last executing test programs: 22.05158565s ago: executing program 4 (id=1042): openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 19.978737756s ago: executing program 0 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r5) write$ppp(0xffffffffffffffff, 0x0, 0x0) 18.517057132s ago: executing program 1 (id=1050): socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) sched_setscheduler(0x0, 0x2, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) 17.120661893s ago: executing program 1 (id=1052): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x114, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x80, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x24, 0x2, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x158}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15.900017303s ago: executing program 0 (id=1054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0xa0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, 0x464, 0x200, 0x70bd2b, 0x25dfdbfb, "e00c60b0eda60303bde13d74dddde18f4891bf814cba793c20523011c3b0d09b8f5364ca2a3e437fb31cb874b90d7e5d64057768d1273e2898c77a5f89a710db509980b95e92b332700f00d412c9008cfcebfde4e22932ee834b2f4175e7ee8573584cda1cbf0d8ee33018e75d0408f48fb83ce4c2ed3e7fd6369089be4273d029d3d6760b6b1a91fe93", ["", "", ""]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000140)=""/170, &(0x7f0000000200)=0xaa) socket$alg(0x26, 0x5, 0x0) 15.620454824s ago: executing program 1 (id=1057): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xffbf) 15.124334673s ago: executing program 0 (id=1060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 12.821124849s ago: executing program 4 (id=1063): prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000003c0)=""/159, &(0x7f0000000300)=0x9f) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bca) setrlimit(0x0, &(0x7f0000000000)={0x6, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x8000, 0x4) connect$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000700080d00000000000000", @ANYRES32=0x0, @ANYBLOB="0b850000000000002c00128008000100677470002000028005000500010000001400080020010000000000000000000000000002"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x2c000004) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}}, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000060008000500000002200000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000789f3bf0b0f9d2df5600090095545d71dc6f0b6ed5f83e24da9f5e290e9a9510d913f36fa8758b9f9b38e489d06c36b191a654c35c2bcafc125e30060e9f470e29c2debfd7c67ed494ed869bc4e6c4ad04447b54373fad7edcbe40c09081a5af54c5bbddcf810697054c8fd47b79994c228c19ca793287e4b96ce1a200bf853d365726054aee1eec018a1050fd345bdb0e23aab5b495f6969318660b6711420018bd45a474e318bee2580d542f6d261c26a7a37db180f3bcb240f9985cbe4edaa9340ac40dc0"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) 12.810280066s ago: executing program 1 (id=1064): socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) 11.502580905s ago: executing program 1 (id=1068): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x38, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 11.416985556s ago: executing program 0 (id=1071): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="ab0afcd235388da8596affbe3db889f3c6fc4eaf82168b3f72c81691bc66785b6c528172", 0x24}, {&(0x7f0000000280)="9699901e28241dcaa7f5fb6ab6ab33d94c889890d748eebd0c20b7913bfdd56e32e7742876e45778c243198a4e2e688cf5aa5bbdcc7ddceabcce436e0d763d7e0854c2568840b07e9e2fe100048ae11f2e5ec2841625e5b2906ee4e4ad625c90ab6cebe2c5b2d3825e3e0be2a8a6d171c39dcbd89acb732d4bf6b4571344dfff", 0x80}, {&(0x7f0000000300)="e83bc4a556d71f44ba70f8d71d7b80b215f00b86749e87b0d2496a83379e7f0dd4e086dab0b9bede62be28608ad71c80e3ae38559c70a9f859e51181f69778776583e2059e09445900b4a1aee8e7cbd99745d0ecd482dca556f8dd7973d443a5a72eefc7bc0ae82ee1b706dcbd623fc13d0d0c961e70903cda3882005d3f66c9a4b59984524081be93e1f08358d1928aa0f0c05f3b1b37a0038c431ccf9772ee5bd561c468c91d30ec3802fb15a8b182efd737bccc62da", 0xb7}, {&(0x7f00000004c0)="cbf112190657eb676dcdd7fe41bd7ccb314b200e1482a1c4fc329f4152f84e9dd16c5173eeb43e8a1f4af860972f91b2607da26382011f5f236d755a178c91d58f26129088422edd69c8510c49be560ebab048432c44cd73afc2e3477f77f6add063962cfb18feec5606a6d2d2a79f2b05907463042de305fed3e1da822fe93d3a5474", 0x83}, {&(0x7f0000000140)="b6a25e9783f44f17a691e1417a243fd2375f0f3c877a7222b2ff66bf81ebd93664222f3027233a0d2c550003ea", 0x2d}, {&(0x7f0000000580)="097647d70e8eb61d9c0101dfcbcc94ba4ad4589bd1784bcb2faa9f159763e05858957532c85b5ada5cfe41aaba299f671c16810c0ead0ba644fdfe7c95229a8f4e260fe1e913d4190221718fa46e12b1412c8fc1af935e29a4f89a573185e21ce8a7cde5294350c22fae2eb2e2ba9f32abc6e1c7d9953cbdaffad1aab9d90c7e8c8778dc561817296b8e87ceaf8ad8aa7803b69b2fb973a2dabf3e1c1bbdec450eacba54852050b7cccd4b38b89d0583cc0e232e6112287f7b818ff092f4ef7f2e24d1089715b7b6540287963be04ee6f395d981321fe564d7900fab1711a16fc782168be279a8a62beb70e1838edc28", 0xf0}], 0x6}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000700)="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", 0xc9e}, {0x0}], 0x2, 0x0, 0x0, 0x20044810}}], 0x2, 0x8004) 9.96257004s ago: executing program 0 (id=1075): openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 8.242335455s ago: executing program 3 (id=1080): socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) 7.937292942s ago: executing program 5 (id=1082): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000002400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000300), 0x0}, 0x20) 6.939570596s ago: executing program 3 (id=1083): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0) 5.88130901s ago: executing program 2 (id=1084): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) 5.637724876s ago: executing program 5 (id=1085): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x6252, 0x0, &(0x7f0000000000), 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc, 0x0, r1}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x32d7, 0x0, 0x46, 0x0, 0x0) 5.616425029s ago: executing program 2 (id=1086): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 5.448931507s ago: executing program 3 (id=1087): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="ab0afcd235388da8596affbe3db889f3c6fc4eaf82168b3f72c81691bc66785b6c528172", 0x24}, {&(0x7f0000000280)="9699901e28241dcaa7f5fb6ab6ab33d94c889890d748eebd0c20b7913bfdd56e32e7742876e45778c243198a4e2e688cf5aa5bbdcc7ddceabcce436e0d763d7e0854c2568840b07e9e2fe100048ae11f2e5ec2841625e5b2906ee4e4ad625c90ab6cebe2c5b2d3825e3e0be2a8a6d171c39dcbd89acb732d4bf6b4571344dfff", 0x80}, {&(0x7f0000000300)="e83bc4a556d71f44ba70f8d71d7b80b215f00b86749e87b0d2496a83379e7f0dd4e086dab0b9bede62be28608ad71c80e3ae38559c70a9f859e51181f69778776583e2059e09445900b4a1aee8e7cbd99745d0ecd482dca556f8dd7973d443a5a72eefc7bc0ae82ee1b706dcbd623fc13d0d0c961e70903cda3882005d3f66c9a4b59984524081be93e1f08358d1928aa0f0c05f3b1b37a0038c431ccf9772ee5bd561c468c91d30ec3802fb15a8b182efd737bccc62da", 0xb7}, {&(0x7f00000004c0)="cbf112190657eb676dcdd7fe41bd7ccb314b200e1482a1c4fc329f4152f84e9dd16c5173eeb43e8a1f4af860972f91b2607da26382011f5f236d755a178c91d58f26129088422edd69c8510c49be560ebab048432c44cd73afc2e3477f77f6add063962cfb18feec5606a6d2d2a79f2b05907463042de305fed3e1da822fe93d3a5474", 0x83}, {&(0x7f0000000140)="b6a25e9783f44f17a691e1417a243fd2375f0f3c877a7222b2ff66bf81ebd93664222f3027233a0d2c550003ea", 0x2d}, {&(0x7f0000000580)="097647d70e8eb61d9c0101dfcbcc94ba4ad4589bd1784bcb2faa9f159763e05858957532c85b5ada5cfe41aaba299f671c16810c0ead0ba644fdfe7c95229a8f4e260fe1e913d4190221718fa46e12b1412c8fc1af935e29a4f89a573185e21ce8a7cde5294350c22fae2eb2e2ba9f32abc6e1c7d9953cbdaffad1aab9d90c7e8c8778dc561817296b8e87ceaf8ad8aa7803b69b2fb973a2dabf3e1c1bbdec450eacba54852050b7cccd4b38b89d0583cc0e232e6112287f7b818ff092f4ef7f2e24d1089715b7b6540287963be04ee6f395d981321fe564d7900fab1711a16fc782168be279a8a62beb70e1838edc28", 0xf0}], 0x6}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000700)="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", 0xcd2}, {0x0}], 0x2, 0x0, 0x0, 0x20044810}}], 0x2, 0x8004) 4.381281025s ago: executing program 2 (id=1088): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="1400000024000b47568013db354d1fae20cf0000", 0x14}], 0x1}, 0x44) 4.303420587s ago: executing program 5 (id=1089): madvise(&(0x7f0000dae000/0x2000)=nil, 0x2000, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000140)=0xffffffffffffffff, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x16) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) 4.300606132s ago: executing program 3 (id=1090): recvmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580), 0x100) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={0x18, 0x0, 0x81, {0xb6b2}}, 0x0, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0xff, {0x81}}, 0x0, &(0x7f0000000400)={0x60, 0x26, 0x2, {{0x2, 0x3, 0x9, 0x1, 0xc41, 0xfffffff6, 0x200, 0x4}}}, &(0x7f0000000480)={0x18, 0x0, 0x5}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x7, {0x2, 0x2, 0x194, 0x9, 0x5, 0xa, {0x1, 0x8, 0xe, 0x9, 0x7, 0x0, 0x1, 0x401, 0x0, 0x1000, 0xfffffffd, r2, r3, 0x1, 0x7ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) 4.083710725s ago: executing program 4 (id=1091): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$dri(0x0, 0x1f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 4.080582839s ago: executing program 2 (id=1092): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xffbf) 2.899492479s ago: executing program 4 (id=1093): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,u', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) umount2(0x0, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) creat(&(0x7f0000000000)='./bus\x00', 0x0) 2.80603024s ago: executing program 5 (id=1094): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='contention_end\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) 2.72117373s ago: executing program 3 (id=1095): io_uring_setup(0x5b24, &(0x7f00000003c0)={0x0, 0x2990, 0x10000, 0x2, 0x1fd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000440)=""/198) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24041, 0x0) io_setup(0x202, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = gettid() clock_nanosleep(0xb, 0x0, 0x0, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffe}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x90, &(0x7f0000000140)=""/144, 0x76, &(0x7f00000009c0)=""/118, 0x5d, &(0x7f0000000940)=""/93}) 2.589773536s ago: executing program 2 (id=1096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) cachestat(r2, &(0x7f0000000100)={0x1, 0xd}, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) 2.393968244s ago: executing program 5 (id=1097): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000002400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000300), 0x0}, 0x20) 2.043759227s ago: executing program 4 (id=1098): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) 986.253391ms ago: executing program 2 (id=1099): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0) 985.415266ms ago: executing program 0 (id=1100): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="2d100000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x480, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYBLOB="0100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000010000000000000000181200007add4dfe3f6fc7b5a371fd2d0591ae6dc487665d7b97bb08be0cbfaf73ee51dd6d932b87bc74da2d824db5f8ce657387eb73549713c4a8c4fcccc47397cc1c87d2ba80afd9db68f54c3c4839e555c314af98bbc7fbce289c51b53d5c54b98324247ba9416666c717866e6cf8960fbcc2469bfc8819eb2499d0c6ada3360414a6d2532db9e897b74c54165a0071fb6924346e9d50e45c114d6ad8ef48321a1154920e0a30b955b9d1d18be125951b", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r10 = socket(0x1d, 0x2, 0x6) r11 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r11, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf25000000006c5cfe3288fd41c31803c0dc601512940e89a3f3fe3746d53c80b6aa4f8f58684fa94467138298c7656ec6793add85faee1d2a9d5548d3e1fce2ec340699f369502448a83e10cfe0a90bf298c424819767a8f2ff61604c3e5b18de297cafeac526aa3f4e77e01421a2d24607dd46cd1b2a598b4ddcfc175c644eef733e3136e57930d1b8cf49567cff9132c3d99df78f70058c41a997027a6c0286d24cd3e3", @ANYRES32=r9, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20015810}, 0x0) socket$netlink(0x10, 0x3, 0x0) 980.026282ms ago: executing program 4 (id=1101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x10, 0x9, 0x40, 0xd3c25e1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa}, {0xd}, {0x1, 0x3d}}}, 0x24}}, 0x40) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) writev(r7, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) shutdown(r7, 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) 907.449207ms ago: executing program 3 (id=1102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="ab0afcd235388da8596affbe3db889f3c6fc4eaf82168b3f72c81691bc66785b6c528172", 0x24}, {&(0x7f0000000280)="9699901e28241dcaa7f5fb6ab6ab33d94c889890d748eebd0c20b7913bfdd56e32e7742876e45778c243198a4e2e688cf5aa5bbdcc7ddceabcce436e0d763d7e0854c2568840b07e9e2fe100048ae11f2e5ec2841625e5b2906ee4e4ad625c90ab6cebe2c5b2d3825e3e0be2a8a6d171c39dcbd89acb732d4bf6b4571344dfff", 0x80}, {&(0x7f0000000300)="e83bc4a556d71f44ba70f8d71d7b80b215f00b86749e87b0d2496a83379e7f0dd4e086dab0b9bede62be28608ad71c80e3ae38559c70a9f859e51181f69778776583e2059e09445900b4a1aee8e7cbd99745d0ecd482dca556f8dd7973d443a5a72eefc7bc0ae82ee1b706dcbd623fc13d0d0c961e70903cda3882005d3f66c9a4b59984524081be93e1f08358d1928aa0f0c05f3b1b37a0038c431ccf9772ee5bd561c468c91d30ec3802fb15a8b182efd737bccc62da", 0xb7}, {&(0x7f00000004c0)="cbf112190657eb676dcdd7fe41bd7ccb314b200e1482a1c4fc329f4152f84e9dd16c5173eeb43e8a1f4af860972f91b2607da26382011f5f236d755a178c91d58f26129088422edd69c8510c49be560ebab048432c44cd73afc2e3477f77f6add063962cfb18feec5606a6d2d2a79f2b05907463042de305fed3e1da822fe93d3a5474", 0x83}, {&(0x7f0000000140)="b6a25e9783f44f17a691e1417a243fd2375f0f3c877a7222b2ff66bf81ebd93664222f3027233a0d2c550003ea", 0x2d}, {&(0x7f0000000580)="097647d70e8eb61d9c0101dfcbcc94ba4ad4589bd1784bcb2faa9f159763e05858957532c85b5ada5cfe41aaba299f671c16810c0ead0ba644fdfe7c95229a8f4e260fe1e913d4190221718fa46e12b1412c8fc1af935e29a4f89a573185e21ce8a7cde5294350c22fae2eb2e2ba9f32abc6e1c7d9953cbdaffad1aab9d90c7e8c8778dc561817296b8e87ceaf8ad8aa7803b69b2fb973a2dabf3e1c1bbdec450eacba54852050b7cccd4b38b89d0583cc0e232e6112287f7b818ff092f4ef7f2e24d1089715b7b6540287963be04ee6f395d981321fe564d7900fab1711a16fc782168be279a8a62beb70e1838edc28", 0xf0}], 0x6}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000700)="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", 0xcd2}, {0x0}], 0x2, 0x0, 0x0, 0x20044810}}], 0x2, 0x8004) 837.1925ms ago: executing program 5 (id=1103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bca) setrlimit(0x0, &(0x7f0000000000)={0x6, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x8000, 0x4) connect$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000700080d00000000000000", @ANYRES32=0x0, @ANYBLOB="0b850000000000002c00128008000100677470002000028005000500010000001400080020010000000000000000000000000002"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x2c000004) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}}, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000060008000500000002200000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000789f3bf0b0f9d2df5600090095545d71dc6f0b6ed5f83e24da9f5e290e9a9510d913f36fa8758b9f9b38e489d06c36b191a654c35c2bcafc125e30060e9f470e29c2debfd7c67ed494ed869bc4e6c4ad04447b54373fad7edcbe40c09081a5af54c5bbddcf810697054c8fd47b79994c228c19ca793287e4b96ce1a200bf853d365726054aee1eec018a1050fd345bdb0e23aab5b495f6969318660b6711420018bd45a474e318bee2580d542f6d261c26a7a37db180f3bcb240f9985cbe4edaa9340ac40dc0"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 1 (id=1104): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="1400000024000b47568013db354d1fae20cf0000", 0x14}], 0x1}, 0x44) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. [ 84.159146][ T5815] cgroup: Unknown subsys name 'net' [ 84.315552][ T5815] cgroup: Unknown subsys name 'cpuset' [ 84.324877][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.863745][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.967754][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.977129][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.984761][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.001203][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.009063][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.033497][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.050045][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.094740][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.103311][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.111659][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.119793][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.128277][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.135818][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.135988][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.151168][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.151844][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.160999][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