last executing test programs: 22m45.152695865s ago: executing program 32 (id=1174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 21m39.526023855s ago: executing program 33 (id=1247): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b0000000500000005000000090000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x58, &(0x7f00000001c0)}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) socket$netlink(0x10, 0x3, 0x0) 21m15.835481868s ago: executing program 34 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x5, 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r4, r4, 0x0, 0x40008) 19m24.94236223s ago: executing program 35 (id=1392): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x1000000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c001}, 0x4000000) 14m43.447260602s ago: executing program 36 (id=3170): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 11m0.394878002s ago: executing program 37 (id=4232): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x32, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000380)='net/rt_acct\x00') close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) socket$inet6(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3}, './file0/file0\x00'}) 11m0.224381566s ago: executing program 38 (id=4229): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 11m0.05724116s ago: executing program 39 (id=4226): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$dri(0x0, 0x7, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 8m6.68014451s ago: executing program 40 (id=5433): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e870", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/80, 0x50}], 0x1}, 0x0) 7m44.253762617s ago: executing program 1 (id=5578): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32], 0x0}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000140)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[]) 7m44.039416971s ago: executing program 1 (id=5582): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000001280)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x130, 0x0, 0x979, {0x1, 0x3, 0x0, '\x00', {0x10001, 0x4, 0x3, 0xc558, 0xee00, r2, 0x0, '\x00', 0x10, 0x4000000003, 0x0, 0x9, {0xfffffffffffffffe, 0xd}, {0x8, 0x2}, {0x88, 0xffff9d04}, {0x5}, 0xd, 0xffffffff, 0x4, 0x400}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1}, 0x50) 7m43.719436299s ago: executing program 1 (id=5587): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r1) 7m42.549455216s ago: executing program 1 (id=5601): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7m42.359368669s ago: executing program 1 (id=5605): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x24004880) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) 7m42.273921195s ago: executing program 1 (id=5606): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 7m32.212394209s ago: executing program 41 (id=5677): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7, 0xa}, {0xfff3}}}, 0x59}}, 0x0) 7m27.170354301s ago: executing program 42 (id=5606): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 7m17.025244056s ago: executing program 0 (id=5758): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) 7m15.916024525s ago: executing program 0 (id=5762): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6010203010902220001008a0000090400000129fddd00090500"], 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1593, &(0x7f0000000440)={0x0, 0xc3fd, 0x21021, 0x3, 0x20b}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) 7m12.680065365s ago: executing program 0 (id=5768): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) 7m12.119197729s ago: executing program 0 (id=5770): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) open(&(0x7f0000000180)='./file1\x00', 0x40000, 0x131) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x60001, 0x0) 7m11.647793499s ago: executing program 0 (id=5774): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) unshare(0x22020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a2, 0xc}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7m10.758245824s ago: executing program 0 (id=5778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0xffff) close(0x3) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x1, 0x0, 0x8000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x120000011}) 7m9.545778036s ago: executing program 43 (id=5778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0xffff) close(0x3) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x1, 0x0, 0x8000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x120000011}) 6m4.520974386s ago: executing program 2 (id=5958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800, 0x10001, 0x123}, &(0x7f0000000700)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r6, 0x0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001bc0)=[{0x0}, {0x0, 0x55}], 0x2}}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 6m2.763681678s ago: executing program 2 (id=5962): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m58.151164881s ago: executing program 2 (id=5971): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 5m55.901367512s ago: executing program 2 (id=5974): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) close(0xffffffffffffffff) 5m51.364372778s ago: executing program 2 (id=5978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x200], 0x0, 0x0, 0x1, 0x1}}, 0x40) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) 5m46.395688911s ago: executing program 2 (id=5987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)) writev(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) poll(0x0, 0x0, 0x4) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5m31.260557274s ago: executing program 44 (id=5987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)) writev(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) poll(0x0, 0x0, 0x4) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5m19.505705565s ago: executing program 8 (id=6016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_wait(r4, &(0x7f0000001e40), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 5m18.131175874s ago: executing program 8 (id=6017): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1004000) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008405d) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x2c, 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x112, 0xe, 0x0, &(0x7f0000000080)) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) 5m14.144943564s ago: executing program 8 (id=6024): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x8000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ndb(0x0, 0x0, 0x80) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) 5m11.996376014s ago: executing program 8 (id=6026): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0x89a8, @remote, 0x2}, 0x4f, 0x0}, 0x20008814) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x7, 0x28, 0x64, 0x0, 0x1, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe83}}}}}}, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) r4 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0xd79, 0x10100, 0x3, 0x1f5}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x41, 0x2004, @fd=r4, 0x81, 0x0, 0x0, 0xa, 0x0, {0x3, r7}}) io_uring_enter(r4, 0x567, 0x60, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000010000)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8801, 0xc0) connect$l2tp6(r8, &(0x7f0000000040)={0xa, 0x0, 0x9, @loopback, 0xaf, 0x2}, 0x20) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5m8.184463185s ago: executing program 8 (id=6031): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) setfsgid(0xee00) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf250800010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) fchdir(0xffffffffffffffff) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB="080027bd27c9770fed6526230000080102dc0200000008000100000000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5m5.175341225s ago: executing program 8 (id=6033): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000300)) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x40}}, 0x0) 4m49.779967359s ago: executing program 45 (id=6033): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000300)) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x40}}, 0x0) 3m25.606374327s ago: executing program 4 (id=6342): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x27) 3m24.353142331s ago: executing program 4 (id=6345): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in=@multicast2, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x20, 0x89, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x3}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 3m24.240728256s ago: executing program 4 (id=6346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) 3m24.074625086s ago: executing program 4 (id=6348): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 3m24.047184328s ago: executing program 4 (id=6349): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000001c0)=0x4, 0x4) 3m23.067933511s ago: executing program 4 (id=6353): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in=@multicast2, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x20, 0x89, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x3}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 3m22.68739046s ago: executing program 46 (id=6353): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in=@multicast2, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x20, 0x89, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x3}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 49.52387135s ago: executing program 6 (id=6910): openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000480)='io.pressure\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) syz_open_dev$dri(0x0, 0x6, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000780)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "b94c74de"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 46.039885343s ago: executing program 6 (id=6918): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x8000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[r3], &(0x7f0000000200), &(0x7f00000000c0)=[r4], &(0x7f0000000040), 0x0, 0x300}) 44.534132222s ago: executing program 6 (id=6920): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x215) 42.776038533s ago: executing program 6 (id=6921): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000cc0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000340)={0x0, 0x3a0, 0xac8}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 41.469849139s ago: executing program 6 (id=6924): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xa6, 0x10}, 0xc) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x40080c7) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0xfff, 0x2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000004b00)=ANY=[], 0x798) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x3, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 34.156004665s ago: executing program 6 (id=6933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) listen(0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0xfffffffffffffd37, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 24.029071509s ago: executing program 5 (id=6952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x155, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, 0x0) 22.676276168s ago: executing program 5 (id=6954): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) creat(0x0, 0x182) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) pwrite64(r0, 0x0, 0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 20.852553911s ago: executing program 5 (id=6959): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x0, 0x9, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62cee", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000380), 0x0, 0x2}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) 18.677258041s ago: executing program 9 (id=6963): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400)) 18.611164541s ago: executing program 7 (id=6964): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 17.301143761s ago: executing program 9 (id=6965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) write(0xffffffffffffffff, &(0x7f0000000080)="52000300", 0x4) 17.280051744s ago: executing program 3 (id=6966): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe9a8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) 17.147992069s ago: executing program 5 (id=6967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.00011061s ago: executing program 7 (id=6968): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) 15.783081542s ago: executing program 3 (id=6969): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x25b6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 13.542648941s ago: executing program 7 (id=6970): sync() sync() sync() sync() sync() sync() sync() getrusage(0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, 0x0) sync() sync() sync() sync() sync() sync() sync() sync() getrusage(0x0, &(0x7f00000003c0)) 13.083818475s ago: executing program 9 (id=6971): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x106, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32], 0x3c}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 12.668471924s ago: executing program 3 (id=6972): bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x4000000}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000002540)=""/197, 0xc5}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4004) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x400048c0}, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12.114946583s ago: executing program 5 (id=6973): pipe2$watch_queue(&(0x7f0000000080), 0x80) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 11.645089856s ago: executing program 9 (id=6974): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x170060, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 10.270630166s ago: executing program 5 (id=6975): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, r4) 9.767890847s ago: executing program 9 (id=6976): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 9.507594797s ago: executing program 3 (id=6977): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) 9.487792988s ago: executing program 7 (id=6978): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000000000}, {0x3}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x2, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 5.311047994s ago: executing program 9 (id=6979): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 4.212513955s ago: executing program 7 (id=6980): socket$packet(0x11, 0x2, 0x300) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setresuid(0xee01, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x4000004) 4.008933271s ago: executing program 3 (id=6981): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r4, r5}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r4, 0x4a, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x8, 0x0, 0x0}}, 0x10) 2.281594033s ago: executing program 3 (id=6982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) shutdown(0xffffffffffffffff, 0x1) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) 0s ago: executing program 7 (id=6983): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) kernel console output (not intermixed with test