf2a8e89e8a6bbad087ae6668f5522f3b67021177e9932fa02a59f561ca2738ff5b3e8ab4dff738f6366f6879ac4b22a778a17ea7c5c2082"}}, {0xf, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x4001}}]}) 6.338622771s ago: executing program 0 (id=292): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}}, 0x14}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) unshare(0x2c020400) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x4008000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f000023f000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000070a000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r5}, 0x68) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x5, 0x3abc50, 0x2c8240}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) mbind(&(0x7f0000978000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000000000000, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'gretap0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000003480)={@multicast2, @remote}, &(0x7f00000034c0)=0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_stats={0x1d, 0x7, [0x0, 0x3, 0xbaf, 0x7ffffffffffffffe, 0x8, 0x0, 0x7f5fc3c9]}}) prlimit64(0x0, 0x6, 0x0, 0xfffffffffffffffd) 2.500071189s ago: executing program 0 (id=300): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000580)={0x10200, 0x2c0, 0x40, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x1, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x5, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0xffffffffffffffff, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0x11, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffefffffffb, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x9, 0x2, 0xce0, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x5, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0xd, 0x2, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd7, 0xfffd, 0x10, 0x8, 0x8, 0x9, 0x53e0f0fe, 0xeb4, 0x3, 0x80, 0xb692, 0x3ffc00000, 0x8, 0x3]}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000580)={0x10200, 0x2c0, 0x40, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x1, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x5, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0xffffffffffffffff, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0x11, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffefffffffb, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x9, 0x2, 0xce0, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x5, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0xd, 0x2, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd7, 0xfffd, 0x10, 0x8, 0x8, 0x9, 0x53e0f0fe, 0xeb4, 0x3, 0x80, 0xb692, 0x3ffc00000, 0x8, 0x3]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xf77a, 0x94c, {0x0}, {0xee00}, 0x0, 0xfffffffffffff32e}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000005c0)=r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_io_uring_setup(0x5907, &(0x7f0000000200)={0x0, 0xfc7a, 0x4, 0x3}, &(0x7f0000000080), &(0x7f0000000640)) (async) r4 = syz_io_uring_setup(0x5907, &(0x7f0000000200)={0x0, 0xfc7a, 0x4, 0x3}, &(0x7f0000000080), &(0x7f0000000640)=0x0) r6 = memfd_secret(0x0) r7 = memfd_secret(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000600)={0x10004, 0x3, 0x6000, 0x1000, &(0x7f000044e000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000600)={0x10004, 0x3, 0x6000, 0x1000, &(0x7f000044e000/0x1000)=nil}) ftruncate(r6, 0x5) (async) ftruncate(r6, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r6, 0x0) (async) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r6, 0x0) syz_io_uring_submit(r8, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x27}, 0x0, 0x18, 0x0, 0x0, {0x1f}}) (async) syz_io_uring_submit(r8, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x27}, 0x0, 0x18, 0x0, 0x0, {0x1f}}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7e, 0x20203843, 0x3, [0x2], [0x800], [], [0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0xd000, 0x81000}) 1.867103126s ago: executing program 3 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010071756575650000000c00028008000440800000030900010073797a30000000000900020073797a32"], 0x74}}, 0x0) 1.714974996s ago: executing program 4 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756575650000001c0002800600034011020000060002400009000006000140000b00000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 1.517175125s ago: executing program 3 (id=311): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x1, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x18}, 0x20000000) 1.434906457s ago: executing program 2 (id=312): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x30, 0x30, 0x2e, 0x2e, 0x61, 0x2e]}}, &(0x7f00000005c0)=""/194, 0x2c, 0xc2, 0x9, 0x4}, 0x28) 1.363391209s ago: executing program 4 (id=313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x400c814) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000103010100000000000000004000000a0c000200"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) 1.349740782s ago: executing program 1 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400"/16], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a0000080016"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) 1.213170556s ago: executing program 3 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x94}, 0x1, 0x0, 0x0, 0x2806c8cd}, 0x0) 1.211756726s ago: executing program 2 (id=316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.031591285s ago: executing program 4 (id=317): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b28, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x4, 0x4}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1008}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c00003800048031", @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.025793284s ago: executing program 1 (id=318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000500)=@allocspi={0x11c, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@lifetime_val={0x24, 0x9, {0x4, 0x4, 0x9, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 922.948632ms ago: executing program 3 (id=319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="06ff03076844268cb89e14f086dd4ee0ffff00febabec41177fb", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 887.137495ms ago: executing program 2 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008051}, 0xc000) 817.623545ms ago: executing program 1 (id=321): r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f00000001c0)) 694.993303ms ago: executing program 4 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7ff, 0x401, 0x3, 0x2, 0x7f}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x880) 588.201371ms ago: executing program 3 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newtaction={0x15c, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x148, 0x1, [@m_ctinfo={0x144, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xffffffffffffffff}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0xffffffffffffff19, 0x6, "993b5c1cdd80ed6812c9bd509481c68057ad45f42fc95a0195aa24312d1d09c7013a8ba8dfb2e0ce031000648aa103543073bcc1d1a28d4e07849ec46f55e722af5188d0f852a34ab3dfb57c7aef026beeec97195f07de7c78f10c1b55bf8e2c4b20d1c8254d899a1fe1caa2912124f6db5382ad2ab55d9532461ee1a31e951380e01077ba59731a3d8d15fce5dce01d205a0781ff7e61f9ce62642e5aca4bb62f0175c4b7c162a3b288b9f1f9811f92f0438638ff2cf083c7c9fca504cc129a48a6ff9b7fef17453139e125df233bad5b5b1f1b3ca7440e86a7a39c4a2b41b9328e2b423fca30a026c2dd24f38a8c2fbc2d20"}, {0xc}, {0xc}}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10004}, 0x0) 571.357515ms ago: executing program 1 (id=324): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1c, 0x8}, 0x20) 518.686213ms ago: executing program 2 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}, @nested={0x4, 0x48}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 474.154425ms ago: executing program 4 (id=326): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, {0x1}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x48c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20040001) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 349.887292ms ago: executing program 1 (id=327): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/142, 0x8e}], 0x5}, 0x10002) 278.834708ms ago: executing program 2 (id=328): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)={0x98, 0x0, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004001}, 0x2400c084) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="dc0000001000010000000000000000000000000ab4"], 0xdc}}, 0x0) 193.532833ms ago: executing program 4 (id=329): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 176.067653ms ago: executing program 3 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x34, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) 18.475125ms ago: executing program 1 (id=331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 0s ago: executing program 2 (id=332): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="b8", 0x1}, {&(0x7f0000000a40)}], 0x2, 0x0, 0x0, 0x10000000}, 0x0) sendmsg(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000840)='g', 0x1}], 0x1}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 90.604732][ T5822] cgroup: Unknown subsys name 'net' [ 90.742388][ T5822] cgroup: Unknown subsys name 'cpuset' [ 