last executing test programs: 7m14.830126286s ago: executing program 2 (id=3): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300"/16], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f00000011c0)={0x9, 0x108, 0xfa00, {r6, 0xc, "1c5665", "33aa6e74aefcc8f6f955e24804e83062186954b9267d4e6271c3ea4c32bcef2493fb49978f106275967735fedcb8dfd1bf019f15a64938d9c9c6b17f41097c276d55c23876f93aa2df816ebcf2c8d42c6eec432d226f912fd923bbc5951ebd2e2053787a594f7e0f1b94d06b72164385269dc87788691c3248b7fc160d9de9f68b9016a6b4dd84d39b193ed1c23447f485ae8a8b020fc904f5fe3a0e85eaad314ed18cfe0935186d859709e6ce8c65858d30a4015a9b9bc21f370f0c2eae01bfde5978402a23c9ec00d397db93b010d7186953e5539ebfe4a568212233ab4403da43510a1dd5f4059b7dedcaa87d774c795f5e05118dc8ac8d1f37986d06d1e4"}}, 0x110) 7m12.201411902s ago: executing program 2 (id=6): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c055}, 0x20000084) 7m8.213444458s ago: executing program 2 (id=8): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x1, 'wlan0\x00', {}, 0xfff4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7fff, &(0x7f0000000000)) getsockname$packet(r8, 0x0, &(0x7f0000000080)) socket(0x10, 0x803, 0x0) open_by_handle_at(r8, &(0x7f0000000280)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x4, 0x1, 0x9, 0x3, 0x9}}, 0x50002) 7m2.913319114s ago: executing program 4 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 7m0.877926246s ago: executing program 4 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpgrp(r0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f08", 0x3) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xa0, 0x0, &(0x7f0000000240), &(0x7f0000000280)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0xc0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, 0x6a, 0x1, 0x0, 0x0, {0x1, 0x3, 0x2}}, 0x14}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x14) 6m59.925670619s ago: executing program 2 (id=18): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6m57.879049827s ago: executing program 2 (id=20): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1b) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8af", 0x2c, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000c00)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8000}}, {{0xa, 0x0, 0x0, @private1, 0x4}}}, 0x108) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = fsopen(&(0x7f00000018c0)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x6, 0x0, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f00000002c0)='.\x00', 0x0) close(r4) 6m56.809237763s ago: executing program 4 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 6m53.297453637s ago: executing program 4 (id=24): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 6m52.832493515s ago: executing program 4 (id=27): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) 6m52.46322765s ago: executing program 4 (id=30): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)="e7add1e9c2625c10032c3d89ff01ada0d70932b46a842ed277fac258083ca490d31f341236eccf4507576c4d033dfc3e4f695143a1ad", 0x36) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES8=r2], 0xa8}}, 0x8800) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r5, 0x0, 0x0, 0x1}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x6b) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r6 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r10, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f00000001c0)=0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 6m41.245487941s ago: executing program 32 (id=20): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1b) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8af", 0x2c, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000c00)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8000}}, {{0xa, 0x0, 0x0, @private1, 0x4}}}, 0x108) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = fsopen(&(0x7f00000018c0)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x6, 0x0, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f00000002c0)='.\x00', 0x0) close(r4) 6m37.325863316s ago: executing program 3 (id=45): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f0000000340)=""/121, 0x79}], 0x2}, 0x1}], 0x2, 0x0, 0x0) 6m37.013087s ago: executing program 33 (id=30): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)="e7add1e9c2625c10032c3d89ff01ada0d70932b46a842ed277fac258083ca490d31f341236eccf4507576c4d033dfc3e4f695143a1ad", 0x36) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES8=r2], 0xa8}}, 0x8800) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r5, 0x0, 0x0, 0x1}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x6b) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r6 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r10, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f00000001c0)=0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 6m36.306420504s ago: executing program 3 (id=48): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x48d5}, 0x8050) 6m32.556629957s ago: executing program 3 (id=50): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 6m31.430185813s ago: executing program 3 (id=52): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x24, r1, 0x101, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 6m30.62304569s ago: executing program 3 (id=54): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @multicast}) 6m26.82792294s ago: executing program 3 (id=57): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@updpolicy={0xfc, 0x19, 0x1, 0x1ff, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2, 0x0, 0x300000000000000}, {0x9, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x3c}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x9, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 6m10.313185951s ago: executing program 34 (id=57): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@updpolicy={0xfc, 0x19, 0x1, 0x1ff, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2, 0x0, 0x300000000000000}, {0x9, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x3c}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x9, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 3m33.748184545s ago: executing program 1 (id=337): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m28.006775022s ago: executing program 1 (id=345): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/93, 0x5d}, {0x0}], 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000002100)=0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m26.688428892s ago: executing program 1 (id=348): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x800) 3m25.678570797s ago: executing program 1 (id=353): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 3m25.017094584s ago: executing program 1 (id=355): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)='grpquota') setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1, 0xfffffffd}}}, 0x108) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0xfffd, 0x7, 0xa15, 0x0, 0x0, 0x10, 0x6}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m23.774801659s ago: executing program 1 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x0, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m8.124663971s ago: executing program 35 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x0, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 21.809415592s ago: executing program 5 (id=860): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) socket$inet(0xa, 0x1, 0x0) close(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) r2 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x40042, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0xffffff01, 0x2) 20.104770999s ago: executing program 5 (id=864): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740), 0x111}}, 0x20) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x400d7ed, 0x10100, 0x0, 0x2cc, 0x0, r3}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) 18.025254878s ago: executing program 5 (id=870): socket$inet(0xa, 0x801, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='smaps\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') 16.370411632s ago: executing program 5 (id=875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 15.013131183s ago: executing program 0 (id=876): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 14.233265109s ago: executing program 5 (id=879): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c001}, 0x40083) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, 0x0) 13.91334742s ago: executing program 8 (id=880): syz_usb_connect$uac1(0x3, 0xd2, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x57, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x3}, [@selector_unit={0x7, 0x24, 0x5, 0x1, 0x4, "f0dc"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0xe, 0xa3, 'y'}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x0, "7c5681"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x1, 0xbe, "c8d885"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1ff, 0x5, 0x5, "bfcfa1bab001dde3"}, @as_header={0x7, 0x24, 0x1, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x2, 0x3, "d515c78ccd3fb2"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0x4, "d9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x5, 0x2, {0x7, 0x25, 0x1, 0x3, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xc2, 0x0, 0x3, {0x7, 0x25, 0x1, 0x83, 0xd1, 0x4}}}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) 13.77086891s ago: executing program 6 (id=881): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x122) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a3000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 13.432924232s ago: executing program 0 (id=883): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) mount$tmpfs(0x0, 0x0, 0x0, 0x10a40a2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) pivot_root(0x0, &(0x7f00000001c0)='./file0\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.184780454s ago: executing program 5 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xc, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x124) 5.540180663s ago: executing program 8 (id=885): socket$kcm(0x29, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001"], 0xec}}, 0x0) 5.409623136s ago: executing program 7 (id=886): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) socket$inet(0xa, 0x1, 0x0) close(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) r2 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x40042, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0xffffff01, 0x2) 5.409244345s ago: executing program 6 (id=887): r0 = gettid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x1, 0x3f5, '{u7', 0x6, 0x9}) tkill(r0, 0xb) 5.212585143s ago: executing program 0 (id=888): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x3, {[@local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x1, 0x1, 0x1, "9c"}]}}, 0x0}, 0x0) 4.022362692s ago: executing program 7 (id=889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040080) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_clone(0x83000, &(0x7f0000000280)="70d56e05cd1747e09cbeb1686837012f303763f530a66aca29400bafe2b5e64c1f", 0x21, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0x3, 0x3, 0x5, 0x0, 0x2, 0xf1, 0x8, 0x3, 0x4, 0x3, 0x0, 0xa8, 0x0, 0x1, 0x3, 0x5, 0x6b, 0x2, 0xd5, '\x00', 0x1, 0x7}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.992238579s ago: executing program 6 (id=890): syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000002dc0)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.850606574s ago: executing program 8 (id=891): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000081"], 0x1) 3.048026873s ago: executing program 8 (id=892): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x282}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="0dd1", 0x2}], 0x1}}], 0x2, 0x0) 2.971514286s ago: executing program 6 (id=893): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 2.75703028s ago: executing program 7 (id=894): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ac1414aa000000000000000000000000000000001fff0000000020005c000000", @ANYRES32, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c000000ffff30e21c5500000000000000000000000000000000000000000000080000000000000000000000fffffffff7ffffff4c44c5d600"/90], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2.281323689s ago: executing program 8 (id=895): syz_usb_connect$uac1(0x3, 0xd2, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x57, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x3}, [@selector_unit={0x7, 0x24, 0x5, 0x1, 0x4, "f0dc"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0xe, 0xa3, 'y'}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x0, "7c5681"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x1, 0xbe, "c8d885"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1ff, 0x5, 0x5, "bfcfa1bab001dde3"}, @as_header={0x7, 0x24, 0x1, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x2, 0x3, "d515c78ccd3fb2"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0x4, "d9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x5, 0x2, {0x7, 0x25, 0x1, 0x3, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xc2, 0x0, 0x3, {0x7, 0x25, 0x1, 0x83, 0xd1, 0x4}}}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) 2.144917669s ago: executing program 7 (id=896): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x80) syz_fuse_handle_req(r0, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000f80)={&(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0xe5ac, {0x7, 0x2b, 0x6, 0x20000000, 0x4, 0xd, 0x6, 0x8f0, 0x0, 0x0, 0x18, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.944578242s ago: executing program 0 (id=897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x85}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x1, 0x0, @pic={0x0, 0x2, 0x9, 0x1, 0x8, 0x7c, 0x0, 0x3, 0x3, 0x3, 0xff, 0xce, 0x8, 0xe, 0xff, 0x9}}) 1.590236214s ago: executing program 6 (id=898): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) mount$tmpfs(0x0, 0x0, 0x0, 0x10a40a2, &(0x7f0000000040)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) pivot_root(0x0, &(0x7f00000001c0)='./file0\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.200186597s ago: executing program 7 (id=899): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) connect$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10) r1 = socket(0x2a, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.071467232s ago: executing program 0 (id=900): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x600000b, 0x31, 0xffffffffffffffff, 0xffffd000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000001340)) 595.506167ms ago: executing program 6 (id=901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e70000", 0x0, 0x8107, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 138.087836ms ago: executing program 0 (id=902): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000200)) 54.478571ms ago: executing program 7 (id=903): syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000002dc0)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 0s ago: executing program 8 (id=904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040080) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_clone(0x83000, &(0x7f0000000280)="70d56e05cd1747e09cbeb1686837012f303763f530a66aca29400bafe2b5e64c1f", 0x21, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000180)=@x86={0x3, 0x3, 0x5, 0x0, 0x2, 0xf1, 0x8, 0x3, 0x4, 0x3, 0x0, 0xa8, 0x0, 0x1, 0x3, 0x5, 0x6b, 0x2, 0xd5, '\x00', 0x1, 0x7}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 749 code=0x7ffc0000 [ 225.652339][ T30] audit: type=1326 audit(1765558016.565:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fc38f749 code=0x7ffc0000 [ 225.675643][ T30] audit: type=1326 audit(1765558016.565:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fc38f749 code=0x7ffc0000 [ 229.650999][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.657833][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.680846][ T793] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 229.923514][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 229.987402][ T793] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 229.998874][ T793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 230.009426][ T793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.019884][ T793] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.034528][ T793] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.046667][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.283520][ T793] usb 1-1: GET_CAPABILITIES returned 2f [ 232.297038][ T793] usbtmc 1-1:16.0: can't read capabilities [ 233.650214][ T793] usb 1-1: USB disconnect, device number 3 [ 242.256019][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.291151][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.301356][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.354975][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.369077][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.172477][ T6128] warning: `syz.3.