programs): interface: batadv_slave_1 [ 1476.298053][T21939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.298084][T21939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1477.353336][T17333] Bluetooth: hci0: command tx timeout [ 1477.591241][T21895] hsr_slave_0: entered promiscuous mode [ 1477.592736][T21895] hsr_slave_1: entered promiscuous mode [ 1479.354234][T22177] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1479.443595][T17333] Bluetooth: hci0: command tx timeout [ 1479.460549][T21939] hsr_slave_0: entered promiscuous mode [ 1479.469527][T21939] hsr_slave_1: entered promiscuous mode [ 1479.470350][T21939] debugfs: 'hsr0' already exists in 'hsr' [ 1479.486879][T21939] Cannot create hsr debugfs directory [ 1480.202198][T14436] bridge_slave_1: left allmulticast mode [ 1480.202230][T14436] bridge_slave_1: left promiscuous mode [ 1480.202499][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.486452][T14436] bridge_slave_0: left allmulticast mode [ 1480.486749][T14436] bridge_slave_0: left promiscuous mode [ 1480.700072][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.406916][T14436] bridge_slave_1: left allmulticast mode [ 1481.406942][T14436] bridge_slave_1: left promiscuous mode [ 1481.407121][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.466462][T22204] tmpfs: Bad value for 'mpol' [ 1481.509683][T14436] bridge_slave_0: left allmulticast mode [ 1481.509715][T14436] bridge_slave_0: left promiscuous mode [ 1481.510017][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.615063][T14436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.734670][T14436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1482.824573][T14436] bond0 (unregistering): Released all slaves [ 1485.929554][T22262] netlink: 'syz.5.6156': attribute type 1 has an invalid length. [ 1486.496253][T17333] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1487.564397][T14436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1487.657097][T14436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1487.688484][T14436] bond0 (unregistering): Released all slaves [ 1488.206295][T14436] tipc: Disabling bearer [ 1488.206510][T14436] tipc: Left network mode [ 1488.244233][T22277] tipc: Can't bind to reserved service type 0 [ 1488.660821][T22287] hpfs: Bad magic ... probably not HPFS [ 1489.319938][T22094] chnl_net:caif_netlink_parms(): no params data found [ 1490.299007][T14436] hsr_slave_0: left promiscuous mode [ 1490.319625][T14436] hsr_slave_1: left promiscuous mode [ 1490.320762][T14436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1490.347292][T14436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.573213][T14436] hsr_slave_0: left promiscuous mode [ 1490.619025][T14436] hsr_slave_1: left promiscuous mode [ 1490.620250][T14436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1490.620278][T14436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1490.665379][T14436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1490.665410][T14436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.830485][T14436] veth1_macvtap: left promiscuous mode [ 1490.830598][T14436] veth0_macvtap: left promiscuous mode [ 1490.830877][T14436] veth1_vlan: left promiscuous mode [ 1490.831067][T14436] veth0_vlan: left promiscuous mode [ 1490.953861][T17990] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1491.103718][T17990] usb 6-1: Using ep0 maxpacket: 32 [ 1491.109804][T17990] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1491.109834][T17990] usb 6-1: config 0 has no interface number 0 [ 1491.109891][T17990] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1491.113473][T17990] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1491.113504][T17990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.113525][T17990] usb 6-1: Product: syz [ 1491.113547][T17990] usb 6-1: Manufacturer: syz [ 1491.113559][T17990] usb 6-1: SerialNumber: syz [ 1491.125523][T17990] usb 6-1: config 0 descriptor?? [ 1491.128646][T22341] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1491.374546][T22341] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1491.579894][T17990] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1491.580187][T17990] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1491.598548][T17990] usb 6-1: USB disconnect, device number 13 [ 1492.194207][T14436] team0 (unregistering): Port device team_slave_1 removed [ 1492.434007][T14436] team0 (unregistering): Port device team_slave_0 removed [ 1493.839498][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1493.863803][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1493.886754][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1493.888174][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1493.889163][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1495.202924][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.934146][T14436] team0 (unregistering): Port device team_slave_1 removed [ 1496.112638][T17333] Bluetooth: hci2: command tx timeout [ 1496.236339][T14436] team0 (unregistering): Port device team_slave_0 removed [ 1498.153660][T17333] Bluetooth: hci2: command tx timeout [ 1499.761001][T22363] XFS (nbd5): no-recovery mounts must be read-only. [ 1499.942214][T22094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.942436][T22094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.942657][T22094] bridge_slave_0: entered allmulticast mode [ 1499.956738][T22094] bridge_slave_0: entered promiscuous mode [ 1499.966392][T22094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.969211][T22094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.969529][T22094] bridge_slave_1: entered allmulticast mode [ 1499.991194][T22094] bridge_slave_1: entered promiscuous mode [ 1500.245679][T17333] Bluetooth: hci2: command tx timeout [ 1500.655208][T22373] warn_alloc: 1 callbacks suppressed [ 1500.655231][T22373] syz.5.6204: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1500.655404][T22373] CPU: 1 UID: 0 PID: 22373 Comm: syz.5.6204 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1500.655429][T22373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1500.655444][T22373] Call Trace: [ 1500.655453][T22373] [ 1500.655462][T22373] dump_stack_lvl+0x189/0x250 [ 1500.655501][T22373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1500.655530][T22373] ? __pfx__printk+0x10/0x10 [ 1500.655559][T22373] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1500.655595][T22373] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1500.655633][T22373] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1500.655678][T22373] warn_alloc+0x22e/0x3b0 [ 1500.655707][T22373] ? stack_depot_save_flags+0x40/0x860 [ 1500.655744][T22373] ? __pfx_warn_alloc+0x10/0x10 [ 1500.655771][T22373] ? kasan_save_track+0x3e/0x80 [ 1500.655789][T22373] ? __kasan_kmalloc+0x93/0xb0 [ 1500.655813][T22373] ? xsk_setsockopt+0x4dc/0x8d0 [ 1500.655842][T22373] ? do_sock_setsockopt+0x17c/0x1b0 [ 1500.655877][T22373] ? __x64_sys_setsockopt+0x145/0x1b0 [ 1500.655911][T22373] ? do_syscall_64+0xfa/0xfa0 [ 1500.655946][T22373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.655980][T22373] __vmalloc_node_range_noprof+0x125/0x12d0 [ 1500.656038][T22373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1500.656067][T22373] ? __kasan_kmalloc+0x93/0xb0 [ 1500.656095][T22373] vmalloc_user_noprof+0xad/0xf0 [ 1500.656118][T22373] ? xskq_create+0xbf/0x170 [ 1500.656152][T22373] xskq_create+0xbf/0x170 [ 1500.656189][T22373] xsk_init_queue+0xb0/0x110 [ 1500.656225][T22373] xsk_setsockopt+0x4dc/0x8d0 [ 1500.656258][T22373] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1500.656299][T22373] ? __fget_files+0x2a/0x420 [ 1500.656326][T22373] ? __fget_files+0x2a/0x420 [ 1500.656349][T22373] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1500.656374][T22373] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1500.656405][T22373] do_sock_setsockopt+0x17c/0x1b0 [ 1500.656444][T22373] __x64_sys_setsockopt+0x145/0x1b0 [ 1500.656486][T22373] do_syscall_64+0xfa/0xfa0 [ 1500.656521][T22373] ? lockdep_hardirqs_on+0x9c/0x150 [ 1500.656556][T22373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.656578][T22373] ? clear_bhb_loop+0x60/0xb0 [ 1500.656605][T22373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.656626][T22373] RIP: 0033:0x7f29436defc9 [ 1500.656652][T22373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1500.656671][T22373] RSP: 002b:00007f294193e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1500.656692][T22373] RAX: ffffffffffffffda RBX: 00007f2943935fa0 RCX: 00007f29436defc9 [ 1500.656709][T22373] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1500.656722][T22373] RBP: 00007f2943761f91 R08: 0000000000000052 R09: 0000000000000000 [ 1500.656737][T22373] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1500.656752][T22373] R13: 00007f2943936038 R14: 00007f2943935fa0 R15: 00007ffd5ba6a528 [ 1500.656790][T22373] [ 1500.656807][T22373] Mem-Info: [ 1500.656818][T22373] active_anon:285 inactive_anon:4575 isolated_anon:0 [ 1500.656818][T22373] active_file:23619 inactive_file:38848 isolated_file:0 [ 1500.656818][T22373] unevictable:17161 dirty:260 writeback:0 [ 1500.656818][T22373] slab_reclaimable:10587 slab_unreclaimable:113307 [ 1500.656818][T22373] mapped:30203 shmem:1393 pagetables:1039 [ 1500.656818][T22373] sec_pagetables:0 bounce:0 [ 1500.656818][T22373] kernel_misc_reclaimable:0 [ 1500.656818][T22373] free:1270357 free_pcp:5352 free_cma:0 [ 1500.656881][T22373] Node 0 active_anon:1140kB inactive_anon:18300kB active_file:94224kB inactive_file:155392kB unevictable:67108kB isolated(anon):0kB isolated(file):0kB mapped:120812kB dirty:1040kB writeback:0kB shmem:4036kB kernel_stack:13280kB pagetables:4008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1500.656930][T22373] Node 1 active_anon:0kB inactive_anon:0kB active_file:252kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1500.656975][T22373] Node 0 DMA free:15356kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1500.657037][T22373] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 1500.657075][T22373] Node 0 DMA32 free:1164420kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1140kB inactive_anon:18300kB active_file:94224kB inactive_file:155392kB unevictable:67108kB writepending:1040kB zspages:0kB present:3129332kB managed:2574584kB mlocked:0kB bounce:0kB free_pcp:21408kB local_pcp:16764kB free_cma:0kB [ 1500.657142][T22373] lowmem_reserve[]: 0 0 1 1 1 [ 1500.657176][T22373] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1500.657234][T22373] lowmem_reserve[]: 0 0 0 0 0 [ 1500.657266][T22373] Node 1 Normal free:3901652kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:252kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1500.657324][T22373] lowmem_reserve[]: 0 0 0 0 0 [ 1500.657359][T22373] Node 0 DMA: [ 1500.664421][T22094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.683405][T22373] 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1500.683571][T22373] Node 0 DMA32: 1580*4kB (ME) 1104*8kB (UME) 1063*16kB (UME) 1094*32kB (UME) 452*64kB (UME) 285*128kB (UME) 63*256kB (UME) 12*512kB (ME) 12*1024kB (UM) 7*2048kB (UM) 240*4096kB (UM) = 1164512kB [ 1500.683792][T22373] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1500.683919][T22373] Node 1 Normal: 245*4kB (UME) 16*8kB (UME) 26*16kB (UME) 195*32kB (UME) 98*64kB (UME) 28*128kB (UE) 18*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 4*2048kB (UME) 944*4096kB (M) = 3901652kB [ 1500.684121][T22373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.684141][T22373] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1500.684162][T22373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.684181][T22373] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1500.684201][T22373] 80250 total pagecache pages [ 1500.684219][T22373] 0 pages in swap cache [ 1500.684228][T22373] Free swap = 124996kB [ 1500.684237][T22373] Total swap = 124996kB [ 1500.684247][T22373] 2097051 pages RAM [ 1500.684256][T22373] 0 pages HighMem/MovableOnly [ 1500.684265][T22373] 421443 pages reserved [ 1500.684274][T22373] 0 pages cma reserved [ 1501.300902][T22351] lo speed is unknown, defaulting to 1000 [ 1501.307678][T22094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.111975][T22094] team0: Port device team_slave_0 added [ 1502.139120][T22094] team0: Port device team_slave_1 added [ 1502.314919][T17333] Bluetooth: hci2: command tx timeout [ 1504.234038][T22407] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.6220' sets config #0 [ 1504.349157][T22094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.349171][T22094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.349190][T22094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.363312][T22094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.363331][T22094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.363361][T22094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.985333][T22094] hsr_slave_0: entered promiscuous mode [ 1504.986883][T22094] hsr_slave_1: entered promiscuous mode [ 1504.987998][T22094] debugfs: 'hsr0' already exists in 'hsr' [ 1504.988025][T22094] Cannot create hsr debugfs directory [ 1505.035874][T22425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1505.037014][T22425] batadv_slave_0: entered promiscuous mode [ 1505.037041][T22425] batadv_slave_0: entered allmulticast mode [ 1505.041804][T22425] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1505.479609][T22439] netlink: 'syz.4.6234': attribute type 10 has an invalid length. [ 1505.531699][T22440] netlink: 'syz.4.6234': attribute type 10 has an invalid length. [ 1505.547172][T22439] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1505.549493][T22439] team0: Port device netdevsim0 added [ 1505.691508][T22440] team0: Port device netdevsim0 removed [ 1505.706852][T22440] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1506.832118][T22476] 9pnet_fd: Insufficient options for proto=fd [ 1506.853613][T22351] chnl_net:caif_netlink_parms(): no params data found [ 1506.914037][T21939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1508.460830][T14436] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.555007][T21939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1508.638103][T22482] tipc: Started in network mode [ 1508.638140][T22482] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 1508.664794][T22482] tipc: Enabled bearer , priority 2 [ 1508.693907][T21939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1509.096668][T14436] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.139964][T21939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1509.763367][T17983] tipc: Node number set to 10070698 [ 1510.099218][T14436] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.107014][T14436] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.284815][T22351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.284961][T22351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.285261][T22351] bridge_slave_0: entered allmulticast mode [ 1511.288407][T22351] bridge_slave_0: entered promiscuous mode [ 1511.328913][T22351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.329056][T22351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.329306][T22351] bridge_slave_1: entered allmulticast mode [ 1511.332229][T22351] bridge_slave_1: entered promiscuous mode [ 1511.579460][T22530] netlink: 'syz.5.6268': attribute type 178 has an invalid length. [ 