90.751762][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.454212][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.147136][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.170483][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.178454][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.186556][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.195148][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.203338][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.236849][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.246469][ T3091] cfg80211: failed to load regulatory.db [ 97.252527][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.263294][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.271765][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.304034][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.312392][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.320096][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.328875][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.336730][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.354251][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.370637][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.378978][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.398436][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.405976][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.413312][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.425292][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.432602][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.441998][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.449190][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.114272][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 98.168068][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 98.256635][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 98.295365][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 98.383954][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 98.464409][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.471988][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.480040][ T5839] bridge_slave_0: entered allmulticast mode [ 98.487631][ T5839] bridge_slave_0: entered promiscuous mode [ 98.532679][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.540003][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.547205][ T5839] bridge_slave_1: entered allmulticast mode [ 98.555841][ T5839] bridge_slave_1: entered promiscuous mode [ 98.694897][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.702246][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.709948][ T5848] bridge_slave_0: entered allmulticast mode [ 98.717288][ T5848] bridge_slave_0: entered promiscuous mode [ 98.732020][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.739299][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.746527][ T5842] bridge_slave_0: entered allmulticast mode [ 98.754766][ T5842] bridge_slave_0: entered promiscuous mode [ 98.765676][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.804405][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.811710][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.819406][ T5848] bridge_slave_1: entered allmulticast mode [ 98.826715][ T5848] bridge_slave_1: entered promiscuous mode [ 98.876525][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.884120][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.892278][ T5842] bridge_slave_1: entered allmulticast mode [ 98.899897][ T5842] bridge_slave_1: entered promiscuous mode [ 98.910031][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.947927][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.955889][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.963502][ T5854] bridge_slave_0: entered allmulticast mode [ 98.972156][ T5854] bridge_slave_0: entered promiscuous mode [ 98.995801][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.005129][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.012736][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.020295][ T5852] bridge_slave_0: entered allmulticast mode [ 99.027635][ T5852] bridge_slave_0: entered promiscuous mode [ 99.066646][ T5839] team0: Port device team_slave_0 added [ 99.073001][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.080397][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.087605][ T5854] bridge_slave_1: entered allmulticast mode [ 99.095601][ T5854] bridge_slave_1: entered promiscuous mode [ 99.105075][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.127661][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.135392][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.143485][ T5852] bridge_slave_1: entered allmulticast mode [ 99.151330][ T5852] bridge_slave_1: entered promiscuous mode [ 99.165862][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.176962][ T5839] team0: Port device team_slave_1 added [ 99.227228][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.267572][ T5848] team0: Port device team_slave_0 added [ 99.299360][ T5840] Bluetooth: hci0: command tx timeout [ 99.308728][ T5840] Bluetooth: hci1: command tx timeout [ 99.331093][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.345578][ T5848] team0: Port device team_slave_1 added [ 99.366997][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.382039][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.391521][ T5840] Bluetooth: hci2: command tx timeout [ 99.408737][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.415783][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.441908][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.456419][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.497142][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.504692][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.531003][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.542389][ T5847] Bluetooth: hci4: command tx timeout [ 99.548584][ T5840] Bluetooth: hci3: command tx timeout [ 99.566685][ T5842] team0: Port device team_slave_0 added [ 99.573780][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.580951][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.607443][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.639312][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.646339][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.672891][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.707202][ T5842] team0: Port device team_slave_1 added [ 99.733280][ T5854] team0: Port device team_slave_0 added [ 99.746515][ T5852] team0: Port device team_slave_0 added [ 99.769383][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.776389][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.802531][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.816421][ T5854] team0: Port device team_slave_1 added [ 99.840699][ T5852] team0: Port device team_slave_1 added [ 99.875424][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.882473][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.908734][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.953697][ T5848] hsr_slave_0: entered promiscuous mode [ 99.960428][ T5848] hsr_slave_1: entered promiscuous mode [ 100.040189][ T5839] hsr_slave_0: entered promiscuous mode [ 100.046766][ T5839] hsr_slave_1: entered promiscuous mode [ 100.053303][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.061237][ T5839] Cannot create hsr debugfs directory [ 100.083375][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.090573][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.117204][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.130055][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.137063][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.163252][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.175032][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.182888][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.209054][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.272634][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.280300][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.306431][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.343016][ T5842] hsr_slave_0: entered promiscuous mode [ 100.352550][ T5842] hsr_slave_1: entered promiscuous mode [ 100.359323][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.367459][ T5842] Cannot create hsr debugfs directory [ 100.521166][ T5852] hsr_slave_0: entered promiscuous mode [ 100.527723][ T5852] hsr_slave_1: entered promiscuous mode [ 100.535436][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.543100][ T5852] Cannot create hsr debugfs directory [ 100.573237][ T5854] hsr_slave_0: entered promiscuous mode [ 100.580343][ T5854] hsr_slave_1: entered promiscuous mode [ 100.586541][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.594205][ T5854] Cannot create hsr debugfs directory [ 101.109428][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.123756][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.145242][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.165357][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.237759][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.250109][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.262719][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.283805][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.352775][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.366883][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.379114][ T5847] Bluetooth: hci1: command tx timeout [ 101.384574][ T5840] Bluetooth: hci0: command tx timeout [ 101.417318][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.429843][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.458300][ T5840] Bluetooth: hci2: command tx timeout [ 101.541015][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.556170][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.583016][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.613907][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.629039][ T5847] Bluetooth: hci3: command tx timeout [ 101.633370][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.634566][ T5840] Bluetooth: hci4: command tx timeout [ 101.706350][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.717847][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.732062][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.760496][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.813564][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.847779][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.855152][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.885198][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.914521][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.921744][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.967875][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.014386][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.028417][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.035584][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.085216][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.092443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.126892][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.160500][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.167662][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.185244][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.192427][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.355784][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.442904][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.470621][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.495768][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.565050][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.572286][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.592934][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.600243][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.625852][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.759535][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.766763][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.801118][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.808383][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.835937][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.935963][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.107163][ T5848] veth0_vlan: entered promiscuous mode [ 103.141171][ T5848] veth1_vlan: entered promiscuous mode [ 103.196010][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.235160][ T5839] veth0_vlan: entered promiscuous mode [ 103.297520][ T5848] veth0_macvtap: entered promiscuous mode [ 103.318033][ T5839] veth1_vlan: entered promiscuous mode [ 103.354750][ T5848] veth1_macvtap: entered promiscuous mode [ 103.433170][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.459516][ T5840] Bluetooth: hci0: command tx timeout [ 103.465014][ T5840] Bluetooth: hci1: command tx timeout [ 103.472374][ T5854] veth0_vlan: entered promiscuous mode [ 103.497124][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.521291][ T5854] veth1_vlan: entered promiscuous mode [ 103.544619][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.548612][ T5840] Bluetooth: hci2: command tx timeout [ 103.565174][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.577076][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.586619][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.595632][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.627234][ T5839] veth0_macvtap: entered promiscuous mode [ 103.677752][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.686369][ T5839] veth1_macvtap: entered promiscuous mode [ 103.700125][ T5847] Bluetooth: hci3: command tx timeout [ 103.705705][ T5840] Bluetooth: hci4: command tx timeout [ 103.737295][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.774414][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.824120][ T5854] veth0_macvtap: entered promiscuous mode [ 103.844856][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.868290][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.877408][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.886345][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.913068][ T5854] veth1_macvtap: entered promiscuous mode [ 103.931115][ T5842] veth0_vlan: entered promiscuous mode [ 103.966356][ T5842] veth1_vlan: entered promiscuous mode [ 104.047338][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.107739][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.124440][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.134301][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.144434][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.153834][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.184856][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.198895][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.226221][ T4046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.258965][ T4046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.297890][ T5842] veth0_macvtap: entered promiscuous mode [ 104.341254][ T5842] veth1_macvtap: entered promiscuous mode [ 104.346295][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.369783][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.477346][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.493749][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.508474][ T4046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.516378][ T4046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.527161][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.543151][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.569949][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.613068][ T5852] veth0_vlan: entered promiscuous mode [ 104.673838][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.694133][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.704125][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.714383][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.728385][ T5852] veth1_vlan: entered promiscuous mode [ 104.743394][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.816201][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.838285][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.987155][ T5852] veth0_macvtap: entered promiscuous mode [ 105.022612][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 105.035764][ T5852] veth1_macvtap: entered promiscuous mode [ 105.042388][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 105.097363][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 105.110912][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.130348][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.194460][ T5957] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.197100][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.207869][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 105.290986][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.370629][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.383451][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.397871][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.411968][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.431519][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.452450][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.538319][ T5847] Bluetooth: hci1: command tx timeout [ 105.544384][ T5847] Bluetooth: hci0: command tx timeout [ 105.630822][ T5154] Bluetooth: hci2: command tx timeout [ 105.779627][ T5154] Bluetooth: hci4: command tx timeout [ 105.786382][ T5847] Bluetooth: hci3: command tx timeout [ 105.895977][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.926912][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.160906][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.226253][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 106.234873][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.265036][ T5975] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.223659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.598622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.607304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.698968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.858783][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 108.320210][ T6000] program syz.4.14 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.599400][ T6011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16'. [ 108.629666][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 109.671580][ T6013] pim6reg: entered allmulticast mode [ 109.798711][ T6017] pim6reg: left allmulticast mode [ 110.023043][ T5850] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.052787][ T6034] binder: 6033:6034 ioctl 89f2 200000000300 returned -22 [ 110.149396][ T6034] tipc: Started in network mode [ 110.154662][ T6034] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 