.166638][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.172238][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.191089][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.191644][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.206193][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.206381][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.222797][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.222876][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.237964][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.240145][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.260992][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.269264][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.287088][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.672740][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.928119][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.935442][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.943008][ T5830] bridge_slave_0: entered allmulticast mode [ 89.951493][ T5830] bridge_slave_0: entered promiscuous mode [ 90.037361][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.044778][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.052251][ T5830] bridge_slave_1: entered allmulticast mode [ 90.059770][ T5830] bridge_slave_1: entered promiscuous mode [ 90.213444][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.257621][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.332226][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.458693][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 90.487905][ T5830] team0: Port device team_slave_0 added [ 90.551352][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.566921][ T5830] team0: Port device team_slave_1 added [ 90.673883][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.681000][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.707623][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.747941][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 90.769619][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.776663][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.803084][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.855791][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.863481][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.871322][ T5837] bridge_slave_0: entered allmulticast mode [ 90.878732][ T5837] bridge_slave_0: entered promiscuous mode [ 90.939218][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 90.952211][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.959750][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.967544][ T5837] bridge_slave_1: entered allmulticast mode [ 90.975335][ T5837] bridge_slave_1: entered promiscuous mode [ 91.081177][ T5839] Bluetooth: hci0: command tx timeout [ 91.107911][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.121934][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.131225][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.138715][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.146198][ T5844] bridge_slave_0: entered allmulticast mode [ 91.153796][ T5844] bridge_slave_0: entered promiscuous mode [ 91.163434][ T9] cfg80211: failed to load regulatory.db [ 91.200115][ T5830] hsr_slave_0: entered promiscuous mode [ 91.207524][ T5830] hsr_slave_1: entered promiscuous mode [ 91.240451][ T5839] Bluetooth: hci1: command tx timeout [ 91.295944][ T5837] team0: Port device team_slave_0 added [ 91.303089][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.310961][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.318094][ T5844] bridge_slave_1: entered allmulticast mode [ 91.321286][ T5839] Bluetooth: hci4: command tx timeout [ 91.324248][ T5149] Bluetooth: hci5: command tx timeout [ 91.334900][ T5847] Bluetooth: hci3: command tx timeout [ 91.335043][ T5839] Bluetooth: hci2: command tx timeout [ 91.342902][ T5844] bridge_slave_1: entered promiscuous mode [ 91.397248][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.404543][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.412763][ T5841] bridge_slave_0: entered allmulticast mode [ 91.420147][ T5841] bridge_slave_0: entered promiscuous mode [ 91.437770][ T5837] team0: Port device team_slave_1 added [ 91.459263][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.466599][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.473822][ T5829] bridge_slave_0: entered allmulticast mode [ 91.481632][ T5829] bridge_slave_0: entered promiscuous mode [ 91.510380][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.517498][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.525129][ T5841] bridge_slave_1: entered allmulticast mode [ 91.532573][ T5841] bridge_slave_1: entered promiscuous mode [ 91.590282][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.597447][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.604964][ T5829] bridge_slave_1: entered allmulticast mode [ 91.612862][ T5829] bridge_slave_1: entered promiscuous mode [ 91.677176][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.687650][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.713991][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.727382][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.734709][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.761552][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.776364][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.849347][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.885555][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.897995][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.910847][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.920104][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.927589][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.935228][ T5843] bridge_slave_0: entered allmulticast mode [ 91.942791][ T5843] bridge_slave_0: entered promiscuous mode [ 91.951481][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.958629][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.965989][ T5843] bridge_slave_1: entered allmulticast mode [ 91.974382][ T5843] bridge_slave_1: entered promiscuous mode [ 92.005983][ T5844] team0: Port device team_slave_0 added [ 92.015572][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.060150][ T5841] team0: Port device team_slave_0 added [ 92.083873][ T5844] team0: Port device team_slave_1 added [ 92.148440][ T5841] team0: Port device team_slave_1 added [ 92.170989][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.222282][ T5837] hsr_slave_0: entered promiscuous mode [ 92.228904][ T5837] hsr_slave_1: entered promiscuous mode [ 92.236192][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.244422][ T5837] Cannot create hsr debugfs directory [ 92.282023][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.315731][ T5829] team0: Port device team_slave_0 added [ 92.325486][ T5829] team0: Port device team_slave_1 added [ 92.346798][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.354526][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.380793][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.393400][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.400380][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.426496][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.498386][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.505867][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.532318][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.555093][ T5843] team0: Port device team_slave_0 added [ 92.563994][ T5843] team0: Port device team_slave_1 added [ 92.613553][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.620763][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.647708][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.706334][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.713389][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.739693][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.767247][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.774899][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.801298][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.835093][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.843961][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.870879][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.889176][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.896966][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.925275][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.018314][ T5841] hsr_slave_0: entered promiscuous mode [ 93.025125][ T5841] hsr_slave_1: entered promiscuous mode [ 93.032919][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.040642][ T5841] Cannot create hsr debugfs directory [ 93.113089][ T5844] hsr_slave_0: entered promiscuous mode [ 93.119610][ T5844] hsr_slave_1: entered promiscuous mode [ 93.126910][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.134891][ T5844] Cannot create hsr debugfs directory [ 93.160742][ T5839] Bluetooth: hci0: command tx timeout [ 93.244418][ T5843] hsr_slave_0: entered promiscuous mode [ 93.251801][ T5843] hsr_slave_1: entered promiscuous mode [ 93.257994][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.265648][ T5843] Cannot create hsr debugfs directory [ 93.320967][ T5839] Bluetooth: hci1: command tx timeout [ 93.337652][ T5829] hsr_slave_0: entered promiscuous mode [ 93.344689][ T5829] hsr_slave_1: entered promiscuous mode [ 93.351116][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.358684][ T5829] Cannot create hsr debugfs directory [ 93.400786][ T5149] Bluetooth: hci5: command tx timeout [ 93.406245][ T5149] Bluetooth: hci3: command tx timeout [ 93.410429][ T5839] Bluetooth: hci2: command tx timeout [ 93.411692][ T5836] Bluetooth: hci4: command tx timeout [ 93.519166][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.578364][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.591807][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.651503][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.886907][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.898575][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.946647][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.008984][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.102790][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.117511][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.129351][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.158041][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.247986][ T5841] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.286128][ T5841] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.320528][ T5841] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.331427][ T5841] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.403420][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.480746][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.495101][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.527365][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.544217][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.563934][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.571226][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.586722][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.613995][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.635977][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.643158][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.714197][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.728738][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.739797][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.782503][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.799198][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.827651][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.834832][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.879702][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.886907][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.966306][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.056095][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.100036][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.147202][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.154409][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.178503][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.185680][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.238342][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.246069][ T5836] Bluetooth: hci0: command tx timeout [ 95.371484][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.396820][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.403871][ T5836] Bluetooth: hci1: command tx timeout [ 95.455714][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.462973][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.481353][ T5836] Bluetooth: hci4: command tx timeout [ 95.482173][ T5847] Bluetooth: hci3: command tx timeout [ 95.486794][ T5836] Bluetooth: hci2: command tx timeout [ 95.498191][ T5836] Bluetooth: hci5: command tx timeout [ 95.498940][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.510779][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.534939][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.542132][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.564869][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.597015][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.604634][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.704245][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.726965][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.822818][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.854901][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.862133][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.946367][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.953598][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.242707][ T5837] veth0_vlan: entered promiscuous mode [ 96.293911][ T5837] veth1_vlan: entered promiscuous mode [ 96.460046][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.533037][ T5837] veth0_macvtap: entered promiscuous mode [ 96.615666][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.637773][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.647466][ T5837] veth1_macvtap: entered promiscuous mode [ 96.752774][ T5844] veth0_vlan: entered promiscuous mode [ 96.814885][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.826025][ T5844] veth1_vlan: entered promiscuous mode [ 96.862836][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.905801][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.918869][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.929173][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.938380][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.982573][ T5830] veth0_vlan: entered promiscuous mode [ 97.012728][ T5843] veth0_vlan: entered promiscuous mode [ 97.039892][ T5830] veth1_vlan: entered promiscuous mode [ 97.070183][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.117694][ T5843] veth1_vlan: entered promiscuous mode [ 97.177137][ T5844] veth0_macvtap: entered promiscuous mode [ 97.198844][ T5844] veth1_macvtap: entered promiscuous mode [ 97.261933][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.269850][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.308155][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.323966][ T5836] Bluetooth: hci0: command tx timeout [ 97.359075][ T5830] veth0_macvtap: entered promiscuous mode [ 97.376268][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.406651][ T5843] veth0_macvtap: entered promiscuous mode [ 97.423939][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.434293][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.443469][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.452600][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.468604][ T5829] veth0_vlan: entered promiscuous mode [ 97.475001][ T5830] veth1_macvtap: entered promiscuous mode [ 97.485533][ T5843] veth1_macvtap: entered promiscuous mode [ 97.491980][ T5836] Bluetooth: hci1: command tx timeout [ 97.495286][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.505970][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.540094][ T5829] veth1_vlan: entered promiscuous mode [ 97.561448][ T5836] Bluetooth: hci3: command tx timeout [ 97.562636][ T5839] Bluetooth: hci2: command tx timeout [ 97.566873][ T5836] Bluetooth: hci4: command tx timeout [ 97.572761][ T5847] Bluetooth: hci5: command tx timeout [ 97.591752][ T5841] veth0_vlan: entered promiscuous mode [ 97.619495][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.686843][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.701442][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.716543][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.719947][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.767467][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.777121][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.786195][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.799979][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.815756][ T5841] veth1_vlan: entered promiscuous mode [ 97.831896][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.839739][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.888742][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.904503][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.916034][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.924889][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.997183][ T5829] veth0_macvtap: entered promiscuous mode [ 98.038555][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.056898][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.101100][ T5829] veth1_macvtap: entered promiscuous mode [ 98.145746][ T5841] veth0_macvtap: entered promiscuous mode [ 98.174274][ T5841] veth1_macvtap: entered promiscuous mode [ 98.282779][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.393601][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.418469][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.435704][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.454597][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.469673][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.538938][ T5841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.551918][ T5841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.570404][ T5841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.579273][ T5841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.317055][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.331042][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.369713][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.384861][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.482203][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.503260][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.538238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.592091][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.615115][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.741087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.750703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.760942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.797438][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.809467][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.830556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.940115][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.966342][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.981148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.989480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.042493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 100.182622][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.221308][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.230871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.331542][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.349314][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.599795][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.695415][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.951994][ T30] audit: type=1326 audit(1750240284.645:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f7f8e929 code=0x7ffc0000 [ 100.973009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.096914][ T30] audit: type=1326 audit(1750240284.685:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f7f8e929 code=0x7ffc0000 [ 101.258631][ T30] audit: type=1326 audit(1750240284.695:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc6f7f8e929 code=0x7ffc0000 [ 101.411467][ T30] audit: type=1326 audit(1750240284.695:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f7f8e929 code=0x7ffc0000 [ 101.638903][ T30] audit: type=1326 audit(1750240284.695:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f7f8e929 code=0x7ffc0000 [ 101.911512][ T30] audit: type=1326 audit(1750240284.705:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc6f7f8e929 code=0x7ffc0000 [ 102.325241][ T30] audit: type=1326 audit(1750240284.705:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f7f8e929 code=0x7ffc0000 [ 102.390756][ T5820] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.416746][ T30] audit: type=1326 audit(1750240284.705:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f7f8e929 code=0x7ffc0000 [ 103.267666][ T6027] syz.2.19 (6027): drop_caches: 2 [ 103.396215][ T30] audit: type=1326 audit(1750240284.705:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.5.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc6f7f8e929 code=0x7ffc0000 [ 103.481582][ T5820] usb 5-1: Using ep0 maxpacket: 16 [ 103.701575][ T5820] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 103.820362][ T5820] usb 5-1: config 0 has no interface number 0 [ 103.826783][ T5820] usb 5-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 103.832982][ T30] audit: type=1326 audit(1750240284.705:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.5.6" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6f7f8e929 code=0x0 [ 103.843890][ T5820] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 103.867586][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.890293][ T5820] usb 5-1: Product: syz [ 104.012135][ T5820] usb 5-1: Manufacturer: syz [ 104.023380][ T5820] usb 5-1: SerialNumber: syz [ 104.161687][ T5820] usb 5-1: config 0 descriptor?? [ 104.581894][ T6021] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 104.751244][ T5820] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 104.843739][ T5820] usb 5-1: USB disconnect, device number 2 [ 104.872156][ T12] usb 5-1: Failed to submit usb control message: -71 [ 