1511.757393][T22351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.787979][T22351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.054820][T22538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6270'. [ 1513.254769][T22351] team0: Port device team_slave_0 added [ 1513.374680][T22351] team0: Port device team_slave_1 added [ 1513.634673][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1513.655074][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1513.670121][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1513.679783][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1513.690157][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1514.382491][T22351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.382512][T22351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1514.382541][T22351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.387091][T14436] bridge_slave_1: left allmulticast mode [ 1514.387129][T14436] bridge_slave_1: left promiscuous mode [ 1514.387470][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.516266][T14436] bridge_slave_0: left allmulticast mode [ 1514.516302][T14436] bridge_slave_0: left promiscuous mode [ 1514.516627][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.608540][T14436] bridge_slave_1: left allmulticast mode [ 1514.608573][T14436] bridge_slave_1: left promiscuous mode [ 1514.608832][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.685044][T14436] bridge_slave_0: left allmulticast mode [ 1514.685078][T14436] bridge_slave_0: left promiscuous mode [ 1514.685359][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.062963][T22570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6285'. [ 1515.384425][T14436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.484226][T14436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.556510][T14436] bond0 (unregistering): Released all slaves [ 1515.857914][T17333] Bluetooth: hci3: command tx timeout [ 1517.477080][T14436] bond0 (unregistering): Released all slaves [ 1517.644194][T14436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.734367][T14436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.806383][T14436] bond0 (unregistering): Released all slaves [ 1517.850180][T22351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.850197][T22351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.850220][T22351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.913335][T17333] Bluetooth: hci3: command tx timeout [ 1518.764341][T22545] lo speed is unknown, defaulting to 1000 [ 1518.790969][T22094] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1519.910090][T22351] hsr_slave_0: entered promiscuous mode [ 1519.912892][T22351] hsr_slave_1: entered promiscuous mode [ 1519.925153][T22351] debugfs: 'hsr0' already exists in 'hsr' [ 1519.925183][T22351] Cannot create hsr debugfs directory [ 1519.993438][T22094] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1520.003816][T17333] Bluetooth: hci3: command tx timeout [ 1520.287640][T22094] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1520.685620][T22094] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1521.978079][T14436] hsr_slave_0: left promiscuous mode [ 1522.017817][T14436] hsr_slave_1: left promiscuous mode [ 1522.018955][T14436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.064113][T14436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.083214][T17333] Bluetooth: hci3: command tx timeout [ 1522.223488][T14436] hsr_slave_0: left promiscuous mode [ 1522.243478][T14436] hsr_slave_1: left promiscuous mode [ 1522.332367][T14436] veth1_macvtap: left promiscuous mode [ 1522.332447][T14436] veth0_macvtap: left promiscuous mode [ 1522.332625][T14436] veth1_vlan: left promiscuous mode [ 1522.332771][T14436] veth0_vlan: left promiscuous mode [ 1522.948849][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.105481][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.173013][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.267167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.331269][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.383957][T14436] team0 (unregistering): Port device team_slave_1 removed [ 1523.493190][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.563966][T14436] team0 (unregistering): Port device team_slave_0 removed [ 1523.682364][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.765794][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.838417][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.916453][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.974529][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.053828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.116369][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.294828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.522944][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.577386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.753802][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.821585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.975685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.045819][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.115985][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.467599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.602746][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.679092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.756106][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.829158][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.906456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.968532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.033874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.098064][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.223248][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.282826][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.531613][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.592522][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.648995][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.713267][ C0] vkms_vblank_simulate: vblank timer overrun [ 1530.614075][T14436] team0 (unregistering): Port device team_slave_0 removed [ 1530.878346][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1530.895165][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1530.897846][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1530.899040][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1530.899756][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1531.828071][T22655] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 1531.828071][T22655] [ 1532.065877][T22643] lo speed is unknown, defaulting to 1000 [ 1532.473456][ T1232] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1532.700968][ T1232] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1532.701001][ T1232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.710863][ T1232] usb 6-1: config 0 descriptor?? [ 1532.822261][T22351] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1532.907409][T22545] chnl_net:caif_netlink_parms(): no params data found [ 1532.980853][T17333] Bluetooth: hci4: command tx timeout [ 1533.082767][T22351] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1533.147072][ T1232] hid-alps 0003:044E:120B.0028: report_id 1381254482 is invalid [ 1533.147101][ T1232] hid-alps 0003:044E:120B.0028: item 0 4 1 8 parsing failed [ 1533.147901][ T1232] hid-alps 0003:044E:120B.0028: parse failed [ 1533.148006][ T1232] hid-alps 0003:044E:120B.0028: probe with driver hid-alps failed with error -22 [ 1533.184014][T22351] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1533.348882][T22351] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1533.362904][T17993] usb 6-1: USB disconnect, device number 14 [ 1534.044367][T22545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.044594][T22545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.044880][T22545] bridge_slave_0: entered allmulticast mode [ 1534.047919][T22545] bridge_slave_0: entered promiscuous mode [ 1534.127203][T22545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.127363][T22545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.127725][T22545] bridge_slave_1: entered allmulticast mode [ 1534.130763][T22545] bridge_slave_1: entered promiscuous mode [ 1534.598310][T22545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.643565][T22545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.074168][T17333] Bluetooth: hci4: command tx timeout [ 1535.178190][T22545] team0: Port device team_slave_0 added [ 1535.238216][T22545] team0: Port device team_slave_1 added [ 1535.249629][T22643] chnl_net:caif_netlink_parms(): no params data found [ 1535.620731][T22722] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1535.621651][T22545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.621667][T22545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.621694][T22545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.016455][T22545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.016474][T22545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.016503][T22545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.113364][T17333] Bluetooth: hci4: command tx timeout [ 1537.706374][T17763] bridge0: port 3(syz_tun) entered disabled state [ 1537.817067][T17763] syz_tun (unregistering): left allmulticast mode [ 1537.817099][T17763] syz_tun (unregistering): left promiscuous mode [ 1537.817227][T17763] bridge0: port 3(syz_tun) entered disabled state [ 1537.963806][T22643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.963964][T22643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.964255][T22643] bridge_slave_0: entered allmulticast mode [ 1537.966559][T22643] bridge_slave_0: entered promiscuous mode [ 1537.978446][T22545] hsr_slave_0: entered promiscuous mode [ 1537.980328][T22545] hsr_slave_1: entered promiscuous mode [ 1537.986410][T22643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.986617][T22643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.987057][T22643] bridge_slave_1: entered allmulticast mode [ 1537.994789][T22643] bridge_slave_1: entered promiscuous mode [ 1538.097864][T17993] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1538.244271][T17993] usb 6-1: Using ep0 maxpacket: 8 [ 1538.250181][T17993] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1538.255676][T17993] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1538.255716][T17993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1538.255750][T17993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1538.255776][T17993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1538.255802][T17993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1538.255828][T17993] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1538.255856][T17993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1538.255881][T17993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1538.269818][T17993] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1538.269856][T17993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.269880][T17993] usb 6-1: Product: syz [ 1538.269898][T17993] usb 6-1: Manufacturer: syz [ 1538.269926][T17993] usb 6-1: SerialNumber: syz [ 1538.300584][T17993] usb 6-1: config 0 descriptor?? [ 1538.321510][T17993] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1538.592906][T17993] usb 6-1: USB disconnect, device number 15 [ 1538.852197][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1538.876114][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1538.878167][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1538.881948][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1538.882671][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1538.959415][T22643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.077391][T22643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.194058][ T5818] Bluetooth: hci4: command tx timeout [ 1539.842050][T14436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1539.842090][T14436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.914757][T22643] team0: Port device team_slave_0 added [ 1539.946647][T22643] team0: Port device team_slave_1 added [ 1540.244184][T17993] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1540.362913][T14436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.362947][T14436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.414876][T22752] lo speed is unknown, defaulting to 1000 [ 1540.418833][T22643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.418852][T22643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.418881][T22643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.421216][T17993] usb 6-1: config 0 has an invalid interface number: 62 but max is 0 [ 1540.421243][T17993] usb 6-1: config 0 has no interface number 0 [ 1540.421284][T17993] usb 6-1: config 0 interface 62 has no altsetting 0 [ 1540.463246][T17993] usb 6-1: New USB device found, idVendor=2584, idProduct=4a8f, bcdDevice=a4.2c [ 1540.463280][T17993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.463303][T17993] usb 6-1: Product: syz [ 1540.463319][T17993] usb 6-1: Manufacturer: syz [ 1540.463335][T17993] usb 6-1: SerialNumber: syz [ 1540.539058][T17993] usb 6-1: config 0 descriptor?? [ 1540.628249][T22643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.628269][T22643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.628297][T22643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1540.756627][T17993] usb-storage 6-1:0.62: USB Mass Storage device detected [ 1540.882108][T17993] usb 6-1: USB disconnect, device number 16 [ 1540.954894][ T5818] Bluetooth: hci0: command tx timeout [ 1540.977387][T14436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.977416][T14436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.081064][T22351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.337716][T14436] bond0: (slave netdevsim0): Releasing backup interface [ 1541.389451][T14436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1541.389491][T14436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.586901][T22643] hsr_slave_0: entered promiscuous mode [ 1541.588480][T22643] hsr_slave_1: entered promiscuous mode [ 1541.589607][T22643] debugfs: 'hsr0' already exists in 'hsr' [ 1541.589633][T22643] Cannot create hsr debugfs directory [ 1542.577375][T22351] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.886650][T14454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.886811][T14454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.044279][T17333] Bluetooth: hci0: command tx timeout [ 1543.330947][T14438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.331117][T14438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.609914][T22806] netlink: 87 bytes leftover after parsing attributes in process `syz.5.6376'. [ 1543.818587][T22752] chnl_net:caif_netlink_parms(): no params data found [ 1544.885405][T22545] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1544.927903][T22752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.928136][T22752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.928373][T22752] bridge_slave_0: entered allmulticast mode [ 1544.930743][T22752] bridge_slave_0: entered promiscuous mode [ 1544.936543][T22545] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1544.988083][T22752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.988194][T22752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.988364][T22752] bridge_slave_1: entered allmulticast mode [ 1544.990363][T22752] bridge_slave_1: entered promiscuous mode [ 1545.002017][T22545] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1545.023389][T18001] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1545.114148][T17333] Bluetooth: hci0: command 0x040f tx timeout [ 1545.166529][T22545] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1545.187005][T18001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.187046][T18001] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1545.187063][T18001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.190906][T18001] usb 6-1: config 0 descriptor?? [ 1545.366678][T22752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1545.431758][T22752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.618659][T18001] lg-g15 0003:046D:C222.0029: unknown main item tag 0x0 [ 1545.618688][T18001] lg-g15 0003:046D:C222.0029: unknown main item tag 0x0 [ 1545.618708][T18001] lg-g15 0003:046D:C222.0029: unknown main item tag 0x0 [ 1545.618727][T18001] lg-g15 0003:046D:C222.0029: unknown main item tag 0x0 [ 1545.618746][T18001] lg-g15 0003:046D:C222.0029: unknown main item tag 0x0 [ 1545.618766][T18001] lg-g15 0003:046D:C222.0029: unknown main item tag 0x0 [ 1545.618784][T18001] lg-g15 0003:046D:C222.0029: unknown main item tag 0x0 [ 1545.621430][T18001] lg-g15 0003:046D:C222.0029: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 1545.709378][T22752] team0: Port device team_slave_0 added [ 1545.737410][T22752] team0: Port device team_slave_1 added [ 1545.818175][T17983] usb 6-1: USB disconnect, device number 17 [ 1545.971003][T22752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.971021][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.971045][T22752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.979840][T22752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.979862][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.979898][T22752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1546.141498][T14436] bridge_slave_1: left allmulticast mode [ 1546.141533][T14436] bridge_slave_1: left promiscuous mode [ 1546.141787][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.204582][T14436] bridge_slave_0: left allmulticast mode [ 1546.204608][T14436] bridge_slave_0: left promiscuous mode [ 1546.204820][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.287718][T14436] bridge_slave_1: left allmulticast mode [ 1546.287742][T14436] bridge_slave_1: left promiscuous mode [ 1546.287917][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.344940][T14436] bridge_slave_0: left allmulticast mode [ 1546.344974][T14436] bridge_slave_0: left promiscuous mode [ 1546.345254][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.451238][T14436] bridge_slave_1: left allmulticast mode [ 1546.451263][T14436] bridge_slave_1: left promiscuous mode [ 1546.451469][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.524355][T14436] bridge_slave_0: left allmulticast mode [ 1546.524381][T14436] bridge_slave_0: left promiscuous mode [ 1546.524584][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.224787][ T5818] Bluetooth: hci0: command 0x040f tx timeout [ 1547.266967][T14436] smc: removing net device ip6tnl0 with user defined pnetid SYZ1 [ 1548.254120][T14436] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1549.294047][ T5818] Bluetooth: hci0: command 0x040f tx timeout [ 1549.464281][T14436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.526858][T14436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.547375][T14436] bond0 (unregistering): Released all slaves [ 1549.955076][T14436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.054123][T14436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.126513][T14436] bond0 (unregistering): Released all slaves [ 1550.474448][T14436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.574090][T14436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.638247][T14436] bond0 (unregistering): Released all slaves [ 1551.170445][T14436] tipc: Disabling bearer [ 1551.305954][T14436] tipc: Left network mode [ 1551.321491][T22752] hsr_slave_0: entered promiscuous mode [ 1551.322958][T22752] hsr_slave_1: entered promiscuous mode [ 1551.335712][T22752] debugfs: 'hsr0' already exists in 'hsr' [ 1551.335742][T22752] Cannot create hsr debugfs directory [ 1551.625523][T22351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.976209][T22849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6388'. [ 1552.963269][ T5822] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1553.123356][ T5822] usb 6-1: Using ep0 maxpacket: 16 [ 1553.126090][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1553.126131][ T5822] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1553.126156][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.131196][ T5822] usb 6-1: config 0 descriptor?? [ 1553.401172][T14436] hsr_slave_0: left promiscuous mode [ 1553.413562][T14436] hsr_slave_1: left promiscuous mode [ 1553.415816][T14436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1553.415849][T14436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.474640][T14436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.474672][T14436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.549642][ T5822] hid (null): unknown global tag 0xc [ 1553.549661][ T5822] hid (null): unknown global tag 0xe [ 1553.549706][ T5822] hid (null): unknown global tag 0xe [ 1553.674152][T14436] hsr_slave_0: left promiscuous mode [ 1553.714467][T14436] hsr_slave_1: left promiscuous mode [ 1553.715277][T14436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.737081][T14436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.751643][ T5822] usb 6-1: USB disconnect, device number 18 [ 1553.903439][T14436] hsr_slave_0: left promiscuous mode [ 1553.924335][T14436] hsr_slave_1: left promiscuous mode [ 1553.925246][T14436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.974322][T14436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.120726][T14436] veth1_macvtap: left promiscuous mode [ 1554.120837][T14436] veth0_macvtap: left promiscuous mode [ 1554.121013][T14436] veth1_vlan: left allmulticast mode [ 1554.121054][T14436] veth1_vlan: left promiscuous mode [ 1554.121261][T14436] veth0_vlan: left promiscuous mode [ 1554.259423][T17333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1554.273600][T17333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1554.289770][T17333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1554.312802][T17333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1554.325239][T17333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1554.875423][T14436] team0 (unregistering): Port device batadv1 removed [ 1556.433354][T17333] Bluetooth: hci1: command tx timeout [ 1556.642291][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1557.643878][T14436] team0 (unregistering): Port device team_slave_1 removed [ 1557.874028][T14436] team0 (unregistering): Port device team_slave_0 removed [ 1558.473761][T17333] Bluetooth: hci1: command tx timeout [ 1559.939915][T14436] team0 (unregistering): Port device dummy0 removed [ 1560.561638][T17333] Bluetooth: hci1: command tx timeout [ 1561.806155][T14436] team0 (unregistering): Port device team_slave_1 removed [ 1561.984581][T14436] team0 (unregistering): Port device team_slave_0 removed [ 1562.637796][T17333] Bluetooth: hci1: command tx timeout [ 1563.346004][T14436] team0 (unregistering): Port device team_slave_1 removed [ 1563.504485][T14436] team0 (unregistering): Port device team_slave_0 removed [ 1564.376738][ T5822] lo speed is unknown, defaulting to 1000 [ 1564.376771][ T5822] infiniband syz2: ib_query_port failed (-19) [ 1564.551433][T22875] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6398'. [ 1564.565722][T22875] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6398'. [ 1564.689604][T22545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.696293][T22643] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1564.797455][T22643] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1565.146924][T17313] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1565.167219][T22643] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1565.293257][T17313] usb 6-1: Using ep0 maxpacket: 32 [ 1565.299011][T17313] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.299042][T17313] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1565.299069][T17313] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1565.299086][T17313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.302811][T17313] usb 6-1: config 0 descriptor?? [ 1565.610045][T22643] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1565.792857][T17313] magicmouse 0003:05AC:0265.002B: hidraw0: USB HID v0.07 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0 [ 1566.014450][ T1232] usb 6-1: USB disconnect, device number 19 [ 1566.071551][T22545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1566.245139][T14418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.253902][T14418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1566.470557][T14454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.470679][T14454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.087265][T22864] chnl_net:caif_netlink_parms(): no params data found [ 1567.483358][T22894] support for the xor transformation has been removed. [ 1567.957050][T22864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.957191][T22864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.957838][T22864] bridge_slave_0: entered allmulticast mode [ 1567.964958][T22864] bridge_slave_0: entered promiscuous mode [ 1567.985295][T22752] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1568.025087][T22864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.025319][T22864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.025587][T22864] bridge_slave_1: entered allmulticast mode [ 1568.033988][T22864] bridge_slave_1: entered promiscuous mode [ 1568.036543][T22752] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1568.337488][T22752] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1568.518417][T22752] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1568.619453][T22864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.706621][T22864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.096874][T22643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.248210][T22864] team0: Port device team_slave_0 added [ 1569.375008][T22864] team0: Port device team_slave_1 added [ 1570.499965][T22864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.499987][T22864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.500008][T22864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.503329][ T1232] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1570.536885][T22864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.536908][T22864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.536952][T22864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.617677][T22545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.620693][T22643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.649819][T14436] IPVS: stop unused estimator thread 0... [ 1570.675292][ T1232] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.675322][ T1232] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1570.677845][ T1232] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1570.677876][ T1232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.677898][ T1232] usb 6-1: Product: syz [ 1570.677915][ T1232] usb 6-1: Manufacturer: syz [ 1570.677930][ T1232] usb 6-1: SerialNumber: syz [ 1570.891863][T14418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.892074][T14418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.906880][T22864] hsr_slave_0: entered promiscuous mode [ 1570.908596][T22864] hsr_slave_1: entered promiscuous mode [ 1570.909979][T22864] debugfs: 'hsr0' already exists in 'hsr' [ 1570.910008][T22864] Cannot create hsr debugfs directory [ 1570.950196][ T1232] usb 6-1: 0:2 : does not exist [ 1570.961977][ T1232] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1570.991421][ T1232] usb 6-1: USB disconnect, device number 20 [ 1571.003378][T14418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.003520][T14418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.893634][T17313] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1572.070698][T17313] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.070744][T17313] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1572.070790][T17313] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1572.070830][T17313] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.070857][T17313] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1572.070885][T17313] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1572.070912][T17313] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1572.070942][T17313] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1572.072427][T17313] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.072468][T17313] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1572.072513][T17313] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1572.072541][T17313] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.072568][T17313] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1572.072597][T17313] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1572.072625][T17313] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1572.072653][T17313] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1572.079549][T17313] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.079595][T17313] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1572.079640][T17313] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1572.079671][T17313] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.079697][T17313] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1572.079724][T17313] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1572.079752][T17313] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1572.079779][T17313] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1572.109211][T17313] usb 6-1: string descriptor 0 read error: -22 [ 1572.109377][T17313] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1572.109404][T17313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.384472][T17313] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1572.448364][T22752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1572.896125][T17313] usb 6-1: USB disconnect, device number 21 [ 1573.061537][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1573.081790][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1573.099261][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1573.112326][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1573.120842][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1573.616962][T22947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6416'. [ 1573.799240][T22752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.850696][T14457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.850939][T14457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1573.919339][T14459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.919523][T14459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1574.075144][T22951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.081541][T22951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.084409][T22952] netlink: 'syz.5.6418': attribute