110.180498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 110.188424][ T5850] usb 3-1: device descriptor read/64, error -71 [ 110.209025][ T6034] tipc: Enabled bearer , priority 10 [ 110.705072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.806761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.816084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.824817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.909030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 111.228325][ T5850] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.329227][ T5936] tipc: Node number set to 10398378 [ 111.398383][ T5850] usb 3-1: device descriptor read/64, error -71 [ 111.880050][ T5850] usb usb3-port1: attempt power cycle [ 112.185325][ T6057] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.196699][ T6057] mmap: syz.0.23 (6057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.288617][ T5850] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.320276][ T5850] usb 3-1: device descriptor read/8, error -71 [ 112.361104][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.508400][ T5920] usb 5-1: device descriptor read/64, error -71 [ 112.559339][ T5850] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.584613][ T5850] usb 3-1: device descriptor read/8, error -71 [ 112.704311][ T5850] usb usb3-port1: unable to enumerate USB device [ 112.787055][ T6068] 9pnet_fd: Insufficient options for proto=fd [ 112.793505][ T5920] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.839467][ T3091] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.920313][ T6070] vlan0: entered promiscuous mode [ 112.938941][ T5920] usb 5-1: device descriptor read/64, error -71 [ 113.003222][ T3091] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.013240][ T3091] usb 1-1: config 1 has an invalid interface number: 88 but max is 1 [ 113.024185][ T3091] usb 1-1: config 1 has no interface number 1 [ 113.031185][ T3091] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 113.044386][ T3091] usb 1-1: config 1 interface 0 has no altsetting 0 [ 113.052745][ T5920] usb usb5-port1: attempt power cycle [ 113.063702][ T3091] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 113.073988][ T3091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.082148][ T3091] usb 1-1: Product: syz [ 113.086496][ T3091] usb 1-1: Manufacturer: syz [ 113.095940][ T3091] usb 1-1: SerialNumber: syz [ 113.178417][ T5936] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 113.342998][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.351491][ T3091] smsusb:smsusb_probe: board id=8, interface number 0 [ 113.398888][ T5936] usb 2-1: not running at top speed; connect to a high speed hub [ 113.418464][ T5920] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.420761][ T5936] usb 2-1: config 3 has an invalid interface number: 29 but max is 0 [ 113.436727][ T5936] usb 2-1: config 3 has no interface number 0 [ 113.443464][ T3091] smsusb:smsusb_probe: board id=8, interface number 88 [ 113.444358][ T5936] usb 2-1: config 3 interface 29 has no altsetting 0 [ 113.451653][ T5920] usb 5-1: device descriptor read/8, error -71 [ 113.464421][ T5936] usb 2-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=fe.6f [ 113.478546][ T3091] usb 1-1: USB disconnect, device number 2 [ 113.490219][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.561407][ T5936] usb 2-1: Product: syz [ 113.566688][ T5936] usb 2-1: Manufacturer: syz [ 113.575288][ T5936] usb 2-1: SerialNumber: syz [ 113.738413][ T5920] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.771231][ T5920] usb 5-1: device descriptor read/8, error -71 [ 113.815237][ T5936] usb 2-1: USB disconnect, device number 2 [ 113.894981][ T5920] usb usb5-port1: unable to enumerate USB device [ 114.178641][ T6084] process 'syz.0.38' launched './file0' with NULL argv: empty string added [ 114.519972][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 114.538371][ T6087] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 115.680051][ T6100] netlink: 'syz.1.44': attribute type 6 has an invalid length. [ 115.736578][ T30] audit: type=1326 audit(1755154399.645:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf3b8ebe9 code=0x7ffc0000 [ 115.759655][ T6102] netlink: 88 bytes leftover after parsing attributes in process `syz.2.45'. [ 115.812668][ T30] audit: type=1326 audit(1755154399.645:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcf3b8ebe9 code=0x7ffc0000 [ 115.833869][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.880096][ T30] audit: type=1326 audit(1755154399.645:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf3b8ebe9 code=0x7ffc0000 [ 115.901260][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.919931][ T30] audit: type=1326 audit(1755154399.645:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf3b8ebe9 code=0x7ffc0000 [ 116.020146][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 116.038562][ T30] audit: type=1326 audit(1755154399.645:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efcf3b8ebe9 code=0x7ffc0000 [ 116.088317][ T30] audit: type=1326 audit(1755154399.645:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf3b8ebe9 code=0x7ffc0000 [ 116.206419][ T30] audit: type=1326 audit(1755154399.645:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf3b8ebe9 code=0x7ffc0000 [ 116.627236][ T30] audit: type=1326 audit(1755154399.675:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcf3b8ebe9 code=0x7ffc0000 [ 116.666149][ T6105] syz.3.41: attempt to access beyond end of device [ 116.666149][ T6105] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 116.681518][ T6105] gfs2: error -5 reading superblock [ 116.805898][ T30] audit: type=1326 audit(1755154399.675:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf3b8ebe9 code=0x7ffc0000 [ 116.875475][ T30] audit: type=1326 audit(1755154399.675:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf3b8ebe9 code=0x7ffc0000 [ 117.120232][ T6124] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 117.128926][ T6124] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 117.138057][ T6124] overlayfs: missing 'lowerdir' [ 118.264829][ T6152] tmpfs: Bad value for 'mpol' [ 119.646257][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.59'. [ 119.672527][ T6171] bridge1: entered promiscuous mode [ 119.678042][ T6171] bridge1: entered allmulticast mode [ 119.947970][ T6174] sctp: [Deprecated]: syz.3.62 (pid 6174) Use of int in maxseg socket option. [ 119.947970][ T6174] Use struct sctp_assoc_value instead [ 120.807501][ T6180] tipc: Started in network mode [ 120.829267][ T6180] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 120.871964][ T6180] tipc: Enabled bearer , priority 10 [ 121.215751][ T6188] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 121.988861][ T24] tipc: Node number set to 4269801488 [ 124.004921][ T5850] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.168557][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 124.208589][ T5850] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 124.234482][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.272681][ T5850] usb 5-1: config 0 descriptor?? [ 124.294611][ T6207] xt_socket: unknown flags 0xc [ 124.408909][ T5920] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.519569][ T5850] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 124.555150][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.558341][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.578179][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 124.587178][ T5920] usb 4-1: config 250 has an invalid interface number: 40 but max is 3 [ 124.595878][ T5920] usb 4-1: config 250 has an invalid interface number: 32 but max is 3 [ 124.605559][ T5920] usb 4-1: config 250 has an invalid interface number: 162 but max is 3 [ 124.614187][ T5920] usb 4-1: config 250 has an invalid descriptor of length 171, skipping remainder of the config [ 124.624880][ T5920] usb 4-1: config 250 has 3 interfaces, different from the descriptor's value: 4 [ 124.636014][ T5920] usb 4-1: config 250 has no interface number 0 [ 124.642454][ T5920] usb 4-1: config 250 has no interface number 1 [ 124.649678][ T5920] usb 4-1: config 250 has no interface number 2 [ 124.656151][ T5920] usb 4-1: config 250 interface 40 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 124.667680][ T5920] usb 4-1: config 250 interface 40 altsetting 64 bulk endpoint 0x9 has invalid maxpacket 16 [ 124.677639][ T5850] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 124.677965][ T5920] usb 4-1: config 250 interface 40 altsetting 64 bulk endpoint 0x6 has invalid maxpacket 16 [ 124.695407][ T5920] usb 4-1: config 250 interface 32 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 124.706705][ T5920] usb 4-1: config 250 interface 32 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 124.721773][ T5850] usb 5-1: media controller created [ 124.738668][ T5920] usb 4-1: config 250 interface 162 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 124.770429][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 124.779921][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.787955][ T24] usb 2-1: Product: syz [ 124.795016][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.807316][ T5920] usb 4-1: config 250 interface 40 has no altsetting 0 [ 124.818520][ T24] usb 2-1: Manufacturer: syz [ 124.823200][ T24] usb 2-1: SerialNumber: syz [ 124.838322][ T5920] usb 4-1: config 250 interface 32 has no altsetting 0 [ 124.845373][ T5920] usb 4-1: config 