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 244.722633][ T5808] Bluetooth: hci5: command tx timeout [ 246.863190][ T5808] Bluetooth: hci5: command tx timeout [ 248.920138][ T5808] Bluetooth: hci5: command tx timeout [ 249.296584][ T6120] chnl_net:caif_netlink_parms(): no params data found [ 249.379988][ T793] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 249.710103][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 249.738392][ T793] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 249.747185][ T793] usb 2-1: config 0 has no interface number 0 [ 249.753514][ T793] usb 2-1: config 0 interface 230 has no altsetting 0 [ 249.810917][ T5804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.836588][ T793] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 249.846119][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.854483][ T793] usb 2-1: Product: syz [ 249.858844][ T793] usb 2-1: Manufacturer: syz [ 249.863770][ T793] usb 2-1: SerialNumber: syz [ 249.872141][ T5804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.883991][ T793] usb 2-1: config 0 descriptor?? [ 249.891260][ T5804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.911639][ T793] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 249.930635][ T5804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.944385][ T5804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.975176][ T793] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 250.990157][ T5804] Bluetooth: hci5: command tx timeout [ 251.797775][ T6120] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.805456][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.813639][ T6120] bridge_slave_0: entered allmulticast mode [ 251.822570][ T6120] bridge_slave_0: entered promiscuous mode [ 252.783267][ T5804] Bluetooth: hci6: command tx timeout [ 253.875222][ T6120] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.883201][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.891613][ T6120] bridge_slave_1: entered allmulticast mode [ 253.910300][ T6120] bridge_slave_1: entered promiscuous mode [ 254.704951][ T793] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 254.829931][ T6120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.831973][ T5804] Bluetooth: hci6: command tx timeout [ 254.878062][ T793] usb 2-1: USB disconnect, device number 2 [ 254.955451][ T4282] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.058270][ T6147] chnl_net:caif_netlink_parms(): no params data found [ 255.107872][ T6120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.200617][ T4282] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.665379][ T4282] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.782006][ T6120] team0: Port device team_slave_0 added [ 256.026402][ T4282] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.132789][ T6120] team0: Port device team_slave_1 added [ 256.449983][ T793] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 256.666464][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.675792][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.703091][ T6120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.748964][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 256.800871][ T793] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 256.809465][ T793] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 256.818158][ T793] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 256.826775][ T793] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 256.835530][ T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 256.844821][ T793] usb 2-1: config 0 has no interface number 0 [ 256.851509][ T793] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 256.867876][ T793] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 256.879642][ T793] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 256.889973][ T793] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.906162][ T793] usb 2-1: config 0 interface 125 has no altsetting 0 [ 256.913311][ T793] usb 2-1: config 0 interface 125 has no altsetting 2 [ 256.960500][ T4282] bridge_slave_1: left allmulticast mode [ 256.972242][ T4282] bridge_slave_1: left promiscuous mode [ 256.978486][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.981342][ T5804] Bluetooth: hci6: command tx timeout [ 257.088131][ T4282] bridge_slave_0: left allmulticast mode [ 257.094425][ T4282] bridge_slave_0: left promiscuous mode [ 257.101169][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.561712][ T793] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 257.571192][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.583757][ T793] usb 2-1: Product: syz [ 257.588120][ T793] usb 2-1: Manufacturer: syz [ 257.594600][ T793] usb 2-1: SerialNumber: syz [ 257.643073][ T793] usb 2-1: config 0 descriptor?? [ 257.691570][ T793] usb 2-1: selecting invalid altsetting 2 [ 258.163390][ C0] usb 2-1: async_complete: urb error -71 [ 258.169827][ C0] usb 2-1: async_complete: urb error -71 [ 258.176190][ C0] usb 2-1: async_complete: urb error -71 [ 258.206239][ T4282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.230107][ T793] get_1284_register: usb error -71 [ 258.235762][ T793] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 258.284979][ T4282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.321396][ T793] usb 2-1: USB disconnect, device number 3 [ 258.355580][ T4282] bond0 (unregistering): Released all slaves [ 258.452369][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.459513][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.486209][ T6120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.075708][ T5804] Bluetooth: hci6: command tx timeout [ 261.650923][ T6120] hsr_slave_0: entered promiscuous mode [ 261.664515][ T6120] hsr_slave_1: entered promiscuous mode [ 261.673473][ T6120] debugfs: 'hsr0' already exists in 'hsr' [ 261.683463][ T6120] Cannot create hsr debugfs directory [ 261.694221][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.701943][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.709621][ T6147] bridge_slave_0: entered allmulticast mode [ 261.719401][ T6147] bridge_slave_0: entered promiscuous mode [ 261.784331][ T4282] hsr_slave_0: left promiscuous mode [ 261.804463][ T4282] hsr_slave_1: left promiscuous mode [ 261.812679][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.821057][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.892151][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.900701][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.014977][ T4282] veth1_macvtap: left promiscuous mode [ 262.025934][ T4282] veth0_macvtap: left promiscuous mode [ 262.032058][ T4282] veth1_vlan: left promiscuous mode [ 262.037518][ T4282] veth0_vlan: left promiscuous mode [ 262.537066][ T6201] Cannot find set identified by id 0 to match [ 264.420789][ T4282] team0 (unregistering): Port device team_slave_1 removed [ 264.533660][ T4282] team0 (unregistering): Port device team_slave_0 removed [ 265.222492][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.230303][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.237967][ T6147] bridge_slave_1: entered allmulticast mode [ 265.247752][ T6147] bridge_slave_1: entered promiscuous mode [ 268.021433][ T6147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.261657][ T6147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.501163][ T4282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.762181][ T4282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.938410][ T6147] team0: Port device team_slave_0 added [ 269.031452][ T6147] team0: Port device team_slave_1 added [ 269.090864][ T4282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.381651][ T4282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.674936][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.682451][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.710258][ T6147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.172885][ T6120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 270.327222][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.334520][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.361251][ T6147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.488303][ T6120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.005565][ T4282] bridge_slave_1: left allmulticast mode [ 271.012334][ T4282] bridge_slave_1: left promiscuous mode [ 271.018914][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.429113][ T4282] bridge_slave_0: left allmulticast mode [ 271.436207][ T4282] bridge_slave_0: left promiscuous mode [ 271.437136][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.810132][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 272.564229][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 272.576373][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 272.627075][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 272.639545][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.648999][ T9] usb 2-1: Product: syz [ 272.653802][ T9] usb 2-1: Manufacturer: syz [ 272.658602][ T9] usb 2-1: SerialNumber: syz [ 272.698559][ T4282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.761204][ T4282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.789246][ T4282] bond0 (unregistering): Released all slaves [ 273.321097][ T6120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.626431][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.641493][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.660761][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.670053][ T6120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.691450][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.719432][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.934786][ T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 [ 274.033438][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 274.215893][ T9] usb 2-1: USB disconnect, device number 4 [ 274.295468][ T6147] hsr_slave_0: entered promiscuous mode [ 274.307367][ T6147] hsr_slave_1: entered promiscuous mode [ 274.315137][ T6147] debugfs: 'hsr0' already exists in 'hsr' [ 274.321041][ T6147] Cannot create hsr debugfs directory [ 274.420250][ T9] appletouch 2-1:1.0: input: appletouch disconnected [ 275.020593][ T4282] hsr_slave_0: left promiscuous mode [ 275.038992][ T4282] hsr_slave_1: left promiscuous mode [ 275.047983][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.055685][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.112370][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.120532][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.153652][ T4282] veth1_macvtap: left promiscuous mode [ 275.159338][ T4282] veth0_macvtap: left promiscuous mode [ 275.166085][ T4282] veth1_vlan: left promiscuous mode [ 275.171762][ T4282] veth0_vlan: left promiscuous mode [ 275.791795][ T5804] Bluetooth: hci1: command tx timeout [ 276.061982][ T4282] team0 (unregistering): Port device team_slave_1 removed [ 276.166833][ T4282] team0 (unregistering): Port device team_slave_0 removed [ 277.871581][ T5804] Bluetooth: hci1: command tx timeout [ 279.949966][ T5804] Bluetooth: hci1: command tx timeout [ 282.031795][ T5804] Bluetooth: hci1: command tx timeout [ 283.138353][ T6120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.375299][ T6120] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.439952][ T6147] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.541234][ T6147] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.643467][ T3871] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.650908][ T3871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.663229][ T6147] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.962937][ T3871] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.971472][ T3871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.511163][ T6147] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 287.149153][ T6251] chnl_net:caif_netlink_parms(): no params data found [ 288.188770][ T4010] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.345843][ T4010] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.568907][ T4010] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.764755][ T4010] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.305463][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.314793][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.322728][ T6251] bridge_slave_0: entered allmulticast mode [ 289.337821][ T6251] bridge_slave_0: entered promiscuous mode [ 289.404321][ T6120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.415730][ T4010] bridge_slave_1: left allmulticast mode [ 289.421863][ T4010] bridge_slave_1: left promiscuous mode [ 289.433351][ T4010] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.488034][ T4010] bridge_slave_0: left allmulticast mode [ 289.494519][ T4010] bridge_slave_0: left promiscuous mode [ 289.501189][ T4010] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.908085][ T4010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.012454][ T4010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.062599][ T4010] bond0 (unregistering): Released all slaves [ 291.169266][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.177321][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.305287][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.313353][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.321746][ T6251] bridge_slave_1: entered allmulticast mode [ 291.333519][ T6251] bridge_slave_1: entered promiscuous mode [ 291.482833][ T6147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.615604][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.648711][ T6348] Bluetooth: MGMT ver 1.23 [ 291.785714][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.274351][ T6251] team0: Port device team_slave_0 added [ 292.335953][ T4010] hsr_slave_0: left promiscuous mode [ 292.355035][ T4010] hsr_slave_1: left promiscuous mode [ 292.367709][ T4010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.375514][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.426545][ T4010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.435126][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.530653][ T4010] veth1_macvtap: left promiscuous mode [ 292.536387][ T4010] veth0_macvtap: left promiscuous mode [ 292.544575][ T4010] veth1_vlan: left promiscuous mode [ 292.550311][ T4010] veth0_vlan: left promiscuous mode [ 293.293893][ T4010] team0 (unregistering): Port device team_slave_1 removed [ 293.386500][ T4010] team0 (unregistering): Port device team_slave_0 removed [ 294.138884][ T6147] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.227134][ T6251] team0: Port device team_slave_1 added [ 294.347958][ T3976] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.355636][ T3976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.371504][ T3976] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.379004][ T3976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.923474][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.930800][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.960707][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.288967][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.298296][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.326161][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.385344][ T6120] veth0_vlan: entered promiscuous mode [ 295.477112][ T6120] veth1_vlan: entered promiscuous mode [ 295.890171][ T6120] veth0_macvtap: entered promiscuous mode [ 295.928846][ T6251] hsr_slave_0: entered promiscuous mode [ 295.939181][ T6251] hsr_slave_1: entered promiscuous mode [ 296.007240][ T6120] veth1_macvtap: entered promiscuous mode [ 296.145527][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.397251][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.669219][ T73] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.778652][ T73] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.841311][ T73] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.875663][ T73] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.383254][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.040026][ T6251] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 299.851842][ T6251] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 299.916568][ T6251] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 300.421236][ T6251] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 301.689269][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.991225][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.086107][ T3976] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.093753][ T3976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.202783][ T3976] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.210437][ T3976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.935189][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.982452][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.994884][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.023556][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.035277][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.426509][ T6147] veth0_vlan: entered promiscuous mode [ 303.571650][ T6147] veth1_vlan: entered promiscuous mode [ 304.778428][ T6449] input: syz0 as /devices/virtual/input/input6 [ 305.421274][ T5808] Bluetooth: hci2: command tx timeout [ 306.176002][ T6147] veth0_macvtap: entered promiscuous mode [ 307.474263][ T52] Bluetooth: hci2: command tx timeout [ 307.735740][ T4010] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.882676][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.005167][ T4010] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.182153][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.192926][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 308.195263][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.209322][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.226564][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.237835][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.374730][ T4010] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.541691][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 308.542182][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 308.591803][ T4010] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.550009][ T5804] Bluetooth: hci2: command tx timeout [ 310.350263][ T5804] Bluetooth: hci4: command tx timeout [ 310.523854][ T793] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 311.501293][ T793] usb 1-1: Using ep0 maxpacket: 32 [ 311.569023][ T793] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 311.577731][ T793] usb 1-1: config 0 has no interface number 0 [ 311.674089][ T5804] Bluetooth: hci2: command tx timeout [ 311.693005][ T793] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 311.703022][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.712024][ T793] usb 1-1: Product: syz [ 311.716389][ T793] usb 1-1: Manufacturer: syz [ 311.721331][ T793] usb 1-1: SerialNumber: syz [ 311.739042][ T793] usb 1-1: config 0 descriptor?? [ 311.760441][ T793] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 311.866507][ T4010] bridge_slave_1: left allmulticast mode [ 311.872665][ T4010] bridge_slave_1: left promiscuous mode [ 311.879483][ T4010] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.031740][ T4010] bridge_slave_0: left allmulticast mode [ 312.037722][ T4010] bridge_slave_0: left promiscuous mode [ 312.045867][ T4010] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.432452][ T5804] Bluetooth: hci4: command tx timeout [ 312.786190][ T793] gspca_sn9c2028: read1 error -110 [ 312.883035][ T793] gspca_sn9c2028: read1 error -32 [ 312.950577][ T793] gspca_sn9c2028: read1 error -32 [ 312.956150][ T793] sn9c2028 1-1:0.119: probe with driver sn9c2028 failed with error -32 [ 313.608726][ T4010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.635454][ T4010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.831233][ T4010] bond0 (unregistering): Released all slaves [ 314.512262][ T5804] Bluetooth: hci4: command tx timeout [ 314.574368][ T4010] hsr_slave_0: left promiscuous mode [ 314.636068][ T4010] hsr_slave_1: left promiscuous mode [ 314.643493][ T4010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.651305][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.795387][ T4010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.803310][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.879380][ T4010] veth1_macvtap: left promiscuous mode [ 314.885891][ T4010] veth0_macvtap: left promiscuous mode [ 314.895750][ T4010] veth1_vlan: left promiscuous mode [ 314.901737][ T4010] veth0_vlan: left promiscuous mode [ 316.592075][ T5804] Bluetooth: hci4: command tx timeout [ 317.131479][ T4010] team0 (unregistering): Port device team_slave_1 removed [ 317.316794][ T4010] team0 (unregistering): Port device team_slave_0 removed [ 317.919194][ T5860] usb 1-1: USB disconnect, device number 4 [ 318.191542][ T6251] veth0_vlan: entered promiscuous mode [ 318.494279][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.502102][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.512669][ T6437] bridge_slave_0: entered allmulticast mode [ 318.522605][ T6437] bridge_slave_0: entered promiscuous mode [ 318.567985][ T6251] veth1_vlan: entered promiscuous mode [ 318.685078][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.695046][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.703016][ T6437] bridge_slave_1: entered allmulticast mode [ 318.715888][ T6437] bridge_slave_1: entered promiscuous mode [ 319.614804][ T6467] chnl_net:caif_netlink_parms(): no params data found [ 319.681650][ T6251] veth0_macvtap: entered promiscuous mode [ 319.708505][ T6527] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 321.152142][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.234624][ T6251] veth1_macvtap: entered promiscuous mode [ 321.368403][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.040514][ T4010] bridge_slave_1: left allmulticast mode [ 322.046378][ T4010] bridge_slave_1: left promiscuous mode [ 322.053197][ T4010] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.127301][ T4010] bridge_slave_0: left allmulticast mode [ 322.133340][ T4010] bridge_slave_0: left promiscuous mode [ 322.140612][ T4010] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.527345][ T5804] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 330.541371][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 330.549216][ T4010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.568943][ T4010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.583916][ T4010] bond0 (unregistering): Released all slaves [ 330.762846][ T6437] team0: Port device team_slave_0 added [ 330.804106][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.867570][ T6437] team0: Port device team_slave_1 added [ 330.957879][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.988888][ T4010] hsr_slave_0: left promiscuous mode [ 331.062445][ T4010] hsr_slave_1: left promiscuous mode [ 331.070911][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.131285][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.166587][ T4010] veth0_macvtap: left promiscuous mode [ 331.173457][ T4010] veth1_vlan: left promiscuous mode [ 331.178995][ T4010] veth0_vlan: left promiscuous mode [ 332.112283][ T4010] team0 (unregistering): Port device team_slave_1 removed [ 332.159216][ T4010] team0 (unregistering): Port device team_slave_0 removed [ 332.787608][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.795075][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.823499][ T6437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.024780][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.033913][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.062700][ T6437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.557356][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.567808][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.575700][ T6467] bridge_slave_0: entered allmulticast mode [ 333.585654][ T6467] bridge_slave_0: entered promiscuous mode [ 333.936632][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.944395][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.953688][ T6467] bridge_slave_1: entered allmulticast mode [ 333.963415][ T6467] bridge_slave_1: entered promiscuous mode [ 334.000819][ T6437] hsr_slave_0: entered promiscuous mode [ 334.011304][ T6437] hsr_slave_1: entered promiscuous mode [ 334.020487][ T6437] debugfs: 'hsr0' already exists in 'hsr' [ 334.026397][ T6437] Cannot create hsr debugfs directory [ 334.110360][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.119410][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.131737][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.151891][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.166541][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.688926][ T6467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.776685][ T6467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.348397][ T6467] team0: Port device team_slave_0 added [ 335.478126][ T6467] team0: Port device team_slave_1 added [ 335.625766][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.633108][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.659826][ T6467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.817821][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.825455][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.853485][ T6467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.276904][ T5804] Bluetooth: hci5: command tx timeout [ 336.534148][ T5861] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 336.599530][ T6467] hsr_slave_0: entered promiscuous mode [ 336.610352][ T6467] hsr_slave_1: entered promiscuous mode [ 336.619210][ T6467] debugfs: 'hsr0' already exists in 'hsr' [ 336.625257][ T6467] Cannot create hsr debugfs directory [ 336.756636][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 336.787833][ T5861] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 336.796867][ T5861] usb 2-1: config 254 has an invalid descriptor of length 255, skipping remainder of the config [ 336.807794][ T5861] usb 2-1: config 254 has no interface number 0 [ 336.814392][ T5861] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.826632][ T5861] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 336.840807][ T5861] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 336.854162][ T5861] usb 2-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.868588][ T5861] usb 2-1: config 254 interface 235 has no altsetting 0 [ 336.947566][ T6570] chnl_net:caif_netlink_parms(): no params data found [ 337.036965][ T5861] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 337.048179][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.057291][ T5861] usb 2-1: Product: syz [ 337.061854][ T5861] usb 2-1: Manufacturer: syz [ 337.066738][ T5861] usb 2-1: SerialNumber: syz [ 337.242535][ T6586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 337.422912][ T4480] bridge_slave_1: left allmulticast mode [ 337.428908][ T4480] bridge_slave_1: left promiscuous mode [ 337.436244][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.484415][ T4480] bridge_slave_0: left allmulticast mode [ 337.492325][ T4480] bridge_slave_0: left promiscuous mode [ 337.499192][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.517293][ T5861] usbtest 2-1:254.235: couldn't get endpoints, -71 [ 337.524427][ T5861] usbtest 2-1:254.235: probe with driver usbtest failed with error -71 [ 337.567042][ T5861] usb 2-1: USB disconnect, device number 5 [ 338.125914][ T4480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.177259][ T4480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.227200][ T4480] bond0 (unregistering): Released all slaves [ 338.368673][ T5804] Bluetooth: hci5: command tx timeout [ 338.559981][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 338.704897][ T4480] hsr_slave_0: left promiscuous mode [ 338.726632][ T4480] hsr_slave_1: left promiscuous mode [ 338.735035][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.747552][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.776347][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.786010][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.796129][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.806812][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.816230][ T24] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 338.825848][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.858803][ T24] usb 1-1: config 0 descriptor?? [ 338.866491][ T4480] veth1_macvtap: left promiscuous mode [ 338.872481][ T4480] veth0_macvtap: left promiscuous mode [ 338.878552][ T4480] veth1_vlan: left promiscuous mode [ 338.884661][ T4480] veth0_vlan: left promiscuous mode [ 339.541964][ T4480] team0 (unregistering): Port device team_slave_1 removed [ 339.568229][ T4480] team0 (unregistering): Port device team_slave_0 removed [ 340.043255][ T6616] batman_adv: batadv0: Adding interface: dummy0 [ 340.049975][ T6616] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.076438][ T6616] batman_adv: batadv0: Interface activated: dummy0 [ 340.220738][ T6616] batadv0: mtu less than device minimum [ 340.228859][ T6616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.242206][ T6616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.255390][ T6616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.268565][ T6616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.281772][ T6616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.294856][ T6616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.308070][ T6616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.321353][ T6616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.334447][ T6616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.430925][ T5804] Bluetooth: hci5: command tx timeout [ 340.891280][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.899025][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.906931][ T6570] bridge_slave_0: entered allmulticast mode [ 340.948318][ T6570] bridge_slave_0: entered promiscuous mode [ 341.117532][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.127959][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.135882][ T6570] bridge_slave_1: entered allmulticast mode [ 341.148112][ T6570] bridge_slave_1: entered promiscuous mode [ 341.300095][ T6437] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 341.408081][ T24] usb 1-1: USB disconnect, device number 