type 16 has an invalid length. [ 1574.084436][T22952] netlink: 'syz.5.6418': attribute type 17 has an invalid length. [ 1574.167730][T22952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.223737][T22952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1574.256377][T22643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.491441][T14436] bridge_slave_1: left allmulticast mode [ 1574.491475][T14436] bridge_slave_1: left promiscuous mode [ 1574.491736][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.594958][T14436] bridge_slave_0: left allmulticast mode [ 1574.594990][T14436] bridge_slave_0: left promiscuous mode [ 1574.595289][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.723459][T14436] bridge_slave_1: left allmulticast mode [ 1574.723492][T14436] bridge_slave_1: left promiscuous mode [ 1574.723828][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.795192][T14436] bridge_slave_0: left allmulticast mode [ 1574.795233][T14436] bridge_slave_0: left promiscuous mode [ 1574.795516][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.858292][T14436] batman_adv: batadv0: Interface deactivated: gretap2 [ 1575.194359][T17333] Bluetooth: hci2: command tx timeout [ 1575.806524][T14436] batman_adv: batadv0: Removing interface: gretap2 [ 1577.287771][T17333] Bluetooth: hci2: command tx timeout [ 1577.423274][ T44] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1577.523887][T14436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1577.573314][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 1577.575858][ T44] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1577.577072][ T44] usb 6-1: config 0 has no interfaces? [ 1577.580626][ T44] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1577.580656][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.580671][ T44] usb 6-1: Product: syz [ 1577.580682][ T44] usb 6-1: Manufacturer: syz [ 1577.580693][ T44] usb 6-1: SerialNumber: syz [ 1577.585994][ T44] usb 6-1: config 0 descriptor?? [ 1577.643795][T14436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1577.703877][T14436] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1577.796540][T14436] bond0 (unregistering): Released all slaves [ 1577.869833][T22982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.870369][T22982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.891983][ T5893] usb 6-1: USB disconnect, device number 22 [ 1578.558062][ T5893] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1578.725780][ T5893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.725812][ T5893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1578.725868][ T5893] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.728276][ T5893] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1578.728305][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.728321][ T5893] usb 6-1: Product: syz [ 1578.728332][ T5893] usb 6-1: Manufacturer: syz [ 1578.728343][ T5893] usb 6-1: SerialNumber: syz [ 1578.946003][ T5893] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1578.946043][ T5893] cdc_ncm 6-1:1.0: bind() failure [ 1579.078506][ T5893] usb 6-1: USB disconnect, device number 23 [ 1579.363560][T17333] Bluetooth: hci2: command tx timeout [ 1579.914553][T14436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.974074][T14436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1580.015612][T14436] bond0 (unregistering): Released all slaves [ 1580.833817][T22932] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 1580.986102][T22932] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1580.986134][T22932] usb 6-1: config 0 has no interface number 0 [ 1580.986186][T22932] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1580.986217][T22932] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1580.986263][T22932] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1580.986288][T22932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.058599][T22932] usb 6-1: config 0 descriptor?? [ 1581.059692][T22991] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1581.118594][T22932] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1581.268438][T22932] usb 6-1: USB disconnect, device number 24 [ 1581.406657][T22938] chnl_net:caif_netlink_parms(): no params data found [ 1581.433332][T17333] Bluetooth: hci2: command tx timeout [ 1581.813702][T14436] hsr_slave_0: left promiscuous mode [ 1581.853880][T14436] hsr_slave_1: left promiscuous mode [ 1581.854930][T14436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1581.904589][T14436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1582.053232][T14436] hsr_slave_0: left promiscuous mode [ 1582.093170][T14436] hsr_slave_1: left promiscuous mode [ 1582.094225][T14436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.116908][T14436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1582.424068][T14436] pim6reg527 (unregistering): left allmulticast mode [ 1584.494023][T14436] team0 (unregistering): Port device team_slave_1 removed [ 1584.814194][T14436] team0 (unregistering): Port device team_slave_0 removed [ 1589.284122][T14436] team0 (unregistering): Port device team_slave_1 removed [ 1589.633982][T14436] team0 (unregistering): Port device team_slave_0 removed [ 1591.460295][T17333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1591.480978][T17333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1591.482654][T17333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1591.503968][T17333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1591.504849][T17333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1592.873582][T23002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1594.092653][T22938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.092875][T22938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.108175][T22938] bridge_slave_0: entered allmulticast mode [ 1594.111221][T22938] bridge_slave_0: entered promiscuous mode [ 1594.182617][T22938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.182806][T22938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.183588][T22938] bridge_slave_1: entered allmulticast mode [ 1594.186724][T22938] bridge_slave_1: entered promiscuous mode [ 1594.253122][T17333] Bluetooth: hci3: command tx timeout [ 1595.637034][T22938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.648414][T22752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.683183][T22932] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1595.688004][T22938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.800941][T22864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1595.886043][T22932] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1595.886109][T22932] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1595.886138][T22932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1595.886165][T22932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1595.886193][T22932] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1595.886239][T22932] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1595.886263][T22932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.891391][T22932] usb 6-1: config 0 descriptor?? [ 1595.892588][T23019] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1596.147255][T22864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1596.189867][T22938] team0: Port device team_slave_0 added [ 1596.205125][T22864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1596.260465][T22938] team0: Port device team_slave_1 added [ 1596.289934][T22864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1596.325972][T17333] Bluetooth: hci3: command tx timeout [ 1596.368341][T22932] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1596.368380][T22932] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1596.368409][T22932] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1596.368436][T22932] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1596.368464][T22932] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1596.368494][T22932] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1596.368521][T22932] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1596.368550][T22932] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1596.368579][T22932] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1596.368608][T22932] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1596.475719][T22932] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1596.655169][T17313] usb 6-1: USB disconnect, device number 25 [ 1596.779231][T22938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1596.779245][T22938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.779266][T22938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1596.852390][T22938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1596.852404][T22938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.852425][T22938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.188102][T22938] hsr_slave_0: entered promiscuous mode [ 1597.189644][T22938] hsr_slave_1: entered promiscuous mode [ 1597.190641][T22938] debugfs: 'hsr0' already exists in 'hsr' [ 1597.190668][T22938] Cannot create hsr debugfs directory [ 1597.935440][T23004] chnl_net:caif_netlink_parms(): no params data found [ 1597.989905][T22752] veth0_vlan: entered promiscuous mode [ 1598.397086][T17333] Bluetooth: hci3: command tx timeout [ 1598.706123][T22752] veth1_vlan: entered promiscuous mode [ 1598.967524][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1599.009365][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1599.035274][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1599.038293][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1599.039254][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1599.978819][T23004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.978973][T23004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.979192][T23004] bridge_slave_0: entered allmulticast mode [ 1599.981349][T23004] bridge_slave_0: entered promiscuous mode [ 1600.004958][T23053] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 1600.026925][T23053] batman_adv: batadv0: Adding interface: macvtap1 [ 1600.026945][T23053] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.026982][T23053] batman_adv: batadv0: Interface activated: macvtap1 [ 1600.028410][T23004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.028538][T23004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.028754][T23004] bridge_slave_1: entered allmulticast mode [ 1600.031269][T23004] bridge_slave_1: entered promiscuous mode [ 1600.132439][T23055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6443'. [ 1600.473541][ T5818] Bluetooth: hci3: command tx timeout [ 1600.538090][T23004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1600.572718][T23004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.095682][T23004] team0: Port device team_slave_0 added [ 1601.111927][T23004] team0: Port device team_slave_1 added [ 1601.119358][ T5818] Bluetooth: hci4: command tx timeout [ 1601.336895][T23004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.336923][T23004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.336947][T23004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.415215][T17990] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1601.416203][T23004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.416218][T23004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.416242][T23004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.480347][T22864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.574957][T17990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.574982][T17990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.575965][T17990] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1601.575985][T17990] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1601.575999][T17990] usb 6-1: Manufacturer: syz [ 1601.580811][T17990] usb 6-1: config 0 descriptor?? [ 1601.898215][T23004] hsr_slave_0: entered promiscuous mode [ 1601.899744][T23004] hsr_slave_1: entered promiscuous mode [ 1601.900762][T23004] debugfs: 'hsr0' already exists in 'hsr' [ 1601.900791][T23004] Cannot create hsr debugfs directory [ 1601.965241][T22864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.222320][T22938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1602.262003][T22938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1602.348196][T14420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.348420][T14420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1602.384851][T22938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1602.401718][T17990] uclogic 0003:256C:006D.002D: failed retrieving string descriptor #100: -71 [ 1602.401769][T17990] uclogic 0003:256C:006D.002D: failed retrieving pen parameters: -71 [ 1602.401793][T17990] uclogic 0003:256C:006D.002D: failed probing pen v1 parameters: -71 [ 1602.401832][T17990] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 1602.401910][T17990] uclogic 0003:256C:006D.002D: probe with driver uclogic failed with error -71 [ 1602.415922][T17990] usb 6-1: USB disconnect, device number 26 [ 1602.479404][T22938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1602.546068][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.546225][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1602.720044][T23045] chnl_net:caif_netlink_parms(): no params data found [ 1603.195501][ T5818] Bluetooth: hci4: command tx timeout [ 1603.228202][T23082] syzkaller1: entered promiscuous mode [ 1603.228232][T23082] syzkaller1: entered allmulticast mode [ 1603.902239][T23045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.902400][T23045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.902653][T23045] bridge_slave_0: entered allmulticast mode [ 1603.906036][T23045] bridge_slave_0: entered promiscuous mode [ 1604.175134][T23045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.175367][T23045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.175660][T23045] bridge_slave_1: entered allmulticast mode [ 1604.177749][T23045] bridge_slave_1: entered promiscuous mode [ 1604.573463][T23045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1604.590241][T23045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.790295][T23045] team0: Port device team_slave_0 added [ 1604.806991][T23045] team0: Port device team_slave_1 added [ 1605.239865][T23045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.239884][T23045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.239912][T23045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.246341][T23045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.246362][T23045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.246395][T23045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.283224][ T5818] Bluetooth: hci4: command tx timeout [ 1605.504669][T23045] hsr_slave_0: entered promiscuous mode [ 1605.505760][T23045] hsr_slave_1: entered promiscuous mode [ 1605.506535][T23045] debugfs: 'hsr0' already exists in 'hsr' [ 1605.506561][T23045] Cannot create hsr debugfs directory [ 1605.789632][T22864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.869709][T23004] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1605.911229][T22938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1605.923517][T23004] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1605.973410][T23004] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1606.104838][T23004] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1606.301872][T22938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1606.546214][T14420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.546375][T14420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1606.574991][T14420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.587805][T14420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1606.872342][T22864] veth0_vlan: entered promiscuous mode [ 1607.112970][T22864] veth1_vlan: entered promiscuous mode [ 1607.357769][ T5818] Bluetooth: hci4: command tx timeout [ 1607.542578][T23004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.617900][T22864] veth0_macvtap: entered promiscuous mode [ 1607.671174][T22864] veth1_macvtap: entered promiscuous mode [ 1607.694540][T23004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.738462][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.740450][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1607.829860][T14438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.836746][T14438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.851624][T22864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1607.942143][T22864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1607.973430][T17993] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1608.042682][T14420] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.051834][T14420] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.076180][T14420] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.095930][T14420] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.138384][T17993] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1608.138418][T17993] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1608.138462][T17993] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1608.138488][T17993] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1608.142877][T17993] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1608.142906][T17993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.142927][T17993] usb 6-1: Product: syz [ 1608.142942][T17993] usb 6-1: Manufacturer: syz [ 1608.142956][T17993] usb 6-1: SerialNumber: syz [ 1608.227550][T23125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1608.230524][T17993] cdc_mbim 6-1:1.0: skipping garbage [ 1608.269118][T23045] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1608.331312][T23045] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1608.368568][T23045] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1608.441862][T23125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1608.442016][T23125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1608.508262][T23045] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1608.559306][T22938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1608.980654][T14420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.980677][T14420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.086884][T23125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1609.087505][T23125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1609.088002][T17993] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 1609.099946][T17993] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1609.184279][T17993] wwan wwan0: port wwan0mbim0 attached [ 1609.230123][T17993] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 3e:0a:ee:ae:ef:b8 [ 1609.238276][T14444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.238303][T14444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.310158][T22938] veth0_vlan: entered promiscuous mode [ 1609.334671][T17993] usb 6-1: USB disconnect, device number 27 [ 1609.337143][T17993] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1609.450666][T22938] veth1_vlan: entered promiscuous mode [ 1609.461000][T23004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1609.483202][T17993] wwan wwan0: port wwan0mbim0 disconnected [ 1609.631417][T22938] veth0_macvtap: entered promiscuous mode [ 1609.668461][T22938] veth1_macvtap: entered promiscuous mode [ 1609.710955][T23045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1609.780434][T22938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1609.840065][T22938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1609.887415][T23045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1609.909872][T14418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.911543][T14418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.911981][T14418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.916741][T14418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.950802][T14462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.959652][T14462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.011062][T14444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.011443][T14444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1610.557152][T21675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.557177][T21675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.684737][T14438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.684762][T14438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.785061][T23004] veth0_vlan: entered promiscuous mode [ 1610.818178][T23004] veth1_vlan: entered promiscuous mode [ 1610.853483][ T5822] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1610.976048][T23004] veth0_macvtap: entered promiscuous mode [ 1611.013553][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 1611.015941][ T5822] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1611.015974][ T5822] usb 6-1: config 0 has no interface number 0 [ 1611.016752][T23004] veth1_macvtap: entered promiscuous mode [ 1611.020633][ T5822] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1611.020661][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.020682][ T5822] usb 6-1: Product: syz [ 1611.020696][ T5822] usb 6-1: Manufacturer: syz [ 1611.020712][ T5822] usb 6-1: SerialNumber: syz [ 1611.032072][ T5822] usb 6-1: config 0 descriptor?? [ 1611.089871][ T5822] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1611.108887][T23045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1611.145832][T23004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1611.229982][T23004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1611.339846][T21478] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.340566][T21478] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.361031][T21675] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.361083][T21675] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.384637][ T5822] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1611.434022][ T5822] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1611.717512][T17313] IPVS: starting estimator thread 0... [ 1611.793835][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1611.809555][ T5893] usb 6-1: USB disconnect, device number 28 [ 1611.848032][T23172] IPVS: using max 8 ests per chain, 19200 per kthread [ 1611.962330][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1612.002388][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1612.008356][ T5893] quatech2 6-1:0.51: device disconnected [ 1612.168984][T21675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.169009][T21675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.251081][T14432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.251104][T14432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.368839][T23045] veth0_vlan: entered promiscuous mode [ 1612.438746][T23045] veth1_vlan: entered promiscuous mode [ 1612.613859][T23045] veth0_macvtap: entered promiscuous mode [ 1612.648039][T23045] veth1_macvtap: entered promiscuous mode [ 1612.718698][T23045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1613.742140][T23045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1613.787826][T21478] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.790638][T21478] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.898428][ T37] audit: type=1326 audit(2000001366.647:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23192 comm="syz.5.6471" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29436defc9 code=0x0 [ 1613.946716][T21478] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.018702][T21478] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.288329][T23198] tls_set_device_offload: netdev not found [ 1614.293242][ T5822] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1614.434007][ T37] audit: type=1326 audit(2000001367.297:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23199 comm="syz.3.6474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x0 [ 1614.497321][ T5822] usb 10-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 1614.497355][ T5822] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.541982][ T5822] usb 10-1: config 0 descriptor?? [ 1614.647715][T14432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.647742][T14432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.044859][ T5822] apple 0003:05AC:029F.002E: unbalanced collection at end of report description [ 1615.045987][ T5822] apple 0003:05AC:029F.002E: parse failed [ 1615.046102][ T5822] apple 0003:05AC:029F.002E: probe with driver apple failed with error -22 [ 1615.071992][T21675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.072020][T21675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.266863][T17313] usb 10-1: USB disconnect, device number 5 [ 1617.861488][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6497'. [ 1617.861791][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6497'. [ 1618.078323][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1618.493160][ T5893] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1618.648814][ T5893] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1618.648844][ T5893] usb 6-1: config 1 has no interface number 0 [ 1618.648898][ T5893] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1618.648926][ T5893] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1618.648953][ T5893] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1618.648978][ T5893] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1618.715935][ T5893] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1618.715967][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.715989][ T5893] usb 6-1: Product: syz [ 1618.716005][ T5893] usb 6-1: Manufacturer: syz [ 1618.716022][ T5893] usb 6-1: SerialNumber: syz [ 1618.758024][T23269] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1618.758373][T23269] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1619.002081][T23269] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1619.002584][T23269] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1619.023255][ T37] audit: type=1326 audit(2000001371.877:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23287 comm="syz.3.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1619.023541][ T37] audit: type=1326 audit(2000001371.887:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23287 comm="syz.3.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1619.024726][ T37] audit: type=1326 audit(2000001371.887:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23287 comm="syz.3.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1619.025263][ T37] audit: type=1326 audit(2000001371.887:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23287 comm="syz.3.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1619.025971][ T37] audit: type=1326 audit(2000001371.887:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23287 comm="syz.3.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1619.026590][ T37] audit: type=1326 audit(2000001371.887:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23287 comm="syz.3.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1619.028823][ T37] audit: type=1326 audit(2000001371.887:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23287 comm="syz.3.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1619.029873][ T37] audit: type=1326 audit(2000001371.887:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23287 comm="syz.3.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1619.030185][ T37] audit: type=1326 audit(2000001371.887:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23287 comm="syz.3.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1619.030849][ T37] audit: type=1326 audit(2000001371.887:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23287 comm="syz.3.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1619.636917][ T5893] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1619.649565][ C0] sierra_net 6-1:1.7 wwan0: : unexpected notification 42! [ 1619.884450][ T5893] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 1619.884480][ T5893] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 1619.887365][T17313] sierra_net 6-1:1.7 wwan0: usb_control_msg failed, status -71 [ 1619.888217][ T5893] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 1619.888241][ T5893] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 1619.946182][ T5893] usb 6-1: USB disconnect, device number 29 [ 1619.951145][ T5893] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 1620.086096][ T5893] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1620.160141][T23313] atomic_op ffff88807053a218 conn xmit_atomic 0000000000000000 [ 1620.339221][T23320] hsr0: entered allmulticast mode [ 1620.339246][T23320] hsr_slave_0: entered allmulticast mode [ 1620.339262][T23320] hsr_slave_1: entered allmulticast mode [ 1620.363178][T17313] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1620.384264][T23320] hsr_slave_0: left promiscuous mode [ 1620.423570][T23320] hsr_slave_1: left promiscuous mode [ 1620.556063][T23320] hsr0 (unregistering): left allmulticast mode [ 1620.556763][T17313] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1620.556792][T17313] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.603831][T17313] usb 10-1: config 0 descriptor?? [ 1620.608270][T17313] cp210x 10-1:0.0: cp210x converter detected [ 1620.749542][T23327] binder: 23326:23327 ioctl c0306201 200000000300 returned -22 [ 1621.018059][T17313] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1621.038407][T17313] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1621.084628][T18001] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1621.236389][ T5822] usb 10-1: USB disconnect, device number 6 [ 1621.252798][T18001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1621.252835][T18001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.252877][T18001] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1621.252901][T18001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.285636][T18001] usb 6-1: config 0 descriptor?? [ 1621.286438][ T5822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1621.424195][ T5822] cp210x 10-1:0.0: device disconnected [ 1621.724237][T18001] hid_parser_main: 5 callbacks suppressed [ 1621.724265][T18001] cm6533_jd 0003:0D8C:0022.002F: unknown main item tag 0x0 [ 1621.724400][T18001] cm6533_jd 0003:0D8C:0022.002F: unknown main item tag 0x0 [ 1621.729598][T18001] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.002F/input/input28 [ 1621.776052][T18001] cm6533_jd 0003:0D8C:0022.002F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 1621.998111][ T5893] usb 6-1: USB disconnect, device number 30 [ 1622.569538][T23362] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6542'. [ 1622.569573][T23362] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6542'. [ 