250 interface 162 has no altsetting 0 [ 124.883120][ T5920] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice=68.4d [ 124.899245][ T24] usb 2-1: config 0 descriptor?? [ 124.924947][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.965082][ T5920] usb 4-1: Product: 随愂耀꧸賌緗쯪痁챉퉜羀謙⥆ᕁ怍驤䄐뭺벽㑈퍎㤯ђ䵡軝酪峉럧뫮⤒鲧ⴑ錁岖㮿㩬薏޴Ῥꏯ蕄獶톽郻愇끩얀ꄝ⼯⑅Ӂᓟ玦ꍝ⡲兏畬⿳咗ᵪ랓蝃埗睚쬁米戈魱淚퐇併캙ﰅ㒟ড⫪ [ 125.007097][ T5920] usb 4-1: Manufacturer: 柰䭄ⵅ䍋武겘笺输垵ꅂ韊⷗톍䑍M흫떮쭲몁ב擺ැ鋞샢狕鶭ﱲᨐᚶ꾬骿嚾栃뚯쎙륋齅≥덡㻭닍胳謹䌮笠ٷ땣鵬뺶倵嚉㱑꩖៍栨串䱎亩嗍격䥇ヒ墍뵋␶Ǐ貓拮谰粄넣쩜쥉ᑀ녨啀拺葰迹兂鸊 [ 125.058910][ T5920] usb 4-1: SerialNumber: syz [ 125.095271][ T6211] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 125.104140][ T6211] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 125.144957][ T5850] az6027: usb out operation failed. (-71) [ 125.172083][ T5850] stb0899_attach: Driver disabled by Kconfig [ 125.192386][ T5850] az6027: no front-end attached [ 125.192386][ T5850] [ 125.208449][ T5850] az6027: usb out operation failed. (-71) [ 125.222991][ T5850] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 125.240969][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.277368][ T5850] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 125.298987][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.326055][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.339393][ T5850] dvb-usb: schedule remote query interval to 400 msecs. [ 125.340953][ T5920] mos7720 4-1:250.40: required endpoints missing [ 125.378535][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.387005][ T5850] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 125.441166][ T5850] usb 5-1: USB disconnect, device number 6 [ 125.468825][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.496989][ T5920] mos7720 4-1:250.32: required endpoints missing [ 125.523070][ T5920] mos7720 4-1:250.162: required endpoints missing [ 125.549741][ T5921] usb 2-1: USB disconnect, device number 3 [ 125.566605][ T5920] usb 4-1: USB disconnect, device number 2 [ 125.648210][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 125.675115][ T5850] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 125.735748][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 125.783420][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.819023][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.838051][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.870562][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.895337][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.914132][ T5936] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.924068][ T24] usb 1-1: Product: syz [ 125.928407][ T24] usb 1-1: Manufacturer: syz [ 125.928483][ T24] usb 1-1: SerialNumber: syz [ 126.070555][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 126.088060][ T5936] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 126.127081][ T5936] usb 3-1: config 0 has no interface number 0 [ 126.146135][ T5936] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.164589][ T5936] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 126.192549][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 126.201348][ T5936] usb 3-1: Product: syz [ 126.219381][ T5936] usb 3-1: SerialNumber: syz [ 126.227692][ T5936] usb 3-1: config 0 descriptor?? [ 126.266389][ T5936] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input7 [ 126.536827][ T5850] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.908514][ T6223] hfsplus: Unexpected value for 'barrier' [ 127.033836][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.039919][ T5921] usb 3-1: USB disconnect, device number 6 [ 127.042660][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.055378][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 127.187233][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.217576][ T5921] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 127.228252][ T5850] usb 4-1: Using ep0 maxpacket: 16 [ 127.264196][ T5850] usb 4-1: config 1 has an invalid descriptor of length 197, skipping remainder of the config [ 127.312848][ T5850] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.338277][ T5850] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.390764][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.521776][ T5850] usb 4-1: Product: syz [ 127.626062][ T5850] usb 4-1: Manufacturer: syz [ 127.674956][ T5850] usb 4-1: SerialNumber: syz [ 128.698385][ T6254] nvme_fabrics: missing parameter 'transport=%s' [ 128.717284][ T6254] nvme_fabrics: missing parameter 'nqn=%s' [ 128.824516][ T6261] exFAT-fs (nullb0): invalid boot record signature [ 128.833261][ T6261] exFAT-fs (nullb0): failed to read boot sector [ 128.839662][ T6261] exFAT-fs (nullb0): failed to recognize exfat type [ 129.285292][ T24] usb 1-1: USB disconnect, device number 3 [ 129.682743][ T5850] usb 4-1: 0:2 : does not exist [ 129.756615][ T5850] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 129.757206][ T6272] netlink: 228 bytes leftover after parsing attributes in process `syz.4.89'. [ 129.869667][ T6273] NILFS (nullb0): couldn't find nilfs on the device [ 130.539934][ T5850] usb 4-1: USB disconnect, device number 3 [ 131.003667][ T6280] warning: `syz.1.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.751229][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 131.793591][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 131.833097][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.861942][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 132.085293][ T6284] overlay: filesystem on ./file0 is read-only [ 132.338549][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.478381][ T5921] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 132.486067][ T24] usb 4-1: device descriptor read/64, error -71 [ 132.640478][ T5921] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.647946][ T6299] netlink: 10 bytes leftover after parsing attributes in process `syz.2.99'. [ 132.665674][ T6299] Zero length message leads to an empty skb [ 132.668363][ T5921] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.728499][ T5921] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.737628][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.745911][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.918251][ T24] usb 4-1: device descriptor read/64, error -71 [ 133.026145][ T5921] usb 2-1: usb_control_msg returned -32 [ 133.041432][ T24] usb usb4-port1: attempt power cycle [ 133.061327][ T5921] usbtmc 2-1:16.0: can't read capabilities [ 133.238485][ T5949] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.410606][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.445921][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.476398][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.515729][ T24] usb 4-1: device descriptor read/8, error -71 [ 133.628236][ T5949] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 133.639687][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.673150][ T5949] usb 3-1: config 0 descriptor?? [ 133.758224][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.937143][ T24] usb 4-1: device descriptor read/8, error -71 [ 134.069301][ T24] usb usb4-port1: unable to enumerate USB device [ 134.116048][ T5949] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 134.165027][ T5949] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 134.311555][ T5949] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x4D [ 134.519109][ T6307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.619408][ T6307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.431613][ T6327] cgroup: Unknown subsys name 'noxattr' [ 135.467429][ T6307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.515165][ T6307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.537958][ T5949] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 135.594587][ T5949] usb 3-1: USB disconnect, device number 7 [ 135.777119][ T5850] usb 2-1: USB disconnect, device number 4 [ 135.867964][ T6331] netlink: 452 bytes leftover after parsing attributes in process `syz.3.105'. [ 138.182765][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.189531][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.627282][ T6348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.638313][ T5936] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 139.659037][ T6349] block nbd4: Device being setup by another task [ 139.677777][ T6343] block nbd4: shutting down sockets [ 139.833215][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.030057][ T5936] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 140.275915][ T5936] usb 4-1: config 0 has no interface number 0 [ 140.314275][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 140.328442][ T5936] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.342378][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 140.364158][ T10] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 140.379137][ T5936] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 140.418718][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.442604][ T10] usb 3-1: Product: syz [ 140.447144][ T10] usb 3-1: Manufacturer: syz [ 140.452096][ T5936] usb 4-1: string descriptor 0 read error: -71 [ 140.462355][ T5936] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 140.472564][ T10] usb 3-1: SerialNumber: syz [ 140.478515][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.498270][ T10] usb 3-1: config 0 descriptor?? [ 140.581768][ T5936] usb 4-1: config 0 descriptor?? [ 140.600194][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.623567][ T5936] usb 4-1: can't set config #0, error -71 [ 140.634560][ T10] usb 3-1: invalid MIDI out EP 0 [ 140.649601][ T5936] usb 4-1: USB disconnect, device number 8 [ 140.682412][ T6360] netlink: 'syz.3.115': attribute type 2 has an invalid length. [ 140.852973][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 140.882238][ T10] usb 3-1: USB disconnect, device number 8 [ 140.921407][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.949117][ T5949] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 141.088297][ T5936] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.108246][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 141.116335][ T5949] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.155757][ T5949] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.172678][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.186170][ T5949] usb 5-1: Product: syz [ 141.190600][ T5949] usb 5-1: Manufacturer: syz [ 141.198403][ T5949] usb 5-1: SerialNumber: syz [ 141.210002][ T5949] usb 5-1: bad CDC descriptors [ 141.249700][ T5936] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.262342][ T5936] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.273261][ T5936] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.288330][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.318236][ T5936] usb 4-1: SerialNumber: syz [ 141.486725][ T6360] bridge: entered promiscuous mode [ 141.690861][ T5936] usb 4-1: 0:2 : does not exist [ 141.713253][ T6357] netlink: 96 bytes leftover after parsing attributes in process `syz.4.114'. [ 141.876063][ T9] usb 5-1: USB disconnect, device number 7 [ 142.513845][ T5936] usb 4-1: USB disconnect, device number 9 [ 142.688770][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.821138][ T3091] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.210564][ T3091] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 143.221579][ T3091] usb 3-1: config 0 has no interface number 0 [ 143.237306][ T3091] usb 3-1: config 0 interface 188 has no altsetting 0 [ 143.259107][ T3091] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=dc.ab [ 143.290563][ T3091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.353007][ T3091] usb 3-1: config 0 descriptor?? [ 143.388822][ T3091] ftdi_sio 3-1:0.188: FTDI USB Serial Device converter detected [ 143.488576][ T3091] ftdi_sio ttyUSB0: unknown device type: 0xdcab [ 144.159753][ T6384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.121'. [ 144.255320][ T6388] netlink: 36 bytes leftover after parsing attributes in process `syz.1.121'. [ 144.758286][ T24] usb 3-1: USB disconnect, device number 9 [ 144.837359][ T24] ftdi_sio 3-1:0.188: device disconnected [ 145.097281][ T6394] No memory to map [ 146.007770][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 146.688372][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 146.688393][ T30] audit: type=1400 audit(1755154429.995:20): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=6413 comm="syz.3.129" path="socket:[8186]" dev="sockfs" ino=8186 [ 146.947305][ T6400] syz.2.125 (6400) used greatest stack depth: 15448 bytes left [ 147.140502][ T6430] geneve1: entered allmulticast mode [ 147.229509][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.431320][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 147.534727][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.324471][ T3091] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 148.924222][ T3091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.983296][ T3091] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 149.045070][ T3091] usb 3-1: config 1 interface 0 has no altsetting 1 [ 149.123115][ T3091] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.153101][ T3091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.201343][ T3091] usb 3-1: SerialNumber: syz [ 149.342945][ T3091] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 149.554233][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 149.578001][ T9] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 149.595241][ T5936] usb 3-1: USB disconnect, device number 10 [ 149.766893][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 149.780402][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 149.794324][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 149.805275][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.824861][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 149.839518][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 149.843297][ T6454] loop9: detected capacity change from 0 to 8 [ 149.857992][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 149.877201][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 149.884073][ T6454] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 149.905804][ T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 149.931180][ T6454] loop9: partition table partially beyond EOD, truncated [ 149.976752][ T6454] loop9: p1 size 81768186 extends beyond EOD, truncated [ 150.111183][ T9] usb 4-1: USB disconnect, device number 10 [ 150.401574][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 150.458359][ T5936] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 150.648317][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 150.669410][ T5936] usb 4-1: config 226 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 100, changing to 10 [ 150.697680][ T5936] usb 4-1: config 226 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 42321, setting to 1024 [ 150.722532][ T5936] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 150.732142][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.747721][ T5936] usb 4-1: Product: syz [ 150.755745][ T5936] usb 4-1: Manufacturer: syz [ 150.765453][ T5936] usb 4-1: SerialNumber: syz [ 150.774598][ T5936] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 150.806602][ T5936] usb 4-1: no configuration chosen from 1 choice [ 150.955070][ T6483] 9pnet_fd: Insufficient options for proto=fd [ 153.764347][ T6520] netlink: 248 bytes leftover after parsing attributes in process `syz.0.152'. [ 154.111197][ T3091] usb 4-1: USB disconnect, device number 11 [ 155.459880][ T5847] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 155.469927][ T5847] Bluetooth: hci0: Injecting HCI hardware error event [ 155.478627][ T5847] Bluetooth: hci0: hardware error 0x00 [ 156.855763][ T6573] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 157.167581][ T6573] batman_adv: batadv0: Adding interface: wlan0 [ 157.428309][ T6578] fuse: Bad value for 'user_id' [ 157.433273][ T6578] fuse: Bad value for 'user_id' [ 157.580065][ T6573] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.709335][ T6573] batman_adv: batadv0: Interface activated: wlan0 [ 158.420293][ T5847] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 158.487604][ T6594] Bluetooth: MGMT ver 1.23 [ 163.492144][ T6660] Invalid/unusable pipe [ 167.135378][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.189'. [ 167.577952][ T6703] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 167.617483][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 168.337400][ T5901] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 168.526238][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 168.551519][ T5901] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 168.602729][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.691145][ T5901] pvrusb2: Hardware description: Terratec Grabster AV400 [ 168.711701][ T6728] program syz.1.199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.731316][ T5901] pvrusb2: ********** [ 168.735392][ T5901] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 168.755068][ T5901] pvrusb2: Important functionality might not be entirely working. [ 168.825391][ T5901] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 168.951773][ T5901] pvrusb2: ********** [ 169.032390][ T2340] pvrusb2: Invalid write control endpoint [ 169.405113][ T6704] 9pnet: p9_errstr2errno: server reported unknown error @΂(0x0000000000000005 [ 169.564533][ T5936] usb 4-1: USB disconnect, device number 12 [ 169.659653][ T2340] pvrusb2: Invalid write control endpoint [ 169.699607][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 169.764450][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 169.778492][ T6749] tipc: Started in network mode [ 169.788323][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 169.816760][ T6749] tipc: Node identity be1827ac5ed, cluster identity 4711 [ 169.833603][ T2340] pvrusb2: Device being rendered inoperable [ 169.853152][ T6749] tipc: Enabled bearer , priority 0 [ 169.886411][ T6750] syzkaller0: entered promiscuous mode [ 169.889586][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 169.918248][ T6750] syzkaller0: entered allmulticast mode [ 169.967206][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 170.024839][ T2340] pvrusb2: Attached sub-driver cx25840 [ 170.033313][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 170.121872][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 170.326114][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 170.380548][ T6750] tipc: Resetting bearer [ 170.791829][ T5901] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 170.902777][ T6750] tipc: Disabling bearer [ 170.948281][ T10] tipc: Node number set to 3771213740 [ 171.055560][ T5901] usb 4-1: device descriptor read/64, error -71 [ 171.438704][ T5901] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 172.008792][ T6782] netlink: 248 bytes