5 [ 341.441381][ T6570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.455330][ T6437] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 341.688239][ T6570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.707409][ T6437] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 341.880613][ T6437] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 342.188402][ T6570] team0: Port device team_slave_0 added [ 342.286052][ T6570] team0: Port device team_slave_1 added [ 342.512923][ T5804] Bluetooth: hci5: command tx timeout [ 342.591806][ T6467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.703228][ T6467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.744059][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.751555][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.779365][ T6570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.821669][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.828800][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.855972][ T6570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.871761][ T6467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.904321][ T6467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 343.369283][ T6570] hsr_slave_0: entered promiscuous mode [ 343.380088][ T6570] hsr_slave_1: entered promiscuous mode [ 344.209647][ T6437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.279463][ T6467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.664592][ T6467] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.721066][ T6437] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.786362][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.794011][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.882160][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.889858][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.906077][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.913796][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.959612][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 345.163635][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 345.173074][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 345.182580][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.211765][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.219315][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.382843][ T9] usb 1-1: config 0 descriptor?? [ 345.969203][ T6570] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 346.124148][ T6570] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 346.202010][ T6570] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 346.302153][ T6570] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 346.766467][ T6680] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 347.399133][ T6437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.507276][ T6467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.638089][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.761230][ T5861] usb 1-1: USB disconnect, device number 6 [ 347.840795][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.929866][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.937384][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.061333][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.069039][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.285266][ T6570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.746265][ T6437] veth0_vlan: entered promiscuous mode [ 351.824332][ T6437] veth1_vlan: entered promiscuous mode [ 352.100675][ T6437] veth0_macvtap: entered promiscuous mode [ 352.153101][ T6437] veth1_macvtap: entered promiscuous mode [ 352.357558][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.411097][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.514551][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.541401][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.568815][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.577557][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.655254][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.745763][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.000377][ T6467] veth0_vlan: entered promiscuous mode [ 353.253246][ T6467] veth1_vlan: entered promiscuous mode [ 354.332002][ T6467] veth0_macvtap: entered promiscuous mode [ 354.473381][ T6467] veth1_macvtap: entered promiscuous mode [ 354.664136][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.810045][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.980688][ T1879] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.011004][ T4326] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.057920][ T4326] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.122473][ T4326] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.298462][ T6748] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 355.655346][ T6757] ======================================================= [ 355.655346][ T6757] WARNING: The mand mount option has been deprecated and [ 355.655346][ T6757] and is ignored by this kernel. Remove the mand [ 355.655346][ T6757] option from the mount to silence this warning. [ 355.655346][ T6757] ======================================================= [ 356.186374][ T6570] veth0_vlan: entered promiscuous mode [ 356.314957][ T6570] veth1_vlan: entered promiscuous mode [ 356.637576][ T6570] veth0_macvtap: entered promiscuous mode [ 356.756846][ T6570] veth1_macvtap: entered promiscuous mode [ 356.978083][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.101286][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.133504][ T6775] fuse: Bad value for 'fd' [ 357.196717][ T3853] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.245842][ T3853] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.293556][ T3853] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.352845][ T4480] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.567190][ T6815] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 361.745417][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.753696][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.953494][ T6844] fuse: Invalid rootmode [ 364.160433][ T30] audit: type=1800 audit(1765558155.335:12): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.188" name="bus" dev="ramfs" ino=14880 res=0 errno=0 [ 364.211331][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.237151][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.245486][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.255977][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.272974][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.307338][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.361022][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.569106][ T3853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.577831][ T3853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.306465][ T6856] chnl_net:caif_netlink_parms(): no params data found [ 366.510457][ T5808] Bluetooth: hci1: command tx timeout [ 366.854970][ T6891] fuse: Invalid rootmode [ 367.525875][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.694793][ T3976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.703112][ T3976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.827333][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.051306][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.313551][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.433380][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.441793][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.591239][ T5808] Bluetooth: hci1: command tx timeout [ 368.877255][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.894228][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.902279][ T6856] bridge_slave_0: entered allmulticast mode [ 368.912157][ T6856] bridge_slave_0: entered promiscuous mode [ 369.144496][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.157578][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.165646][ T6856] bridge_slave_1: entered allmulticast mode [ 369.284051][ T6856] bridge_slave_1: entered promiscuous mode [ 369.617352][ T5808] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 370.177327][ T6935] fuse: Invalid rootmode [ 370.216382][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.255278][ T35] bridge_slave_1: left allmulticast mode [ 370.261782][ T35] bridge_slave_1: left promiscuous mode [ 370.268309][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.337306][ T35] bridge_slave_0: left allmulticast mode [ 370.343299][ T35] bridge_slave_0: left promiscuous mode [ 370.350821][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.725151][ T5808] Bluetooth: hci1: command tx timeout [ 371.252203][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.364891][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.392711][ T35] bond0 (unregistering): Released all slaves [ 372.750278][ T5808] Bluetooth: hci1: command tx timeout [ 372.890561][ T5853] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 373.113989][ T5853] usb 1-1: config 0 has an invalid interface number: 166 but max is 0 [ 373.122988][ T5853] usb 1-1: config 0 has no interface number 0 [ 373.152991][ T5853] usb 1-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice=ac.d7 [ 373.162591][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.171466][ T5853] usb 1-1: Product: syz [ 373.175808][ T5853] usb 1-1: Manufacturer: syz [ 373.180877][ T5853] usb 1-1: SerialNumber: syz [ 373.266507][ T5853] usb 1-1: config 0 descriptor?? [ 373.311346][ T5853] appletouch 1-1:0.166: Could not find int-in endpoint [ 373.318668][ T5853] appletouch 1-1:0.166: probe with driver appletouch failed with error -5 [ 373.330564][ T5853] usbhid 1-1:0.166: couldn't find an input interrupt endpoint [ 373.635470][ T5804] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 373.644379][ T5804] Bluetooth: hci0: Injecting HCI hardware error event [ 373.654133][ T5808] Bluetooth: hci0: hardware error 0x00 [ 374.239291][ T30] audit: type=1326 audit(1765558165.395:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.7.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f78f749 code=0x7ffc0000 [ 374.380736][ T30] audit: type=1326 audit(1765558165.485:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.7.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fbe8f78f749 code=0x7ffc0000 [ 374.403608][ T30] audit: type=1326 audit(1765558165.485:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.7.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f78f749 code=0x7ffc0000 [ 374.430234][ T30] audit: type=1326 audit(1765558165.485:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.7.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f78f749 code=0x7ffc0000 [ 375.271831][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.734577][ T5808] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 375.808757][ T35] hsr_slave_0: left promiscuous mode [ 375.850427][ T35] hsr_slave_1: left promiscuous mode [ 375.861757][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.869254][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.934696][ T6965] fuse: Bad value for 'rootmode' [ 375.952310][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.963344][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.097366][ T35] veth1_macvtap: left promiscuous mode [ 376.104169][ T35] veth0_macvtap: left promiscuous mode [ 376.106595][ T9] usb 1-1: USB disconnect, device number 7 [ 376.110229][ T35] veth1_vlan: left promiscuous mode [ 376.121564][ T35] veth0_vlan: left promiscuous mode [ 377.831693][ T35] team0 (unregistering): Port device team_slave_1 removed [ 377.930396][ T35] team0 (unregistering): Port device team_slave_0 removed [ 377.945615][ T6983] loop7: detected capacity change from 0 to 7 [ 377.991610][ T6983] Dev loop7: unable to read RDB block 7 [ 377.997450][ T6983] loop7: AHDI p1 p2 [ 378.002155][ T6983] loop7: partition table partially beyond EOD, truncated [ 378.014326][ T6983] loop7: p1 start 1702000233 is beyond EOD, truncated [ 378.041794][ T6984] loop9: detected capacity change from 0 to 7 [ 378.062826][ T6984] Dev loop9: unable to read RDB block 7 [ 378.068685][ T6984] loop9: unable to read partition table [ 378.079499][ T6984] loop9: partition table beyond EOD, truncated [ 378.086324][ T6984] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 378.928744][ T6990] netlink: 32 bytes leftover after parsing attributes in process `syz.6.228'. [ 379.824661][ T6856] team0: Port device team_slave_0 added [ 379.855499][ T6856] team0: Port device team_slave_1 added [ 380.337338][ T6995] fuse: Bad value for 'rootmode' [ 380.600486][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 380.860298][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 380.878318][ T5808] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 380.887214][ T5808] Bluetooth: hci4: Injecting HCI hardware error event [ 380.905790][ T5804] Bluetooth: hci4: hardware error 0x00 [ 380.958035][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.965787][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.989113][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 380.995394][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.001520][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.001646][ T9] usb 1-1: Product: syz [ 381.001745][ T9] usb 1-1: Manufacturer: syz [ 381.001853][ T9] usb 1-1: SerialNumber: syz [ 381.009002][ T9] usb 1-1: config 0 descriptor?? [ 381.072582][ T9] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 381.327281][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.334710][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.367862][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.438684][ T9] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 381.447601][ T9] visor 1-1:0.0: probe with driver visor failed with error -5 [ 382.087129][ T6856] hsr_slave_0: entered promiscuous mode [ 382.097498][ T6856] hsr_slave_1: entered promiscuous mode [ 382.113330][ T6856] debugfs: 'hsr0' already exists in 'hsr' [ 382.119246][ T6856] Cannot create hsr debugfs directory [ 382.735354][ T5808] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 383.015300][ T5804] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 383.385262][ T9] usb 1-1: USB disconnect, device number 8 [ 383.980558][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 384.069629][ T7034] fuse: Bad value for 'rootmode' [ 384.200401][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 384.275043][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.286525][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.296960][ T24] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 384.306457][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.371403][ T6856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 384.484148][ T24] usb 1-1: config 0 descriptor?? [ 384.551179][ T6856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.691969][ T6856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.823586][ T6856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 384.957466][ T24] hid-multitouch 0003:1FD2:6007.0001: bogus close delimiter [ 384.969395][ T24] hid-multitouch 0003:1FD2:6007.0001: item 0 2 2 10 parsing failed [ 385.099625][ T24] hid-multitouch 0003:1FD2:6007.0001: probe with driver hid-multitouch failed with error -22 [ 385.200357][ T24] usb 1-1: USB disconnect, device number 9 [ 386.236731][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.455918][ T6856] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.544518][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.552143][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.718951][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.726571][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.761270][ T5804] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 386.770084][ T5804] Bluetooth: hci3: Injecting HCI hardware error event [ 386.777593][ T5808] Bluetooth: hci3: hardware error 0x00 [ 387.112701][ T6856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.426797][ T7067] fuse: Unknown parameter 'use00000000000000000000' [ 388.840216][ T5808] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 388.847198][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 389.022771][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 389.098418][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.109367][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.213924][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.224254][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.232739][ T9] usb 1-1: Product: syz [ 389.237082][ T9] usb 1-1: Manufacturer: syz [ 389.241957][ T9] usb 1-1: SerialNumber: syz [ 389.335101][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.541679][ T9] usb 1-1: 0:2 : does not exist [ 389.631158][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 390.067401][ T9] usb 1-1: USB disconnect, device number 10 [ 390.333045][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.799209][ T7104] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.265'. [ 392.580054][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 393.272319][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.283899][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.294038][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 393.307439][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.320251][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.881687][ T24] usb 2-1: config 0 descriptor?? [ 394.620992][ T24] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 394.727616][ T6856] veth0_vlan: entered promiscuous mode [ 394.992411][ T6856] veth1_vlan: entered promiscuous mode [ 395.392402][ T6856] veth0_macvtap: entered promiscuous mode [ 395.574788][ T6856] veth1_macvtap: entered promiscuous mode [ 395.602540][ T793] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 395.710930][ C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 395.800678][ T793] usb 8-1: Using ep0 maxpacket: 16 [ 395.812979][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.878003][ T793] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 395.886838][ T793] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 395.895623][ T793] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 395.904170][ T793] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 395.909460][ T5860] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 395.912785][ T793] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 395.912912][ T793] usb 8-1: config 0 has no interface number 0 [ 395.913035][ T793] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 395.913188][ T793] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 395.913331][ T793] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 395.913468][ T793] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 395.986819][ T793] usb 8-1: config 0 interface 125 has no altsetting 2 [ 396.052508][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.102807][ T4369] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.170814][ T4369] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.207204][ T4369] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.220184][ T5860] usb 2-1: device descriptor read/64, error -32 [ 396.243111][ T4369] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.470684][ T793] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 396.480712][ T793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.488929][ T793] usb 8-1: Product: syz [ 396.493588][ T793] usb 8-1: Manufacturer: syz [ 396.498679][ T793] usb 8-1: SerialNumber: syz [ 396.667501][ T793] usb 8-1: config 0 descriptor?? [ 396.770822][ T793] usb 8-1: selecting invalid altsetting 2 [ 397.154252][ T24] usb 2-1: USB disconnect, device number 6 [ 398.419222][ T24] usb 8-1: USB disconnect, device number 2 [ 401.754455][ T7196] loop9: detected capacity change from 0 to 7 [ 401.841142][ T7196] Dev loop9: unable to read RDB block 7 [ 401.846847][ T7196] loop9: AHDI p4 [ 401.851054][ T7196] loop9: partition table partially beyond EOD, truncated [ 405.144438][ T793] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 405.919872][ C1] hrtimer: interrupt took 314940 ns [ 406.952558][ T7230] mmap: syz.7.299 (7230) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 407.080084][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 407.609289][ T793] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 407.618141][ T793] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 407.626717][ T793] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 407.636324][ T793] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 407.646797][ T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 407.656729][ T793] usb 1-1: config 0 has no interface number 0 [ 407.663718][ T793] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 407.675095][ T793] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 407.685340][ T793] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 407.695645][ T793] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.713054][ T793] usb 1-1: config 0 interface 125 has no altsetting 2 [ 408.325071][ T793] usb 1-1: string descriptor 0 read error: -71 [ 408.332573][ T793] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 408.342064][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.543131][ T793] usb 1-1: config 0 descriptor?? [ 408.570420][ T793] usb 1-1: can't set config #0, error -71 [ 408.581155][ T793] usb 1-1: USB disconnect, device number 11 [ 410.327345][ T3976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.335538][ T3976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.951144][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.959278][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.096310][ T5860] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 412.445822][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 412.455944][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36703, setting to 1024 [ 412.467416][ T5860] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 412.477786][ T5860] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 412.487209][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.736034][ T5860] usb 1-1: config 0 descriptor?? [ 412.744706][ T7260] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 413.046322][ T5860] ath6kl: Failed to submit usb control message: -71 [ 413.053505][ T5860] ath6kl: unable to send the bmi data to the device: -71 [ 413.072493][ T5860] ath6kl: Unable to send get target info: -71 [ 413.170678][ T5860] ath6kl: Failed to init ath6kl core: -71 [ 413.182753][ T5860] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 413.348039][ T5860] usb 1-1: USB disconnect, device number 12 [ 413.611190][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 413.836669][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 413.915060][ T24] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 413.924075][ T24] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 413.933383][ T24] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 413.942240][ T24] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 413.956165][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 413.959310][ T793] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 413.968850][ T24] usb 8-1: config 0 has no interface number 0 [ 413.968988][ T24] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 413.969149][ T24] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 413.969280][ T24] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 413.969420][ T24] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.969580][ T24] usb 8-1: config 0 interface 125 has no altsetting 2 [ 414.067868][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.074883][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.268570][ T24] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 414.278171][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.286738][ T24] usb 8-1: Product: syz [ 414.291344][ T24] usb 8-1: Manufacturer: syz [ 414.296124][ T24] usb 8-1: SerialNumber: syz [ 414.384909][ T24] usb 8-1: config 0 descriptor?? [ 414.484156][ T24] usb 8-1: selecting invalid altsetting 2 [ 414.650065][ T793] usb 6-1: Using ep0 maxpacket: 16 [ 414.677648][ T793] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.688311][ T793] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.804821][ T793] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.814538][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.822946][ T793] usb 6-1: Product: syz [ 414.827286][ T793] usb 6-1: Manufacturer: syz [ 414.832205][ T793] usb 6-1: SerialNumber: syz [ 415.239103][ T793] usb 6-1: 0:2 : does not exist [ 415.353315][ T793] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 415.641534][ T793] usb 6-1: USB disconnect, device number 2 [ 423.354913][ T793] usb 8-1: USB disconnect, device number 3 [ 423.622316][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.080491][ T7332] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 425.942420][ T7326] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 425.948702][ T7326] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 425.993906][ T7326] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 426.048612][ T7326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 426.055221][ T7326] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 426.085325][ T7326] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 426.830386][ T5808] Bluetooth: hci5: command 0x0c1a tx timeout [ 427.310749][ T5860] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 427.491087][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 427.520150][ T5860] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.530704][ T5860] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 427.542911][ T5860] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 427.553136][ T5860] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 427.798167][ T5860] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.807818][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.816344][ T5860] usb 6-1: Product: syz [ 427.820874][ T5860] usb 6-1: Manufacturer: syz [ 427.825661][ T5860] usb 6-1: SerialNumber: syz [ 427.997478][ T7352] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 428.010585][ T793] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 428.120014][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 428.295158][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 428.337580][ T793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.348911][ T793] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.490156][ T793] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.499502][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.508422][ T793] usb 1-1: Product: syz [ 428.512886][ T793] usb 1-1: Manufacturer: syz [ 428.517671][ T793] usb 1-1: SerialNumber: syz [ 428.913115][ T5808] Bluetooth: hci5: command 0x0c1a tx timeout [ 428.982229][ T5853] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 429.005238][ T5860] cdc_ncm 6-1:1.0: bind() failure [ 429.013843][ T793] usb 1-1: 0:2 : does not exist [ 429.023921][ T5860] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 429.031138][ T5860] cdc_ncm 6-1:1.1: bind() failure [ 429.128577][ T793] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 429.181809][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 429.234306][ T5860] usb 6-1: USB disconnect, device number 3 [ 429.239448][ T5853] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 429.248893][ T5853] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 429.257586][ T5853] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 429.266062][ T5853] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 429.274529][ T5853] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 429.283894][ T5853] usb 2-1: config 0 has no interface number 0 [ 429.290425][ T5853] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 429.301993][ T5853] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 429.316639][ T5853] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 429.328285][ T5853] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.342937][ T5853] usb 2-1: config 0 interface 125 has no altsetting 2 [ 429.431225][ T793] usb 1-1: USB disconnect, device number 13 [ 429.754831][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.861108][ T5853] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 429.872429][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.881356][ T5853] usb 2-1: Product: syz [ 429.885793][ T5853] usb 2-1: Manufacturer: syz [ 429.890652][ T5853] usb 2-1: SerialNumber: syz [ 430.066834][ T5853] usb 2-1: config 0 descriptor?? [ 430.118819][ T5853] usb 2-1: selecting invalid altsetting 2 [ 430.202788][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 431.020406][ T5808] Bluetooth: hci5: command 0x0c1a tx timeout [ 432.280366][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 432.373395][ T5853] usb 2-1: USB disconnect, device number 7 [ 436.400003][ T793] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 436.641562][ T793] usb 7-1: Using ep0 maxpacket: 8 [ 436.692494][ T793] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.703055][ T793] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 436.714966][ T793] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 436.725283][ T793] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 436.879922][ T5861] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 436.886878][ T793] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.896991][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.909015][ T793] usb 7-1: Product: syz [ 436.913638][ T793] usb 7-1: Manufacturer: syz [ 436.918431][ T793] usb 7-1: SerialNumber: syz [ 437.146429][ T7407] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 437.155366][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 437.209138][ T5861] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.220123][ T5861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.319337][ T5861] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.330468][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.338678][ T5861] usb 1-1: Product: syz [ 437.343531][ T5861] usb 1-1: Manufacturer: syz [ 437.348317][ T5861] usb 1-1: SerialNumber: syz [ 437.766418][ T5861] usb 1-1: 0:2 : does not exist [ 437.871562][ T5861] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 438.063746][ T5861] usb 1-1: USB disconnect, device number 14 [ 438.167457][ T793] cdc_ncm 7-1:1.0: bind() failure [ 438.228896][ T793] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 438.236347][ T793] cdc_ncm 7-1:1.1: bind() failure [ 438.400589][ T793] usb 7-1: USB disconnect, device number 2 [ 438.601903][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.050910][ T7448] evm: overlay not supported [ 440.998389][ T30] audit: type=1326 audit(1765558232.175:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61cf58f749 code=0x0 [ 442.169240][ T7459] Invalid ELF header magic: != ELF [ 451.770097][ T5861] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 451.970164][ T5860] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 451.986832][ T5861] usb 7-1: Using ep0 maxpacket: 8 [ 452.046725][ T5861] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.057685][ T5861] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 452.069892][ T5861] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 452.080189][ T5861] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.993405][ T5860] usb 8-1: Using ep0 maxpacket: 16 [ 453.023036][ T5860] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.033903][ T5860] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.133764][ T5861] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.143297][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.151785][ T5861] usb 7-1: Product: syz [ 453.156119][ T5861] usb 7-1: Manufacturer: syz [ 453.161037][ T5861] usb 7-1: SerialNumber: syz [ 453.215458][ T5860] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.225171][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.235372][ T5860] usb 8-1: Product: syz [ 453.240170][ T5860] usb 8-1: Manufacturer: syz [ 453.244960][ T5860] usb 8-1: SerialNumber: syz [ 453.408774][ T7480] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 454.524532][ T5860] usb 8-1: 0:2 : does not exist [ 454.616034][ T5861] cdc_ncm 7-1:1.0: bind() failure [ 454.634588][ T5861] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 454.642089][ T5861] cdc_ncm 7-1:1.1: bind() failure [ 454.660984][ T5860] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 454.879557][ T5861] usb 7-1: USB disconnect, device number 3 [ 454.936335][ T5860] usb 8-1: USB disconnect, device number 4 [ 455.233571][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.228927][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 456.243828][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 456.261140][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 456.279165][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 456.311087][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 458.253614][ T5853] hid-generic 07FF:0004:0009.0003: unknown main item tag 0x0 [ 458.261653][ T5853] hid-generic 07FF:0004:0009.0003: unknown main item tag 0x0 [ 458.269339][ T5853] hid-generic 07FF:0004:0009.0003: unknown main item tag 0x0 [ 458.441381][ T5853] hid-generic 07FF:0004:0009.0003: hidraw0: HID v0.04 Device [syz1] on syz1 [ 458.510168][ T5804] Bluetooth: hci2: command tx timeout [ 458.857675][ T7509] chnl_net:caif_netlink_parms(): no params data found [ 458.857775][ T5861] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 459.144481][ T5861] usb 8-1: Using ep0 maxpacket: 16 [ 459.216464][ T5861] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.227069][ T5861] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.408975][ T5861] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.422721][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.435071][ T5861] usb 8-1: Product: syz [ 459.439423][ T5861] usb 8-1: Manufacturer: syz [ 459.444382][ T5861] usb 8-1: SerialNumber: syz [ 459.501083][ T7535] fido_id[7535]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 459.802366][ T5861] usb 8-1: 0:2 : does not exist [ 459.830022][ T5860] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 459.900468][ T5861] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 460.081677][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 460.157450][ T5860] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.168233][ T5860] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 460.180406][ T5860] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 460.190510][ T5860] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 460.250224][ T5861] usb 8-1: USB disconnect, device number 5 [ 460.422567][ T5860] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.432173][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.444672][ T5860] usb 1-1: Product: syz [ 460.449022][ T5860] usb 1-1: Manufacturer: syz [ 460.455357][ T5860] usb 1-1: SerialNumber: syz [ 460.497432][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.590240][ T5804] Bluetooth: hci2: command tx timeout [ 460.710624][ T7542] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 461.319185][ T73] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.659591][ T5860] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 461.672766][ T5860] cdc_ncm 1-1:1.0: bind() failure [ 461.700782][ T73] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.703294][ T5860] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 461.718453][ T5860] cdc_ncm 1-1:1.1: bind() failure [ 461.787002][ T5860] usb 1-1: USB disconnect, device number 15 [ 461.945550][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.955069][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.963048][ T7509] bridge_slave_0: entered allmulticast mode [ 461.979535][ T7509] bridge_slave_0: entered promiscuous mode [ 462.066377][ T73] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.193374][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.201263][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.209033][ T7509] bridge_slave_1: entered allmulticast mode [ 462.219566][ T7509] bridge_slave_1: entered promiscuous mode [ 462.291142][ T73] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.675948][ T5804] Bluetooth: hci2: command tx timeout [ 462.766624][ T7509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.007542][ T7509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.421944][ T73] bridge_slave_1: left allmulticast mode [ 463.427803][ T73] bridge_slave_1: left promiscuous mode [ 463.434938][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.505431][ T73] bridge_slave_0: left allmulticast mode [ 463.517330][ T73] bridge_slave_0: left promiscuous mode [ 463.524401][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.553306][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 464.710512][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 464.746543][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.757356][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.804854][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.814662][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.823116][ T24] usb 7-1: Product: syz [ 464.827529][ T24] usb 7-1: Manufacturer: syz [ 464.835243][ T24] usb 7-1: SerialNumber: syz [ 464.849216][ T5804] Bluetooth: hci2: command tx timeout [ 465.212185][ T7599] kernel profiling enabled (shift: 9) [ 465.307620][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.332512][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.438538][ T73] bond0 (unregistering): Released all slaves [ 465.511669][ T24] usb 7-1: 0:2 : does not exist [ 465.603259][ T24] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 465.828249][ T7509] team0: Port device team_slave_0 added [ 465.836915][ T24] usb 7-1: USB disconnect, device number 4 [ 465.855882][ T7509] team0: Port device team_slave_1 added [ 466.137104][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.354538][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.362049][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.391990][ T7509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.743434][ T73] hsr_slave_0: left promiscuous mode [ 466.760319][ T73] hsr_slave_1: left promiscuous mode [ 466.768375][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.776198][ T73] net_ratelimit: 10 callbacks suppressed [ 466.776271][ T73] batadv0: mtu less than device minimum [ 466.793786][ T73] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.806885][ T73] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.820060][ T73] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.833058][ T73] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.846062][ T73] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.859066][ T73] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.872179][ T73] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.885224][ T73] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.898225][ T73] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.942531][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.258851][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.316705][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.440333][ T73] batman_adv: batadv0: Interface deactivated: dummy0 [ 467.447417][ T73] batman_adv: batadv0: Removing interface: dummy0 [ 467.561234][ T73] veth1_macvtap: left promiscuous mode [ 467.566966][ T73] veth0_macvtap: left promiscuous mode [ 467.573119][ T73] veth1_vlan: left promiscuous mode [ 467.578741][ T73] veth0_vlan: left promiscuous mode [ 468.771663][ T73] team0 (unregistering): Port device team_slave_1 removed [ 468.866212][ T73] team0 (unregistering): Port device team_slave_0 removed [ 469.066436][ T7637] fuse: root generation should be zero [ 469.203948][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.212611][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.240704][ T7509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.438640][ T7634] 9p: Could not find request transport: fd0x0000000000000004 [ 469.721085][ T7646] No control pipe specified [ 469.821974][ T7509] hsr_slave_0: entered promiscuous mode [ 469.914162][ T7509] hsr_slave_1: entered promiscuous mode [ 469.923214][ T7509] debugfs: 'hsr0' already exists in 'hsr' [ 469.929270][ T7509] Cannot create hsr debugfs directory [ 471.486140][ T7509] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 471.538878][ T7509] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 471.695959][ T7509] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 471.769044][ T7509] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 472.309240][ T7673] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 472.657109][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 473.120435][ T7509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.331443][ T7509] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.458843][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.466459][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.547642][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.555290][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.672157][ T7685] No control pipe specified [ 475.422502][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.429220][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.747056][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.7.444'. [ 476.563763][ T7509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.121757][ T7738] No control pipe specified [ 480.541072][ T7786] fuse: Bad value for 'fd' [ 480.697285][ T7509] veth0_vlan: entered promiscuous mode [ 480.768752][ T7790] loop3: detected capacity change from 0 to 7 [ 480.846512][ T7790] Dev loop3: unable to read RDB block 7 [ 480.852850][ T7790] loop3: unable to read partition table [ 480.855528][ T7509] veth1_vlan: entered promiscuous mode [ 480.903096][ T7790] loop3: partition table beyond EOD, truncated [ 480.909612][ T7790] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 481.180415][ T7509] veth0_macvtap: entered promiscuous mode [ 481.202046][ T7788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.237640][ T7509] veth1_macvtap: entered promiscuous mode [ 481.497076][ T7509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.595910][ T7509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.742130][ T4282] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.785169][ T4282] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.845324][ T4282] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.905968][ T4282] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.261554][ T7833] fuse: Bad value for 'fd' [ 486.845067][ T7870] fuse: Bad value for 'fd' [ 489.582796][ T7899] lo speed is unknown, defaulting to 1000 [ 489.589029][ T7899] lo speed is unknown, defaulting to 1000 [ 489.596221][ T7899] lo speed is unknown, defaulting to 1000 [ 489.614526][ T7899] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 489.660497][ T7899] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 489.777272][ T7899] lo speed is unknown, defaulting to 1000 [ 489.786055][ T7899] lo speed is unknown, defaulting to 1000 [ 489.797293][ T7899] lo speed is unknown, defaulting to 1000 [ 489.806053][ T7899] lo speed is unknown, defaulting to 1000 [ 489.815008][ T7899] lo speed is unknown, defaulting to 1000 [ 492.943945][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 493.009562][ T6955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.017721][ T6955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.190677][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 493.249170][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 493.275755][ T3853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.284582][ T3853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.333229][ T9] usb 6-1: config 1 has an invalid interface number: 80 but max is 1 [ 493.341899][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.352864][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 493.362137][ T9] usb 6-1: config 1 has no interface number 0 [ 493.368431][ T9] usb 6-1: config 1 interface 80 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 493.382108][ T9] usb 6-1: config 1 interface 80 has no altsetting 0 [ 493.685051][ T9] usb 6-1: New USB device found, idVendor=06a9, idProduct=000e, bcdDevice=9d.6f [ 493.694654][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.703061][ T9] usb 6-1: Product: syz [ 493.707400][ T9] usb 6-1: SerialNumber: syz [ 494.121165][ T7920] ucma_write: process 110 (syz.5.500) changed security contexts after opening file descriptor, this is not allowed. [ 494.283873][ T9] usb 6-1: USB disconnect, device number 4 [ 494.630630][ T5853] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 494.880546][ T5853] usb 8-1: Using ep0 maxpacket: 16 [ 494.915666][ T5853] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 494.924532][ T5853] usb 8-1: config 0 has no interface number 0 [ 494.984414][ T5853] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 494.994028][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.002473][ T5853] usb 8-1: Product: syz [ 495.006873][ T5853] usb 8-1: Manufacturer: syz [ 495.011848][ T5853] usb 8-1: SerialNumber: syz [ 495.111056][ T5853] usb 8-1: config 0 descriptor?? [ 495.144102][ T5853] hub 8-1:0.132: bad descriptor, ignoring hub [ 495.157713][ T5853] hub 8-1:0.132: probe with driver hub failed with error -5 [ 495.173373][ T5853] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input11 [ 498.994465][ T5853] usb 8-1: USB disconnect, device number 6 [ 499.327265][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.8.525'. [ 506.722291][ T5859] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 506.939090][ T5859] usb 6-1: config 1 has an invalid interface number: 121 but max is 0 [ 506.947636][ T5859] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.958196][ T5859] usb 6-1: config 1 has no interface number 0 [ 506.964632][ T5859] usb 6-1: config 1 interface 121 has no altsetting 0 [ 507.086751][ T5859] usb 6-1: New USB device found, idVendor=0421, idProduct=01f5, bcdDevice=57.da [ 507.096548][ T5859] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 507.105018][ T5859] usb 6-1: Manufacturer: syz [ 507.206231][ T5859] usb 6-1: bad CDC descriptors [ 507.456332][ T5859] usb 6-1: USB disconnect, device number 5 [ 508.079315][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.8.566'. [ 513.724242][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.582'. [ 520.357207][ T5859] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 520.585102][ T5859] usb 9-1: Using ep0 maxpacket: 16 [ 520.656846][ T5859] usb 9-1: unable to get BOS descriptor or descriptor too short [ 520.660989][ T8245] netlink: 60 bytes leftover after parsing attributes in process `syz.6.611'. [ 520.743014][ T5859] usb 9-1: config 1 has an invalid interface descriptor of length 7, skipping [ 520.756104][ T5859] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 520.767306][ T5859] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.776461][ T5859] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 520.906216][ T5859] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.915946][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.924538][ T5859] usb 9-1: Product: syz [ 520.928907][ T5859] usb 9-1: Manufacturer: syz [ 520.933998][ T5859] usb 9-1: SerialNumber: syz [ 521.411281][ T5859] usb 9-1: 0:2 : does not exist [ 521.633775][ T5859] usb 9-1: USB disconnect, device number 2 [ 522.034746][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.791039][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.617'. [ 522.804067][ T8269] netlink: 16 bytes leftover after parsing attributes in process `syz.6.617'. [ 524.908450][ T8286] netlink: 60 bytes leftover after parsing attributes in process `syz.6.624'. [ 526.945977][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.632'. [ 526.955756][ T8310] netlink: 'syz.6.632': attribute type 9 has an invalid length. [ 527.690309][ T5853] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 527.924335][ T5853] usb 9-1: Using ep0 maxpacket: 16 [ 527.977325][ T5853] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 527.985696][ T5853] usb 9-1: can't read configurations, error -61 [ 528.214735][ T5853] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 528.300286][ T8325] netlink: 60 bytes leftover after parsing attributes in process `syz.0.637'. [ 528.434334][ T5853] usb 9-1: Using ep0 maxpacket: 16 [ 528.501047][ T5853] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 528.508966][ T5853] usb 9-1: can't read configurations, error -61 [ 528.580610][ T5853] usb usb9-port1: attempt power cycle [ 528.997042][ T5853] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 529.069190][ T5853] usb 9-1: Using ep0 maxpacket: 16 [ 529.115244][ T5853] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 529.123348][ T5853] usb 9-1: can't read configurations, error -61 [ 529.318513][ T5853] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 529.401457][ T5853] usb 9-1: Using ep0 maxpacket: 16 [ 529.450610][ T5853] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 529.461604][ T5853] usb 9-1: can't read configurations, error -61 [ 529.505126][ T5853] usb usb9-port1: unable to enumerate USB device [ 530.407759][ T8341] loop9: detected capacity change from 0 to 7 [ 530.460750][ T8341] Dev loop9: unable to read RDB block 7 [ 530.466578][ T8341] loop9: unable to read partition table [ 530.542423][ T8341] loop9: partition table beyond EOD, truncated [ 530.549165][ T8341] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 531.801480][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.645'. [ 531.817095][ T8354] netlink: 'syz.5.645': attribute type 9 has an invalid length. [ 531.947913][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.648'. [ 531.957252][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.8.648'. [ 532.723199][ T5859] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 532.982839][ T5859] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 532.992432][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.077768][ T5859] usb 1-1: config 0 descriptor?? [ 533.153851][ T5859] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 533.162280][ T5859] dvb-usb: bulk message failed: -22 (3/0) [ 533.271748][ T5859] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 533.362097][ T5859] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 533.370924][ T5859] usb 1-1: media controller created [ 533.376420][ T5859] dvb-usb: bulk message failed: -22 (5/0) [ 533.382733][ T5859] dvb-usb: MAC address reading failed. [ 533.558832][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.658979][ T5859] dvb-usb: bulk message failed: -22 (6/0) [ 533.666779][ T5859] dvb-usb: bulk message failed: -22 (6/0) [ 533.673324][ T5859] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 533.700485][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 533.785647][ T5859] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 533.902360][ T5859] dvb-usb: schedule remote query interval to 100 msecs. [ 533.909630][ T5859] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 533.922393][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 533.952158][ T9] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 533.965012][ T9] usb 9-1: can't read configurations, error -61 [ 534.010082][ T792] dvb-usb: bulk message failed: -22 (2/0) [ 534.016038][ T792] dvb-usb: error while querying for an remote control event. [ 534.046543][ T5859] usb 1-1: USB disconnect, device number 16 [ 534.286712][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 534.325052][ T5859] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 535.420371][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 535.844143][ T9] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 535.852184][ T9] usb 9-1: can't read configurations, error -61 [ 535.928205][ T9] usb usb9-port1: attempt power cycle [ 536.354863][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 536.772871][ T9] usb 9-1: device descriptor read/8, error -71 [ 536.865200][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.872730][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.094921][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.662'. [ 537.104266][ T8395] netlink: 'syz.6.662': attribute type 9 has an invalid length. [ 540.413698][ T5859] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 540.580255][ T5859] usb 8-1: device descriptor read/64, error -71 [ 540.844278][ T5859] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 541.031428][ T5859] usb 8-1: device descriptor read/64, error -71 [ 541.146337][ T5859] usb usb8-port1: attempt power cycle [ 541.372029][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 541.540074][ T5859] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 541.561488][ T792] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 541.626563][ T5859] usb 8-1: device descriptor read/8, error -71 [ 541.646121][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 541.686600][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 541.694601][ T9] usb 1-1: can't read configurations, error -61 [ 541.760271][ T792] usb 9-1: Using ep0 maxpacket: 16 [ 541.921000][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 542.735313][ T792] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.980599][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 543.159403][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 543.167651][ T9] usb 1-1: can't read configurations, error -61 [ 543.720426][ T5859] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 543.749433][ T792] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 543.759008][ T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.771176][ T792] usb 9-1: Product: syz [ 543.775537][ T792] usb 9-1: Manufacturer: syz [ 543.782001][ T792] usb 9-1: SerialNumber: syz [ 543.837206][ T9] usb usb1-port1: attempt power cycle [ 543.985708][ T792] usb 9-1: config 0 descriptor?? [ 544.038805][ T792] opticon 9-1:0.0: required endpoints missing [ 544.290268][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 544.431422][ T5859] usb 8-1: device descriptor read/8, error -71 [ 544.696165][ T5859] usb usb8-port1: unable to enumerate USB device [ 544.801811][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.677'. [ 544.811073][ T8449] netlink: 'syz.5.677': attribute type 9 has an invalid length. [ 544.983036][ T9] usb 1-1: device descriptor read/8, error -71 [ 545.005555][ T5853] usb 9-1: USB disconnect, device number 11 [ 546.264185][ T30] audit: type=1326 audit(1765558337.445:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cf58f749 code=0x7fc00000 [ 547.402708][ T8483] fuse: Bad value for 'fd' [ 549.501855][ T8492] netlink: 16 bytes leftover after parsing attributes in process `syz.6.692'. [ 549.511291][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.692'. [ 549.568136][ T8484] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 549.720169][ T8484] usb 1-1: device descriptor read/64, error -71 [ 550.031871][ T8484] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 550.162003][ T30] audit: type=1800 audit(1765558341.325:19): pid=8501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.691" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 550.740281][ T8484] usb 1-1: device descriptor read/64, error -71 [ 551.053129][ T8510] net_ratelimit: 30 callbacks suppressed [ 551.053217][ T8510] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.110531][ T793] IPVS: starting estimator thread 0... [ 551.751347][ T8484] usb usb1-port1: attempt power cycle [ 551.830404][ T8512] IPVS: using max 240 ests per chain, 12000 per kthread [ 552.793890][ T8484] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 552.951112][ T8484] usb 1-1: device descriptor read/8, error -71 [ 555.540136][ T8552] fuse: Bad value for 'fd' [ 557.418583][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.7.704'. [ 557.428401][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.7.704'. [ 562.991917][ T8610] fuse: Bad value for 'fd' [ 565.780721][ T5859] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 566.020195][ T5859] usb 8-1: Using ep0 maxpacket: 8 [ 566.084879][ T5859] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.095608][ T5859] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 566.104995][ T5859] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.218408][ T5859] usb 8-1: config 0 descriptor?? [ 566.257799][ T5859] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 567.451720][ T5859] gspca_vc032x: reg_w err -110 [ 567.456940][ T5859] vc032x 8-1:0.0: probe with driver vc032x failed with error -110 [ 569.412447][ T5853] usb 8-1: USB disconnect, device number 11 [ 569.956974][ T8650] loop9: detected capacity change from 0 to 7 [ 569.995803][ T8650] Dev loop9: unable to read RDB block 7 [ 570.007476][ T8650] loop9: unable to read partition table [ 570.057856][ T8650] loop9: partition table beyond EOD, truncated [ 570.064914][ T8650] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 575.956016][ T11] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 576.190814][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 576.263109][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.274516][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.284807][ T11] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 576.294167][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.492956][ T11] usb 1-1: config 0 descriptor?? [ 576.912896][ T8705] loop9: detected capacity change from 0 to 7 [ 576.992187][ T8705] Dev loop9: unable to read RDB block 7 [ 576.998364][ T8705] loop9: unable to read partition table [ 577.127426][ T8705] loop9: partition table beyond EOD, truncated [ 577.134531][ T8705] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 577.250740][ T11] usbhid 1-1:0.0: can't add hid device: -71 [ 577.257335][ T11] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 577.370930][ T11] usb 1-1: USB disconnect, device number 25 [ 579.870216][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 581.790109][ T792] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 581.996287][ T792] usb 9-1: Using ep0 maxpacket: 16 [ 582.059395][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.070809][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.081158][ T792] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 582.093757][ T792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.646208][ T792] usb 9-1: config 0 descriptor?? [ 584.975012][ T792] usbhid 9-1:0.0: can't add hid device: -71 [ 584.981812][ T792] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 585.101616][ T792] usb 9-1: USB disconnect, device number 12 [ 586.108213][ T8782] autofs: Unknown parameter '00000000000000000000' [ 587.995695][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 588.912941][ T11] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 589.140290][ T11] usb 9-1: Using ep0 maxpacket: 16 [ 589.173581][ T8823] loop9: detected capacity change from 0 to 7 [ 589.223084][ T11] usb 9-1: config 254 has an invalid interface number: 235 but max is 0 [ 589.231887][ T11] usb 9-1: config 254 has an invalid descriptor of length 255, skipping remainder of the config [ 589.242912][ T11] usb 9-1: config 254 has no interface number 0 [ 589.249394][ T11] usb 9-1: config 254 interface 235 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 589.267812][ T11] usb 9-1: config 254 interface 235 has no altsetting 0 [ 589.291683][ T8823] Dev loop9: unable to read RDB block 7 [ 589.297642][ T8823] loop9: AHDI p3 p4 [ 589.302238][ T8823] loop9: partition table partially beyond EOD, truncated [ 589.310890][ T8823] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 589.464023][ T11] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 589.473690][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.482418][ T11] usb 9-1: Product: syz [ 589.486778][ T11] usb 9-1: Manufacturer: syz [ 589.491958][ T11] usb 9-1: SerialNumber: syz [ 589.942664][ T11] usbtest 9-1:254.235: couldn't get endpoints, -22 [ 589.950403][ T11] usbtest 9-1:254.235: probe with driver usbtest failed with error -22 [ 590.103624][ T11] usb 9-1: USB disconnect, device number 13 [ 590.143807][ T6333] udevd[6333]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 592.156551][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 594.933936][ T792] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 595.100032][ T792] usb 8-1: device descriptor read/64, error -71 [ 595.380434][ T792] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 595.607445][ T792] usb 8-1: device descriptor read/64, error -71 [ 595.691374][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 595.763613][ T792] usb usb8-port1: attempt power cycle [ 595.826294][ T11] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 595.930895][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 595.969161][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 596.010768][ T24] usb 9-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 596.025753][ T24] usb 9-1: config 13 has 0 interfaces, different from the descriptor's value: 1 [ 596.070885][ T24] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 596.080826][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.089048][ T24] usb 9-1: Product: syz [ 596.093712][ T24] usb 9-1: Manufacturer: syz [ 596.095399][ T11] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 596.098561][ T24] usb 9-1: SerialNumber: syz [ 596.108026][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.125884][ T11] usb 1-1: Product: syz [ 596.132207][ T11] usb 1-1: Manufacturer: syz [ 596.136996][ T11] usb 1-1: SerialNumber: syz [ 596.190509][ T792] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 596.225858][ T792] usb 8-1: device descriptor read/8, error -71 [ 596.328035][ T11] usb 1-1: config 0 descriptor?? [ 596.471580][ T792] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 596.514037][ T24] usb 9-1: USB disconnect, device number 14 [ 596.561509][ T792] usb 8-1: device descriptor read/8, error -71 [ 596.683022][ T792] usb usb8-port1: unable to enumerate USB device [ 596.813770][ T11] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 596.822180][ T11] usb 1-1: Firmware version (0.0) predates our first public release. [ 596.838220][ T11] usb 1-1: Please update to version 0.2 or newer [ 597.222613][ T11] usb 1-1: USB disconnect, device number 26 [ 598.288413][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.295280][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.626285][ T11] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 600.840045][ T11] usb 7-1: Using ep0 maxpacket: 16 [ 600.880321][ T11] usb 7-1: unable to get BOS descriptor or descriptor too short [ 600.905095][ T11] usb 7-1: config 13 has an invalid interface number: 50 but max is 0 [ 600.913827][ T11] usb 7-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 600.924452][ T11] usb 7-1: config 13 has no interface number 0 [ 600.935787][ T11] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 600.947242][ T11] usb 7-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.960621][ T11] usb 7-1: config 13 interface 50 has no altsetting 0 [ 601.000662][ T5853] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 601.152990][ T5853] usb 8-1: device descriptor read/64, error -71 [ 601.217470][ T11] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 601.227005][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.240431][ T11] usb 7-1: Product: syz [ 601.244811][ T11] usb 7-1: Manufacturer: syz [ 601.249594][ T11] usb 7-1: SerialNumber: syz [ 601.326100][ T8930] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 601.430611][ T5853] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 601.621899][ T5853] usb 8-1: device descriptor read/64, error -71 [ 601.707066][ T11] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.714541][ T11] usb 7-1: MIDIStreaming interface descriptor not found [ 601.750772][ T5853] usb usb8-port1: attempt power cycle [ 602.237602][ T11] usb 7-1: USB disconnect, device number 5 [ 602.255727][ T5853] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 602.555237][ T5853] usb 8-1: device descriptor read/8, error -71 [ 603.091005][ T5853] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 603.845790][ T793] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 605.223945][ T6329] udevd[6329]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.356229][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 605.440017][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.451392][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.461739][ T793] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 605.471270][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.613477][ T793] usb 1-1: config 0 descriptor?? [ 605.652374][ T5853] usb 8-1: device descriptor read/8, error -71 [ 605.781168][ T5853] usb usb8-port1: unable to enumerate USB device [ 606.212806][ T793] usb 1-1: can't set config #0, error -71 [ 606.229094][ T793] usb 1-1: USB disconnect, device number 27 [ 607.222157][ T8967] fuse: Bad value for 'group_id' [ 607.227338][ T8967] fuse: Bad value for 'group_id' [ 618.710161][ T793] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 618.916633][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 618.973172][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.988021][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.998345][ T793] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 619.007919][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.201161][ T793] usb 1-1: config 0 descriptor?? [ 619.726265][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.857'. [ 619.898030][ T793] usbhid 1-1:0.0: can't add hid device: -71 [ 619.905323][ T793] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 620.012594][ T793] usb 1-1: USB disconnect, device number 28 [ 621.871634][ T793] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 622.100239][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 622.151166][ T793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 622.206206][ T793] usb 1-1: config 1 has an invalid interface descriptor of length 7, skipping [ 622.215511][ T793] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 622.232426][ T793] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 194, changing to 7 [ 622.387265][ T793] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.396976][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.405475][ T793] usb 1-1: Product: syz [ 622.409926][ T793] usb 1-1: Manufacturer: syz [ 622.414699][ T793] usb 1-1: SerialNumber: syz [ 622.930700][ T793] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 623.210124][ T793] usb 1-1: USB disconnect, device number 29 [ 623.389641][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.665002][ T9025] 9p: Bad value for 'rfdno' [ 624.337620][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 624.603283][ T24] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 624.781225][ T9034] process 'syz.5.870' launched './file2' with NULL argv: empty string added [ 624.821358][ T793] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 624.853234][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 624.883510][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 624.932386][ T24] usb 8-1: config 13 has an invalid interface number: 50 but max is 0 [ 624.940852][ T24] usb 8-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 624.951356][ T24] usb 8-1: config 13 has no interface number 0 [ 624.957628][ T24] usb 8-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 624.967998][ T24] usb 8-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.981741][ T24] usb 8-1: config 13 interface 50 has no altsetting 0 [ 625.072452][ T793] usb 7-1: Using ep0 maxpacket: 16 [ 625.108722][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.120128][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.130573][ T793] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 625.140000][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.243300][ T24] usb 8-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 625.252914][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.261339][ T24] usb 8-1: Product: syz [ 625.265669][ T24] usb 8-1: Manufacturer: syz [ 625.270544][ T24] usb 8-1: SerialNumber: syz [ 625.290105][ T793] usb 7-1: config 0 descriptor?? [ 625.366815][ T9031] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 625.866630][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 625.874024][ T24] usb 8-1: MIDIStreaming interface descriptor not found [ 626.442216][ T793] usbhid 7-1:0.0: can't add hid device: -71 [ 626.448783][ T793] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 626.543589][ T793] usb 7-1: USB disconnect, device number 6 [ 626.601623][ T24] usb 8-1: USB disconnect, device number 20 [ 627.415563][ T6329] udevd[6329]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 628.247132][ T5808] block nbd0: Receive control failed (result -32) [ 628.261577][ T9049] block nbd0: shutting down sockets [ 628.564460][ T9059] loop9: detected capacity change from 0 to 7 [ 628.570498][ T793] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 628.602066][ T9059] Dev loop9: unable to read RDB block 7 [ 628.607987][ T9059] loop9: AHDI p2 [ 628.612180][ T9059] loop9: partition table partially beyond EOD, truncated [ 635.974882][ T793] usb 9-1: Using ep0 maxpacket: 16 [ 636.325253][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 636.416526][ T793] usb 9-1: device descriptor read/all, error -71 [ 637.474534][ T9071] netlink: 160 bytes leftover after parsing attributes in process `syz.8.885'. [ 637.493065][ T9070] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 637.493283][ T9071] netlink: 160 bytes leftover after parsing attributes in process `syz.8.885'. [ 638.205403][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 638.404796][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 638.446233][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.457691][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.468034][ T24] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 638.477503][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.541386][ T24] usb 1-1: config 0 descriptor?? [ 639.198740][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 639.205771][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 639.294741][ T24] usb 1-1: USB disconnect, device number 30 [ 639.472735][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 639.544696][ T9091] netlink: 72 bytes leftover after parsing attributes in process `syz.7.894'. [ 640.201465][ T5808] block nbd6: Receive control failed (result -32) [ 640.225690][ T9092] block nbd6: shutting down sockets [ 640.321033][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 640.510403][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 640.534258][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 640.569271][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.580221][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 640.589341][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 640.766539][ T24] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 640.776628][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.785108][ T24] usb 9-1: Product: syz [ 640.789461][ T24] usb 9-1: Manufacturer: syz [ 640.794707][ T24] usb 9-1: SerialNumber: syz [ 641.007092][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.898'. [ 641.177350][ T24] usb 9-1: 0:2 : does not exist [ 641.271938][ T24] usb 9-1: USB disconnect, device number 17 [ 641.460971][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.549547][ T9116] ===================================================== [ 642.556885][ T9116] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 642.564367][ T9116] batadv_get_vid+0x2d0/0x3b0 [ 642.569195][ T9116] batadv_interface_tx+0x2e8/0x1dd0 [ 642.574673][ T9116] dev_hard_start_xmit+0x22f/0xa30 [ 642.580069][ T9116] __dev_queue_xmit+0x2ac0/0x58f0 [ 642.585254][ T9116] __bpf_redirect+0x162d/0x1760 [ 642.590384][ T9116] bpf_clone_redirect+0x4b5/0x6d0 [ 642.595570][ T9116] ___bpf_prog_run+0x1297/0xeba0 [ 642.600826][ T9116] __bpf_prog_run512+0xc5/0x100 [ 642.605894][ T9116] bpf_test_run+0x496/0xe00 [ 642.610681][ T9116] bpf_prog_test_run_skb+0x2377/0x3200 [ 642.616322][ T9116] bpf_prog_test_run+0x5c2/0xa40 [ 642.621528][ T9116] __sys_bpf+0x873/0xeb0 [ 642.625907][ T9116] __x64_sys_bpf+0xa4/0xf0 [ 642.630614][ T9116] x64_sys_call+0x31c3/0x3e70 [ 642.635496][ T9116] do_syscall_64+0xd9/0xf80 [ 642.640276][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.646325][ T9116] [ 642.648717][ T9116] Uninit was created at: [ 642.653320][ T9116] kmem_cache_alloc_node_noprof+0x9e7/0x17a0 [ 642.659509][ T9116] kmalloc_reserve+0x13c/0x4b0 [ 642.664526][ T9116] pskb_expand_head+0x1fc/0x15d0 [ 642.669633][ T9116] skb_ensure_writable+0x44e/0x510 [ 642.675097][ T9116] bpf_clone_redirect+0x310/0x6d0 [ 642.680404][ T9116] ___bpf_prog_run+0x1297/0xeba0 [ 642.685487][ T9116] __bpf_prog_run512+0xc5/0x100 [ 642.690599][ T9116] bpf_test_run+0x496/0xe00 [ 642.695270][ T9116] bpf_prog_test_run_skb+0x2377/0x3200 [ 642.701037][ T9116] bpf_prog_test_run+0x5c2/0xa40 [ 642.706129][ T9116] __sys_bpf+0x873/0xeb0 [ 642.710624][ T9116] __x64_sys_bpf+0xa4/0xf0 [ 642.715246][ T9116] x64_sys_call+0x31c3/0x3e70 [ 642.720245][ T9116] do_syscall_64+0xd9/0xf80 [ 642.724915][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.731078][ T9116] [ 642.733510][ T9116] CPU: 1 UID: 0 PID: 9116 Comm: syz.6.901 Not tainted syzkaller #0 PREEMPT(none) [ 642.742995][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 642.753270][ T9116] ===================================================== [ 642.760385][ T9116] Disabling lock debugging due to kernel taint [ 642.766633][ T9116] Kernel panic - not syncing: kmsan.panic set ... [ 642.773172][ T9116] CPU: 1 UID: 0 PID: 9116 Comm: syz.6.901 Tainted: G B syzkaller #0 PREEMPT(none) [ 642.784116][ T9116] Tainted: [B]=BAD_PAGE [ 642.788348][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 642.798529][ T9116] Call Trace: [ 642.801895][ T9116] [ 642.804909][ T9116] __dump_stack+0x26/0x30 [ 642.809417][ T9116] dump_stack_lvl+0x53/0x270 [ 642.814180][ T9116] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 642.820212][ T9116] dump_stack+0x1e/0x25 [ 642.824542][ T9116] vpanic+0x435/0xd30 [ 642.828724][ T9116] panic+0x15d/0x160 [ 642.832842][ T9116] kmsan_report+0x31c/0x320 [ 642.837549][ T9116] ? __msan_warning+0x1b/0x30 [ 642.842402][ T9116] ? batadv_get_vid+0x2d0/0x3b0 [ 642.847402][ T9116] ? batadv_interface_tx+0x2e8/0x1dd0 [ 642.852930][ T9116] ? dev_hard_start_xmit+0x22f/0xa30 [ 642.858375][ T9116] ? __dev_queue_xmit+0x2ac0/0x58f0 [ 642.863738][ T9116] ? __bpf_redirect+0x162d/0x1760 [ 642.868928][ T9116] ? bpf_clone_redirect+0x4b5/0x6d0 [ 642.874296][ T9116] ? ___bpf_prog_run+0x1297/0xeba0 [ 642.879560][ T9116] ? __bpf_prog_run512+0xc5/0x100 [ 642.884737][ T9116] ? bpf_test_run+0x496/0xe00 [ 642.889573][ T9116] ? bpf_prog_test_run_skb+0x2377/0x3200 [ 642.895380][ T9116] ? bpf_prog_test_run+0x5c2/0xa40 [ 642.900680][ T9116] ? __sys_bpf+0x873/0xeb0 [ 642.905235][ T9116] ? __x64_sys_bpf+0xa4/0xf0 [ 642.910014][ T9116] ? x64_sys_call+0x31c3/0x3e70 [ 642.915048][ T9116] ? do_syscall_64+0xd9/0xf80 [ 642.919896][ T9116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.926134][ T9116] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 642.932164][ T9116] ? do_syscall_64+0x81/0xf80 [ 642.937021][ T9116] ? filter_irq_stacks+0x49/0x190 [ 642.942229][ T9116] ? kmsan_get_metadata+0xfb/0x160 [ 642.947539][ T9116] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 642.953561][ T9116] ? __pfx_batadv_interface_tx+0x1/0x10 [ 642.959276][ T9116] ? filter_irq_stacks+0x49/0x190 [ 642.964494][ T9116] ? stack_depot_save_flags+0x35/0x790 [ 642.970131][ T9116] ? kmsan_get_metadata+0xfb/0x160 [ 642.975475][ T9116] __msan_warning+0x1b/0x30 [ 642.980158][ T9116] batadv_get_vid+0x2d0/0x3b0 [ 642.984993][ T9116] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 642.991020][ T9116] batadv_interface_tx+0x2e8/0x1dd0 [ 642.996398][ T9116] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 643.002933][ T9116] ? __pfx_batadv_interface_tx+0x10/0x10 [ 643.008737][ T9116] dev_hard_start_xmit+0x22f/0xa30 [ 643.014052][ T9116] __dev_queue_xmit+0x2ac0/0x58f0 [ 643.019256][ T9116] ? skb_release_data+0xa12/0xac0 [ 643.024448][ T9116] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 643.030907][ T9116] ? kmsan_get_metadata+0xfb/0x160 [ 643.036223][ T9116] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 643.042233][ T9116] ? __dev_queue_xmit+0x277/0x58f0 [ 643.047557][ T9116] __bpf_redirect+0x162d/0x1760 [ 643.052598][ T9116] ? kmsan_get_metadata+0xfb/0x160 [ 643.057927][ T9116] bpf_clone_redirect+0x4b5/0x6d0 [ 643.063155][ T9116] ___bpf_prog_run+0x1297/0xeba0 [ 643.068290][ T9116] __bpf_prog_run512+0xc5/0x100 [ 643.073368][ T9116] ? kmsan_get_metadata+0xfb/0x160 [ 643.078695][ T9116] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 643.084717][ T9116] ? ktime_get+0x530/0x590 [ 643.089286][ T9116] ? kmsan_get_metadata+0xfb/0x160 [ 643.094625][ T9116] ? kmsan_get_metadata+0xfb/0x160 [ 643.099959][ T9116] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 643.106516][ T9116] ? kmsan_get_metadata+0x150/0x160 [ 643.111962][ T9116] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 643.117992][ T9116] ? __pfx___bpf_prog_run512+0x10/0x10 [ 643.123637][ T9116] ? __pfx___bpf_prog_run512+0x10/0x10 [ 643.129268][ T9116] bpf_test_run+0x496/0xe00 [ 643.133949][ T9116] ? kmsan_get_metadata+0xfb/0x160 [ 643.139272][ T9116] ? kmsan_get_metadata+0xfb/0x160 [ 643.144638][ T9116] ? bpf_test_run+0x2f7/0xe00 [ 643.149521][ T9116] ? kmsan_get_metadata+0xfb/0x160 [ 643.154837][ T9116] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 643.160966][ T9116] bpf_prog_test_run_skb+0x2377/0x3200 [ 643.166617][ T9116] ? kmsan_get_metadata+0xfb/0x160 [ 643.171950][ T9116] ? __rcu_read_unlock+0x6d/0xd0 [ 643.177127][ T9116] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 643.183207][ T9116] bpf_prog_test_run+0x5c2/0xa40 [ 643.188343][ T9116] __sys_bpf+0x873/0xeb0 [ 643.192791][ T9116] __x64_sys_bpf+0xa4/0xf0 [ 643.197422][ T9116] x64_sys_call+0x31c3/0x3e70 [ 643.202295][ T9116] do_syscall_64+0xd9/0xf80 [ 643.206978][ T9116] ? clear_bhb_loop+0x40/0x90 [ 643.211818][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.217883][ T9116] RIP: 0033:0x7fbe29d8f749 [ 643.222425][ T9116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.242221][ T9116] RSP: 002b:00007fbe2abe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 643.250814][ T9116] RAX: ffffffffffffffda RBX: 00007fbe29fe6180 RCX: 00007fbe29d8f749 [ 643.258921][ T9116] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 643.267007][ T9116] RBP: 00007fbe29e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 643.275095][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.283178][ T9116] R13: 00007fbe29fe6218 R14: 00007fbe29fe6180 R15: 00007ffe4a44a9f8 [ 643.291330][ T9116] [ 643.294819][ T9116] Kernel Offset: disabled [ 643.299204][ T9116] Rebooting in 86400 seconds..