1622.609662][T23362] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6542'. [ 1622.609694][T23362] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6542'. [ 1623.999438][T23391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1624.223481][T23381] uprobe: syz.3.6551:23381 failed to unregister, leaking uprobe [ 1624.316031][ T5818] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1624.691779][T23401] sock: sock_timestamping_bind_phc: sock not bind to device [ 1625.053535][T23132] Process accounting resumed [ 1625.468226][T23426] netlink: 'syz.3.6568': attribute type 4 has an invalid length. [ 1625.468253][T23426] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6568'. [ 1627.541010][T23462] all (unregistering): Released all slaves [ 1628.033800][T23482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6591'. [ 1628.593520][T17313] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1628.633538][T18001] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1628.783703][T18001] usb 8-1: Using ep0 maxpacket: 8 [ 1628.786111][T18001] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1628.786142][T18001] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.789564][T17313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.789597][T17313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.789623][T17313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1628.789668][T17313] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1628.789694][T17313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.795381][T18001] usb 8-1: config 0 descriptor?? [ 1628.885639][T17313] usb 4-1: config 0 descriptor?? [ 1629.069884][T18001] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1629.343609][T17313] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1630.113266][T18001] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1630.113300][T18001] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1630.113593][T18001] asix 8-1:0.0: probe with driver asix failed with error -71 [ 1630.167404][T18001] usb 8-1: USB disconnect, device number 36 [ 1631.618073][T23175] usb 4-1: USB disconnect, device number 16 [ 1632.022530][T23546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1632.054548][T23565] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1632.434456][ T5822] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 1633.095971][ T5822] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1633.096585][ T5822] usb 8-1: not running at top speed; connect to a high speed hub [ 1633.097855][ T5822] usb 8-1: config 17 has an invalid interface number: 8 but max is 1 [ 1633.097881][ T5822] usb 8-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1633.097905][ T5822] usb 8-1: config 17 has no interface number 0 [ 1633.097971][ T5822] usb 8-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 12080, setting to 64 [ 1633.097998][ T5822] usb 8-1: config 17 interface 8 has no altsetting 0 [ 1633.100707][ T5822] usb 8-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1633.100735][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.100757][ T5822] usb 8-1: Product: syz [ 1633.100773][ T5822] usb 8-1: Manufacturer: syz [ 1633.100790][ T5822] usb 8-1: SerialNumber: syz [ 1633.196666][T23569] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1633.430825][ T5822] usb 8-1: selecting invalid altsetting 0 [ 1633.436599][T23589] netlink: 'syz.3.6635': attribute type 7 has an invalid length. [ 1633.436625][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6635'. [ 1633.653222][ T5822] usb 8-1: USB disconnect, device number 37 [ 1634.985047][T23616] binder: 23615:23616 ioctl c0306201 200000000480 returned -14 [ 1635.423426][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 1635.423445][ T37] audit: type=1326 audit(2000001388.277:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23628 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1635.423497][ T37] audit: type=1326 audit(2000001388.287:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23628 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1635.427257][ T37] audit: type=1326 audit(2000001388.287:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23628 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1635.427307][ T37] audit: type=1326 audit(2000001388.287:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23628 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1635.427346][ T37] audit: type=1326 audit(2000001388.287:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23628 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1635.427382][ T37] audit: type=1326 audit(2000001388.287:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23628 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1635.540122][ T37] audit: type=1326 audit(2000001388.357:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23628 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1635.542209][ T37] audit: type=1326 audit(2000001388.397:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23628 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1635.562604][ T37] audit: type=1326 audit(2000001388.417:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23628 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1635.564710][ T37] audit: type=1326 audit(2000001388.427:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23628 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5072c6efc9 code=0x7ffc0000 [ 1636.005699][T23646] netlink: 'syz.3.6659': attribute type 1 has an invalid length. [ 1636.005728][T23646] netlink: 'syz.3.6659': attribute type 4 has an invalid length. [ 1636.005744][T23646] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.6659'. [ 1638.213713][ T5893] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1638.365639][ T5893] usb 10-1: Using ep0 maxpacket: 8 [ 1638.368681][ T5893] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.368715][ T5893] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.368739][ T5893] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1638.368786][ T5893] usb 10-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1638.368810][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.456832][ T5893] usb 10-1: config 0 descriptor?? [ 1638.703363][ T5822] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1638.870448][ T5822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.870476][ T5822] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1638.930809][ T5822] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1638.930842][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.930873][ T5822] usb 4-1: Product: syz [ 1638.930889][ T5822] usb 4-1: Manufacturer: syz [ 1638.930903][ T5822] usb 4-1: SerialNumber: syz [ 1639.115420][ T5893] hid-rmi 0003:06CB:81A7.0031: unknown main item tag 0x0 [ 1639.115457][ T5893] hid-rmi 0003:06CB:81A7.0031: unknown main item tag 0x0 [ 1639.115487][ T5893] hid-rmi 0003:06CB:81A7.0031: unknown main item tag 0x0 [ 1639.115511][ T5893] hid-rmi 0003:06CB:81A7.0031: unknown main item tag 0x0 [ 1639.115536][ T5893] hid-rmi 0003:06CB:81A7.0031: unknown main item tag 0x0 [ 1639.115561][ T5893] hid-rmi 0003:06CB:81A7.0031: unknown main item tag 0x0 [ 1639.115589][ T5893] hid-rmi 0003:06CB:81A7.0031: unknown main item tag 0x0 [ 1639.115618][ T5893] hid-rmi 0003:06CB:81A7.0031: unknown main item tag 0x0 [ 1639.201985][ T5893] hid-rmi 0003:06CB:81A7.0031: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.9-1/input0 [ 1639.572722][ T5822] usb 4-1: 0:2 : does not exist [ 1639.989983][ T44] usb 10-1: USB disconnect, device number 7 [ 1640.112539][ T5822] usb 4-1: USB disconnect, device number 17 [ 1640.536088][T17333] Bluetooth: hci4: SCO packet too small [ 1642.163486][T23175] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1642.323500][T23175] usb 6-1: Using ep0 maxpacket: 32 [ 1642.327343][T23175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.327379][T23175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.327420][T23175] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1642.327447][T23175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.399121][T23175] usb 6-1: config 0 descriptor?? [ 1642.410586][T23175] hub 6-1:0.0: USB hub found [ 1642.413200][ T1232] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1642.587138][ T1232] usb 10-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1642.587175][ T1232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.634913][ T1232] usb 10-1: config 0 descriptor?? [ 1642.668108][T23175] hub 6-1:0.0: 1 port detected [ 1642.669057][ T1232] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1642.872930][ T1232] gspca_spca508: reg_read err -32 [ 1642.894809][ T1232] gspca_spca508: reg_read err -32 [ 1642.895852][ T1232] gspca_spca508: reg_read err -32 [ 1642.905268][ T1232] gspca_spca508: reg_read err -32 [ 1642.923895][ T1232] gspca_spca508: reg_read err -32 [ 1643.143813][ T1232] gspca_spca508: reg write: error -71 [ 1643.143914][ T1232] spca508 10-1:0.0: probe with driver spca508 failed with error -71 [ 1643.213311][ T1232] usb 10-1: USB disconnect, device number 8 [ 1643.298380][T23175] hub 6-1:0.0: activate --> -90 [ 1643.733243][T23175] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 1643.779692][T23175] usb 6-1: Failed to suspend device, error -71 [ 1643.780445][T23175] usb 6-1: USB disconnect, device number 31 [ 1644.777123][ T44] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1645.016780][ T44] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1645.016817][ T44] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.019648][ T44] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1645.019679][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.019700][ T44] usb 10-1: Product: syz [ 1645.019717][ T44] usb 10-1: Manufacturer: syz [ 1645.019731][ T44] usb 10-1: SerialNumber: syz [ 1645.325123][T23820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1645.973135][T23175] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1646.098714][ T44] cdc_ncm 10-1:1.0: SET_NTB_FORMAT failed [ 1646.118141][ T44] cdc_ncm 10-1:1.0: bind() failure [ 1646.129003][T23175] usb 4-1: Using ep0 maxpacket: 8 [ 1646.135944][ T44] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1646.136000][ T44] cdc_ncm 10-1:1.1: bind() failure [ 1646.159066][T23175] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1646.159099][T23175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.159123][T23175] usb 4-1: Product: syz [ 1646.159142][T23175] usb 4-1: Manufacturer: syz [ 1646.159158][T23175] usb 4-1: SerialNumber: syz [ 1646.197272][ T44] usb 10-1: USB disconnect, device number 9 [ 1646.205602][T23829] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1646.220480][T23175] usb 4-1: config 0 descriptor?? [ 1646.426171][T23175] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1647.048316][T23175] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1647.052691][T23175] usb 4-1: USB disconnect, device number 18 [ 1647.343125][T17313] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1647.514506][T17313] usb 6-1: Using ep0 maxpacket: 32 [ 1647.550023][T17313] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1647.550055][T17313] usb 6-1: config 0 has no interface number 0 [ 1647.594111][T17313] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1647.594145][T17313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.594168][T17313] usb 6-1: Product: syz [ 1647.594184][T17313] usb 6-1: Manufacturer: syz [ 1647.594201][T17313] usb 6-1: SerialNumber: syz [ 1647.636492][T17313] usb 6-1: config 0 descriptor?? [ 1647.648775][T17313] smsc95xx v2.0.0 [ 1647.772562][T23853] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6739'. [ 1648.363604][T18001] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1648.543359][T18001] usb 4-1: Using ep0 maxpacket: 32 [ 1648.612474][T18001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.612512][T18001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.640924][T18001] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1648.641017][T18001] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1648.641113][T18001] usb 4-1: Manufacturer: syz [ 1648.723783][T17313] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1648.727450][T18001] usb 4-1: config 0 descriptor?? [ 1648.927788][T17313] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1648.928077][T17313] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1648.968064][T17313] usb 6-1: USB disconnect, device number 32 [ 1649.474326][T18001] ft260 0003:0403:6030.0032: unknown main item tag 0x7 [ 1649.662625][T18001] ft260 0003:0403:6030.0032: chip code: 6424 8183 [ 1649.773454][T17313] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1649.863877][T18001] ft260 0003:0403:6030.0032: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1649.923486][T17313] usb 10-1: Using ep0 maxpacket: 16 [ 1649.926695][T17313] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.926727][T17313] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.926753][T17313] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1649.926799][T17313] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1649.926823][T17313] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.274750][T18001] ft260 0003:0403:6030.0032: failed to retrieve status: -32 [ 1650.278702][T17313] usb 10-1: config 0 descriptor?? [ 1650.577016][T18001] usb 4-1: USB disconnect, device number 19 [ 1650.689583][T17313] input: HID 05ac:8241 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:8241.0033/input/input30 [ 1650.776331][T17313] appleir 0003:05AC:8241.0033: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 1650.942593][T18001] usb 10-1: USB disconnect, device number 10 [ 1651.222770][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1651.222792][ T37] audit: type=1326 audit(2000001404.077:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23880 comm="syz.7.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84f87efc9 code=0x7fc00000 [ 1651.986265][ T37] audit: type=1326 audit(2000001404.847:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23880 comm="syz.7.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd84f81b099 code=0x7fc00000 [ 1651.987822][ T37] audit: type=1326 audit(2000001404.847:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23880 comm="syz.7.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd84f81b15f code=0x7fc00000 [ 1651.991606][ T37] audit: type=1326 audit(2000001404.847:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23880 comm="syz.7.