leftover after parsing attributes in process `syz.0.209'. [ 172.248705][ T5901] usb 4-1: device descriptor read/64, error -71 [ 172.456016][ T5901] usb usb4-port1: attempt power cycle [ 172.908406][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 173.010159][ T5901] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 173.049755][ T5901] usb 4-1: device descriptor read/8, error -71 [ 173.080612][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 173.107082][ T9] usb 2-1: config 0 has an invalid interface number: 171 but max is 0 [ 173.141957][ T9] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 173.166899][ T9] usb 2-1: config 0 has no interface number 0 [ 173.183792][ T9] usb 2-1: config 0 interface 171 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023 [ 173.310453][ T5901] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 173.435991][ T9] usb 2-1: config 0 interface 171 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.448789][ T9] usb 2-1: config 0 interface 171 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 173.481739][ T9] usb 2-1: config 0 interface 171 altsetting 0 endpoint 0x7 has an invalid bInterval 247, changing to 7 [ 174.326905][ T5901] usb 4-1: device not accepting address 16, error -71 [ 174.442206][ T5901] usb usb4-port1: unable to enumerate USB device [ 174.505343][ T9] usb 2-1: config 0 interface 171 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 174.812302][ T9] usb 2-1: config 0 interface 171 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 174.824172][ T9] usb 2-1: config 0 interface 171 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 174.976050][ T9] usb 2-1: config 0 interface 171 altsetting 0 endpoint 0xB has an invalid bInterval 127, changing to 10 [ 174.998752][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=85.64 [ 175.035379][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.112861][ T9] usb 2-1: config 0 descriptor?? [ 175.164069][ T6790] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 175.244960][ T9] pn533_usb 2-1:0.171: NFC: Could not find bulk-in or bulk-out endpoint [ 176.277412][ T6835] netlink: 60 bytes leftover after parsing attributes in process `syz.4.219'. [ 176.761817][ T9] usb 2-1: USB disconnect, device number 5 [ 178.579255][ T6852] netlink: 248 bytes leftover after parsing attributes in process `syz.4.224'. [ 179.153441][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.222'. [ 179.178352][ T5936] IPVS: starting estimator thread 0... [ 179.219666][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.222'. [ 179.365198][ T6860] IPVS: using max 35 ests per chain, 84000 per kthread [ 179.622617][ T6858] sit1: entered allmulticast mode [ 181.648332][ T5936] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 181.696900][ T6893] x_tables: duplicate underflow at hook 1 [ 181.788822][ T5936] usb 1-1: device descriptor read/64, error -71 [ 182.068240][ T5936] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 182.162114][ T6915] loop2: detected capacity change from 0 to 7 [ 182.190110][ T6915] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 182.213657][ T6915] loop2: p1 start 305626056 is beyond EOD, truncated [ 182.238256][ T5936] usb 1-1: device descriptor read/64, error -71 [ 182.256529][ T6915] loop2: p2 start 656376928 is beyond EOD, truncated [ 182.271288][ T6915] loop2: p3 start 113311743 is beyond EOD, truncated [ 182.279946][ T6915] loop2: p4 start 1702195557 is beyond EOD, truncated [ 182.290349][ T6915] loop2: p5 start 4294901760 is beyond EOD, truncated [ 182.369328][ T5936] usb usb1-port1: attempt power cycle [ 182.508679][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 182.634529][ T5204] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 182.664317][ T5204] loop2: p1 start 305626056 is beyond EOD, truncated [ 182.678596][ T5204] loop2: p2 start 656376928 is beyond EOD, truncated [ 182.695508][ T5204] loop2: p3 start 113311743 is beyond EOD, truncated [ 182.716760][ T5204] loop2: p4 start 1702195557 is beyond EOD, truncated [ 182.727981][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.731261][ T5204] loop2: p5 start 4294901760 is beyond EOD, truncated [ 182.746094][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 182.758854][ T5936] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 182.776642][ T9] usb 4-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 182.817232][ T5936] usb 1-1: device descriptor read/8, error -71 [ 182.900472][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 182.954812][ T9] usb 4-1: config 219 interface 0 has no altsetting 0 [ 182.954843][ T9] usb 4-1: config 219 interface 0 has no altsetting 1 [ 182.960428][ T9] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 182.960463][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.960486][ T9] usb 4-1: Product: syz [ 182.960503][ T9] usb 4-1: Manufacturer: syz [ 182.960520][ T9] usb 4-1: SerialNumber: syz [ 183.059144][ T5204] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 183.059458][ T5204] loop2: p1 start 305626056 is beyond EOD, truncated [ 183.059485][ T5204] loop2: p2 start 656376928 is beyond EOD, truncated [ 183.059506][ T5204] loop2: p3 start 113311743 is beyond EOD, truncated [ 183.059526][ T5204] loop2: p4 start 1702195557 is beyond EOD, truncated [ 183.059547][ T5204] loop2: p5 start 4294901760 is beyond EOD, truncated [ 183.230251][ T5936] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 183.246816][ T9] usb 4-1: selecting invalid altsetting 0 [ 183.247969][ T9] usb 4-1: selecting invalid altsetting 0 [ 183.278509][ T5936] usb 1-1: device descriptor read/8, error -71 [ 183.385044][ T9] usb 4-1: USB disconnect, device number 17 [ 183.391117][ T5936] usb usb1-port1: unable to enumerate USB device [ 183.676032][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.790444][ T6945] syz.2.240 uses obsolete (PF_INET,SOCK_PACKET) [ 184.035468][ T6951] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 184.435566][ T6964] netlink: 248 bytes leftover after parsing attributes in process `syz.2.244'. [ 185.391196][ T6968] netlink: 248 bytes leftover after parsing attributes in process `syz.4.245'. [ 185.909635][ T6975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.123801][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 186.135251][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 186.170337][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 187.396074][ T7011] sctp: [Deprecated]: syz.3.255 (pid 7011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.396074][ T7011] Use struct sctp_sack_info instead [ 187.452569][ T7012] sctp: [Deprecated]: syz.3.255 (pid 7012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.452569][ T7012] Use struct sctp_sack_info instead [ 188.121979][ T5949] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.844141][ T7039] netlink: 248 bytes leftover after parsing attributes in process `syz.4.259'. [ 189.268268][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 189.277002][ T5949] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.392839][ T5949] usb 1-1: config 0 has no interface number 0 [ 189.417102][ T5949] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 189.426301][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.434984][ T5949] usb 1-1: Product: syz [ 189.439361][ T5949] usb 1-1: Manufacturer: syz [ 189.444006][ T5949] usb 1-1: SerialNumber: syz [ 189.461472][ T5949] usb 1-1: config 0 descriptor?? [ 189.471938][ T5949] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 189.519621][ T5949] usb 1-1: selecting invalid altsetting 1 [ 189.525477][ T5949] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 189.587591][ T5949] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 189.604611][ T7047] tipc: Enabled bearer , priority 0 [ 189.627559][ T5949] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 189.689229][ T5949] usb 1-1: media controller created [ 189.790409][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.879455][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.085520][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.120583][ T7059] netlink: 248 bytes leftover after parsing attributes in process `syz.3.262'. [ 191.367845][ T7026] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 191.786161][ T7045] tipc: Disabling bearer [ 191.794128][ T5949] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 191.963062][ T5949] zl10353_read_register: readreg error (reg=127, ret==-32) [ 192.064881][ T5949] usb 1-1: USB disconnect, device number 8 [ 192.085080][ T7068] overlayfs: overlapping lowerdir path [ 192.271431][ T7079] capability: warning: `syz.1.266' uses deprecated v2 capabilities in a way that may be insecure [ 192.599573][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 195.812422][ T7110] Illegal XDP return value 4294967294 on prog (id 71) dev N/A, expect packet loss! [ 195.917946][ T7116] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 197.767916][ T7136] delete_channel: no stack [ 199.263715][ T7148] bridge_slave_0: left allmulticast mode [ 199.270613][ T7148] bridge_slave_0: left promiscuous mode [ 199.291748][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.466270][ T7148] bridge_slave_1: left allmulticast mode [ 199.508387][ T7148] bridge_slave_1: left promiscuous mode [ 199.515299][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.624512][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.638171][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.686838][ T7148] bond0: (slave bond_slave_0): Releasing backup interface [ 199.739691][ T5901] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 199.781973][ T7148] bond0: (slave bond_slave_1): Releasing backup interface [ 199.799784][ T7160] overlayfs: failed to resolve './file1/file0': -2 [ 199.906933][ T7148] team0: Port device team_slave_0 removed [ 199.914941][ T5901] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.931375][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.964708][ T7148] team0: Port device team_slave_1 removed [ 199.980379][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.988301][ T5901] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.010595][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.018834][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.033654][ T5901] usb 4-1: SerialNumber: syz [ 200.064693][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.163516][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.290993][ T7154] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 200.353971][ T7154] bond0: entered promiscuous mode [ 200.386968][ T7154] bond_slave_0: entered promiscuous mode [ 200.439362][ T7154] bond_slave_1: entered promiscuous mode [ 200.820374][ T5901] usb 4-1: 0:2 : does not exist [ 200.992505][ T7173] fuse: Unknown parameter ' [ 200.992505][ T7173] ' [ 201.555324][ T7193] Cannot find map_set index 0 as target [ 201.748886][ T5901] usb 4-1: USB disconnect, device number 18 [ 201.854369][ T5936] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 201.976532][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.039043][ T5936] usb 3-1: config 2 has an invalid interface number: 211 but max is 0 [ 202.071228][ T5936] usb 3-1: config 2 has no interface number 0 [ 202.077415][ T5936] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 202.155847][ T5936] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.237482][ T5936] usb 3-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 203.048169][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.056280][ T5936] usb 3-1: Product: syz [ 203.061251][ T5936] usb 3-1: Manufacturer: syz [ 203.065916][ T5936] usb 3-1: SerialNumber: syz [ 203.095427][ T7195] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.118341][ T5936] em28xx 3-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 203.142298][ T5936] em28xx 3-1:2.211: Device initialization failed. [ 203.158341][ T5936] em28xx 3-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 203.223353][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.296'. [ 203.260475][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.296'. [ 203.329524][ T5936] usb 3-1: USB disconnect, device number 11 [ 204.158731][ T7223] netlink: 248 bytes leftover after parsing attributes in process `syz.4.297'. [ 204.783475][ T7225] netlink: 'syz.1.298': attribute type 1 has an invalid length. [ 205.081277][ T7225] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.098880][ T7247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.104675][ T7225] bond1: (slave bond2): making interface the new active one [ 205.145645][ T7225] bond1: (slave bond2): Enslaving as an active interface with an up link [ 205.349537][ T7253] netlink: 44 bytes leftover after parsing attributes in process `syz.4.305'. [ 205.597654][ T7262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.310'. [ 205.642569][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 205.658587][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 206.490626][ T7289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.759783][ T7298] openvswitch: netlink: Tunnel attr 72 out of range max 16 [ 206.814255][ T7301] netlink: 272 bytes leftover after parsing attributes in process `syz.3.323'. [ 206.878642][ T7301] netlink: 272 bytes leftover after parsing attributes in process `syz.3.323'. [ 206.892598][ T7303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.037006][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 207.201194][ T7313] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 207.241839][ T7313] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 7313, name: syz.4.329 [ 207.272842][ T7313] 3 locks held by syz.4.329/7313: [ 207.278008][ T7313] #0: ffff88807ba313d8 (sk_lock-AF_INET){+.+.}-{0:0}, at: sctp_sendmsg+0xb97/0x2810 [ 207.352153][ T7313] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 207.375709][ T7313] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 207.398222][ T7313] CPU: 0 UID: 0 PID: 7313 Comm: syz.4.329 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 207.398255][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.398277][ T7313] Call Trace: [ 207.398290][ T7313] [ 207.398301][ T7313] dump_stack_lvl+0x189/0x250 [ 207.398338][ T7313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.398374][ T7313] ? print_lock_name+0xde/0x100 [ 207.398410][ T7313] __cant_migrate+0x238/0x2e0 [ 207.398453][ T7313] ? __pfx___cant_migrate+0x10/0x10 [ 207.398497][ T7313] nf_hook_run_bpf+0x8f/0x1f0 [ 207.398519][ T7313] ? __pfx_ipt_do_table+0x10/0x10 [ 207.398549][ T7313] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 207.398570][ T7313] ? iptable_mangle_hook+0x189/0x4c0 [ 207.398603][ T7313] ? nf_hook+0x9d/0x380 [ 207.398620][ T7313] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 207.398646][ T7313] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 207.398668][ T7313] nf_hook_slow+0xc5/0x220 [ 207.398705][ T7313] nf_hook+0x217/0x380 [ 207.398730][ T7313] ? nf_hook+0x9d/0x380 [ 207.398750][ T7313] ? __pfx_nf_hook+0x10/0x10 [ 207.398774][ T7313] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 207.398803][ T7313] ? skb_clone+0x246/0x3a0 [ 207.398828][ T7313] ip_mc_output+0x379/0x590 [ 207.398847][ T7313] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 207.398873][ T7313] ? __ip_queue_xmit+0x63/0x1b00 [ 207.398906][ T7313] __ip_queue_xmit+0x1101/0x1b00 [ 207.398931][ T7313] ? __ip_queue_xmit+0x63/0x1b00 [ 207.398959][ T7313] sctp_packet_transmit+0x2581/0x2bb0 [ 207.399029][ T7313] sctp_packet_singleton+0x233/0x330 [ 207.399057][ T7313] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 207.399091][ T7313] ? sctp_outq_select_transport+0x462/0x570 [ 207.399115][ T7313] ? sctp_transport_burst_limited+0x19c/0x280 [ 207.399145][ T7313] sctp_outq_flush+0x4f0/0x3140 [ 207.399168][ T7313] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 207.399211][ T7313] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 207.399251][ T7313] ? rcu_is_watching+0x15/0xb0 [ 207.399279][ T7313] ? __pfx_sctp_outq_flush+0x10/0x10 [ 207.399310][ T7313] ? sctp_outq_tail+0x612/0x8c0 [ 207.399333][ T7313] ? sctp_outq_uncork+0x4d/0xa0 [ 207.399358][ T7313] sctp_do_sm+0x5332/0x5a20 [ 207.399389][ T7313] ? sctp_stream_init_ext+0x57/0x180 [ 207.399410][ T7313] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 207.399465][ T7313] ? sctp_sendmsg+0x1941/0x2810 [ 207.399494][ T7313] ? __sock_sendmsg+0x19c/0x270 [ 207.399526][ T7313] ? __pfx_sctp_do_sm+0x10/0x10 [ 207.399596][ T7313] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 207.399633][ T7313] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 207.399673][ T7313] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 207.399705][ T7313] ? __asan_memcpy+0x40/0x70 [ 207.399747][ T7313] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 207.399800][ T7313] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 207.399834][ T7313] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 207.399866][ T7313] ? __local_bh_enable_ip+0x12d/0x1c0 [ 207.399899][ T7313] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 207.399925][ T7313] ? security_sctp_bind_connect+0x7e/0x2e0 [ 207.399955][ T7313] sctp_sendmsg+0x1941/0x2810 [ 207.400003][ T7313] ? __pfx_sctp_sendmsg+0x10/0x10 [ 207.400034][ T7313] ? psi_task_change+0xe5/0x250 [ 207.400082][ T7313] ? sock_rps_record_flow+0x19/0x410 [ 207.400112][ T7313] ? inet_sendmsg+0x2f4/0x370 [ 207.400142][ T7313] __sock_sendmsg+0x19c/0x270 [ 207.400173][ T7313] ____sys_sendmsg+0x505/0x830 [ 207.400216][ T7313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.400264][ T7313] ? import_iovec+0x74/0xa0 [ 207.400300][ T7313] ___sys_sendmsg+0x21f/0x2a0 [ 207.400359][ T7313] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.400457][ T7313] ? __fget_files+0x2a/0x420 [ 207.400482][ T7313] ? __fget_files+0x3a0/0x420 [ 207.400521][ T7313] __x64_sys_sendmsg+0x19b/0x260 [ 207.400561][ T7313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.400609][ T7313] ? rcu_is_watching+0x15/0xb0 [ 207.400640][ T7313] ? do_syscall_64+0xbe/0x3b0 [ 207.400672][ T7313] do_syscall_64+0xfa/0x3b0 [ 207.400695][ T7313] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.400718][ T7313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.400741][ T7313] ? clear_bhb_loop+0x60/0xb0 [ 207.400768][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.400790][ T7313] RIP: 0033:0x7ff20b38ebe9 [ 207.400821][ T7313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.400840][ T7313] RSP: 002b:00007ff20c1db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.400865][ T7313] RAX: ffffffffffffffda RBX: 00007ff20b5b5fa0 RCX: 00007ff20b38ebe9 [ 207.400882][ T7313] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 207.400895][ T7313] RBP: 00007ff20b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 207.400907][ T7313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.400917][ T7313] R13: 00007ff20b5b6038 R14: 00007ff20b5b5fa0 R15: 00007fff8d81c7b8 [ 207.400945][ T7313]