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd84f87efc9 code=0x7fc00000 [ 1652.543679][T23904] block nbd5: shutting down sockets [ 1654.096658][T17313] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1654.244895][T17313] usb 10-1: Using ep0 maxpacket: 16 [ 1654.245935][T17313] usb 10-1: too many configurations: 123, using maximum allowed: 8 [ 1654.251502][T17313] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.252938][T17313] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.294865][T17313] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.297946][T17313] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.299890][T17313] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.301349][T17313] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.302789][T17313] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.361429][T17313] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.375156][T17313] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1654.375190][T17313] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1654.375213][T17313] usb 10-1: SerialNumber: syz [ 1654.408405][T17313] usb 10-1: config 0 descriptor?? [ 1654.428393][T17313] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input31 [ 1654.543233][T22932] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1654.677072][T23942] input: syz1 as /devices/virtual/input/input32 [ 1654.753242][T22932] usb 8-1: Using ep0 maxpacket: 32 [ 1654.766094][ T5154] bcm5974 10-1:0.0: could not read from device [ 1654.772471][T22932] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1654.772513][T22932] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1654.772562][T22932] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1654.772591][T22932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.824568][T22932] usb 8-1: config 0 descriptor?? [ 1654.837528][T22932] hub 8-1:0.0: USB hub found [ 1654.903773][T17313] usb 10-1: USB disconnect, device number 11 [ 1655.056644][T22932] hub 8-1:0.0: 1 port detected [ 1655.653889][ T44] hub 8-1:0.0: activate --> -90 [ 1656.073368][T17313] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1656.102005][ T44] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 1656.110314][ T44] usb 8-1: Failed to suspend device, error -71 [ 1656.133567][T23175] usb 8-1: USB disconnect, device number 38 [ 1656.281388][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.439429][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.495540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.788190][T17313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.788227][T17313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.788269][T17313] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1656.788293][T17313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.806776][T17313] usb 4-1: config 0 descriptor?? [ 1659.161296][T17313] usbhid 4-1:0.0: can't add hid device: -71 [ 1659.161437][T17313] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1659.167193][T17313] usb 4-1: USB disconnect, device number 20 [ 1659.776469][ C1] vkms_vblank_simulate: vblank timer overrun [ 1659.998643][T24035] netlink: 'syz.7.6810': attribute type 10 has an invalid length. [ 1659.998667][T24035] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6810'. [ 1660.202025][T24035] team0: Port device geneve0 added [ 1660.393295][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.705482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.738060][T24046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6813'. [ 1662.824315][T24078] overlayfs: failed to clone upperpath [ 1664.436769][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.623531][T24100] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6833'. [ 1667.533151][T23175] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1667.683175][T23175] usb 10-1: Using ep0 maxpacket: 16 [ 1667.686156][T23175] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 1667.686193][T23175] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1667.686230][T23175] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1667.686255][T23175] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.713197][T23175] usb 10-1: config 0 descriptor?? [ 1667.949982][T24134] sctp: [Deprecated]: syz.6.6843 (pid 24134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1667.949982][T24134] Use struct sctp_sack_info instead [ 1668.177452][T23175] hid (null): global environment stack underflow [ 1668.177506][T23175] hid (null): unknown global tag 0xd [ 1668.177525][T23175] hid (null): unknown global tag 0x86 [ 1668.181262][T23175] hid (null): report_id 0 is invalid [ 1668.181296][T23175] hid (null): unknown global tag 0xbe [ 1668.181314][T23175] hid (null): unknown global tag 0xc [ 1668.181382][T23175] hid (null): global environment stack overflow [ 1668.181397][T23175] hid (null): invalid report_count 2090455279 [ 1668.181416][T23175] hid (null): invalid report_count 1056960005 [ 1668.181434][T23175] hid (null): unknown global tag 0xc [ 1668.181451][T23175] hid (null): invalid report_size 39841 [ 1668.181500][T23175] hid (null): unknown global tag 0xc [ 1668.189533][T23175] hid (null): invalid report_size 249916996 [ 1668.432046][T23175] usb 10-1: USB disconnect, device number 12 [ 1668.767967][T24147] syzkaller0: entered promiscuous mode [ 1668.768007][T24147] syzkaller0: entered allmulticast mode [ 1669.281673][T24159] kvm: pic: non byte read [ 1669.281977][T24159] kvm: pic: non byte read [ 1669.289224][T24159] kvm: pic: level sensitive irq not supported [ 1669.289312][T24159] kvm: pic: non byte read [ 1669.289609][T24159] kvm: pic: non byte read [ 1669.289884][T24159] kvm: pic: non byte read [ 1669.290171][T24159] kvm: pic: non byte read [ 1669.428570][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.976437][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6860'. [ 1670.145919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1671.087940][ C1] vkms_vblank_simulate: vblank timer overrun [ 1671.223271][ C1] vkms_vblank_simulate: vblank timer overrun [ 1671.564528][ C1] vkms_vblank_simulate: vblank timer overrun [ 1672.477454][ C1] vkms_vblank_simulate: vblank timer overrun [ 1672.685590][ C1] vkms_vblank_simulate: vblank timer overrun [ 1672.781278][T24193] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6864'. [ 1672.781310][T24193] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6864'. [ 1672.970784][ C1] vkms_vblank_simulate: vblank timer overrun [ 1674.051619][T24210] overlayfs: failed to clone upperpath [ 1676.465355][T24231] vxfs: unable to read disk superblock at 1 [ 1676.466121][T24231] vxfs: unable to read disk superblock at 8 [ 1676.466141][T24231] vxfs: can't find superblock. [ 1677.106360][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 1679.530579][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1685.880628][T24284] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1687.090157][T24298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6896'. [ 1689.551683][ T37] audit: type=1326 audit(2000001442.407:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24319 comm="syz.7.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84f87efc9 code=0x7ffc0000 [ 1689.589984][ T37] audit: type=1326 audit(2000001442.447:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24319 comm="syz.7.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84f87efc9 code=0x7ffc0000 [ 1689.590030][ T37] audit: type=1326 audit(2000001442.447:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24319 comm="syz.7.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84f87efc9 code=0x7ffc0000 [ 1689.590065][ T37] audit: type=1326 audit(2000001442.447:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24319 comm="syz.7.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd84f87efc9 code=0x7ffc0000 [ 1689.590101][ T37] audit: type=1326 audit(2000001442.447:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24319 comm="syz.7.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84f87efc9 code=0x7ffc0000 [ 1689.590135][ T37] audit: type=1326 audit(2000001442.447:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24319 comm="syz.7.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84f87efc9 code=0x7ffc0000 [ 1689.590169][ T37] audit: type=1326 audit(2000001442.447:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24319 comm="syz.7.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84f87efc9 code=0x7ffc0000 [ 1689.590203][ T37] audit: type=1326 audit(2000001442.447:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24319 comm="syz.7.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84f87efc9 code=0x7ffc0000 [ 1689.794732][ T37] audit: type=1326 audit(2000001442.657:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24319 comm="syz.7.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd84f87efc9 code=0x7ffc0000 [ 1689.794792][ T37] audit: type=1326 audit(2000001442.657:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24319 comm="syz.7.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84f87efc9 code=0x7ffc0000 [ 1691.725893][ T1232] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1691.931354][ T1232] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1691.931386][ T1232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.931408][ T1232] usb 10-1: Product: syz [ 1691.931424][ T1232] usb 10-1: Manufacturer: syz [ 1691.931441][ T1232] usb 10-1: SerialNumber: syz [ 1693.736464][T17333] Bluetooth: hci5: unexpected event for opcode 0x004e [ 1696.418288][ T1232] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1696.418349][ T1232] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1696.419057][ T1232] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1696.574779][ T1232] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1696.667827][ T1232] usb 10-1: USB disconnect, device number 13 [ 1696.875081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1697.282538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1697.870541][T24363] Bluetooth: hci2: command 0x0406 tx timeout [ 1698.377815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1700.252727][T24393] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1701.884588][T24402] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6925'. [ 1706.861190][T24424] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6932'. [ 1708.791989][T24434] sctp: [Deprecated]: syz.7.6935 (pid 24434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1708.791989][T24434] Use struct sctp_sack_info instead [ 1713.881606][T24462] netlink: 'syz.7.6942': attribute type 12 has an invalid length. [ 1715.121902][T24363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1715.151650][T24363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1715.162385][T24363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1715.176031][T24363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1715.177848][T24363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1715.240588][T24473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6945'. [ 1715.409261][T24478] fuse: root generation should be zero [ 1715.813165][ T1232] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1717.025423][ T1232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.025453][ T1232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1717.027602][ T1232] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1717.027633][ T1232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1717.027655][ T1232] usb 4-1: SerialNumber: syz [ 1718.131030][T24363] Bluetooth: hci0: command tx timeout [ 1718.132559][T24363] Bluetooth: hci3: command 0x0406 tx timeout [ 1718.239429][ T1232] usb 4-1: 0:2 : does not exist [ 1718.239548][ T1232] usb 4-1: unit 255 not found! [ 1718.304294][ T1232] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1718.411491][ T1232] usb 4-1: 5:0: cannot get min/max values for control 6 (id 5) [ 1718.444563][ T1232] usb 4-1: 5:0: cannot get min/max values for control 7 (id 5) [ 1718.788765][ T1232] usb 4-1: USB disconnect, device number 21 [ 1719.943551][T24470] chnl_net:caif_netlink_parms(): no params data found [ 1720.153552][T17333] Bluetooth: hci0: command tx timeout [ 1720.640255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.726168][ C1] vkms_vblank_simulate: vblank timer overrun [ 1721.440510][ C1] vkms_vblank_simulate: vblank timer overrun [ 1721.820738][ C1] vkms_vblank_simulate: vblank timer overrun [ 1721.837384][ T37] kauditd_printk_skb: 64 callbacks suppressed [ 1721.837405][ T37] audit: type=1804 audit(2000001474.677:688): pid=24529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.6959" name="file0" dev="tmpfs" ino=2358 res=1 errno=0 [ 1722.325771][ C1] vkms_vblank_simulate: vblank timer overrun [ 1722.342193][ T5818] Bluetooth: hci0: command tx timeout [ 1722.402911][T24523] uprobe: syz.5.6959:24523 failed to unregister, leaking uprobe [ 1722.557167][T24470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.557387][T24470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.557719][T24470] bridge_slave_0: entered allmulticast mode [ 1722.668591][ C1] vkms_vblank_simulate: vblank timer overrun [ 1722.820513][ C1] vkms_vblank_simulate: vblank timer overrun [ 1723.540822][T24470] bridge_slave_0: entered promiscuous mode [ 1723.547179][T24470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1723.547394][T24470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.547630][T24470] bridge_slave_1: entered allmulticast mode [ 1723.550303][T24470] bridge_slave_1: entered promiscuous mode [ 1723.619773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1723.776578][T17983] page_pool_release_retry() stalled pool shutdown: id 240, 1 inflight 61 sec [ 1723.803148][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 1723.927051][ C1] vkms_vblank_simulate: vblank timer overrun [ 1724.347114][ C1] vkms_vblank_simulate: vblank timer overrun [ 1724.373461][ C1] vkms_vblank_simulate: vblank timer overrun [ 1724.714282][ T5818] Bluetooth: hci0: command tx timeout [ 1729.087735][T24470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.092781][T24470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.542513][T24584] Bluetooth: MGMT ver 1.23 [ 1731.590145][ C1] vkms_vblank_simulate: vblank timer overrun [ 1731.846044][ C1] vkms_vblank_simulate: vblank timer overrun [ 1732.840854][T24470] team0: Port device team_slave_0 added [ 1732.867169][T24470] team0: Port device team_slave_1 added [ 1735.960277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.083427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.105476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.157609][ C1] vkms_vblank_simulate: vblank timer overrun [ 1738.672423][T24470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1738.672442][T24470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1738.672473][T24470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1738.867329][T24470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1738.867356][T24470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1738.867385][T24470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.063562][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1741.238874][T14436] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 1741.239359][T14436] ref_tracker: netdev@ffff88803003a690 has 1/1 users at [ 1741.239359][T14436] batadv_hard_if_event+0xf0f/0x1740 [ 1741.239359][T14436] notifier_call_chain+0x1b6/0x3e0 [ 1741.239359][T14436] register_netdevice+0x163c/0x1b10 [ 1741.239359][T14436] veth_newlink+0x5d4/0xa60 [ 1741.239359][T14436] rtnl_newlink_create+0x310/0xb00 [ 1741.239359][T14436] rtnl_newlink+0x16e4/0x1c80 [ 1741.239359][T14436] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1741.239359][T14436] netlink_rcv_skb+0x208/0x470 [ 1741.239359][T14436] netlink_unicast+0x846/0xa10 [ 1741.239359][T14436] netlink_sendmsg+0x805/0xb30 [ 1741.239359][T14436] __sock_sendmsg+0x21c/0x270 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1741.239359][T14436] __sys_sendto+0x3c7/0x520 [ 1741.239359][T14436] __x64_sys_sendto+0xde/0x100 [ 1741.239359][T14436] do_syscall_64+0xfa/0xfa0 [ 1741.239359][T14436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.239359][T14436] [ 1741.352169][T24470] hsr_slave_0: entered promiscuous mode [ 1741.467417][T24470] hsr_slave_1: entered promiscuous mode [ 1741.474768][T24470] debugfs: 'hsr0' already exists in 'hsr' [ 1741.474814][T24470] Cannot create hsr debugfs directory