104.939632][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 105.245952][ T12] usb 5-1: unable to get target info from device [ 105.260689][ T12] usb 5-1: could not get target info (-71) [ 105.274721][ T12] usb 5-1: could not probe fw (-71) [ 107.059563][ T6050] batman_adv: batadv0: Adding interface: ip6gretap1 [ 107.300421][ T6050] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.061248][ T6050] batman_adv: batadv0: Interface activated: ip6gretap1 [ 108.137220][ T6061] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 108.370316][ T5820] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.013879][ T6082] syz.0.32 (6082): drop_caches: 2 [ 111.784426][ T6108] syz.3.40 (6108): drop_caches: 2 [ 112.041292][ T6100] syz.5.41 (6100) used greatest stack depth: 17672 bytes left [ 113.893243][ T6130] syz.4.49 (6130): drop_caches: 2 [ 115.340388][ T5908] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 115.928450][ T5908] usb 6-1: config 0 has an invalid interface number: 229 but max is 0 [ 115.956622][ T5908] usb 6-1: config 0 has no interface number 0 [ 116.003802][ T5908] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 116.031287][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.055267][ T5908] usb 6-1: config 0 descriptor?? [ 116.325028][ T5908] usb 6-1: USB disconnect, device number 2 [ 116.590310][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.765174][ T5889] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.786984][ T5889] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 116.808942][ T5889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.819181][ T5889] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 116.906590][ T5889] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 116.956489][ T5889] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.960608][ T6156] batman_adv: batadv0: Adding interface: ip6gretap1 [ 116.966231][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.985296][ T6156] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.054510][ T5889] usb 5-1: Product: syz [ 117.074353][ T6156] batman_adv: batadv0: Interface activated: ip6gretap1 [ 117.089949][ T5889] usb 5-1: Manufacturer: syz [ 117.134984][ T5889] cdc_wdm 5-1:1.0: skipping garbage [ 117.146357][ T5889] cdc_wdm 5-1:1.0: skipping garbage [ 117.171103][ T5889] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 117.179976][ T5889] cdc_wdm 5-1:1.0: Unknown control protocol [ 117.351845][ T5889] usb 5-1: USB disconnect, device number 4 [ 118.686558][ T6173] syz.3.63 (6173): drop_caches: 2 [ 119.572511][ T6187] ======================================================= [ 119.572511][ T6187] WARNING: The mand mount option has been deprecated and [ 119.572511][ T6187] and is ignored by this kernel. Remove the mand [ 119.572511][ T6187] option from the mount to silence this warning. [ 119.572511][ T6187] ======================================================= [ 119.790305][ T5889] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.023655][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 120.040666][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 120.152557][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 120.201562][ T5889] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 120.225999][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.266967][ T5889] usb 3-1: Product: syz [ 120.310525][ T5889] usb 3-1: Manufacturer: syz [ 120.315137][ T5889] usb 3-1: SerialNumber: syz [ 120.358112][ T5889] usb 3-1: config 0 descriptor?? [ 120.795950][ T6203] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 120.909386][ T5889] usb 3-1: no audio or video endpoints found [ 120.931236][ T6197] batman_adv: batadv0: Adding interface: ip6gretap1 [ 121.218056][ T6197] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.382334][ T6197] batman_adv: batadv0: Interface activated: ip6gretap1 [ 123.066737][ T5889] usb 3-1: USB disconnect, device number 2 [ 124.101404][ T6235] syz.1.79 (6235): drop_caches: 2 [ 124.385085][ T6235] syz.1.79 (6235): drop_caches: 2 [ 125.131002][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.320574][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 125.337241][ T5908] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 125.348746][ T5908] usb 4-1: config 0 has no interface number 0 [ 125.452638][ T5908] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.520606][ T6244] netlink: 'syz.2.83': attribute type 15 has an invalid length. [ 125.528565][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 125.596633][ T5908] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 125.807251][ T5908] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.000350][ T5908] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.208652][ T5908] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 126.246064][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.307830][ T5908] usb 4-1: config 0 descriptor?? [ 126.371600][ T5908] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 127.130334][ T5890] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.330787][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 127.367679][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 127.419888][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 127.457660][ T5890] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 127.491510][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.518404][ T5890] usb 1-1: Product: syz [ 127.532291][ T5890] usb 1-1: Manufacturer: syz [ 127.536954][ T5890] usb 1-1: SerialNumber: syz [ 127.589495][ T5890] usb 1-1: config 0 descriptor?? [ 127.624433][ T5890] usb 1-1: no audio or video endpoints found [ 127.834819][ T5889] usb 4-1: USB disconnect, device number 2 [ 128.022160][ T6277] syz.4.93 (6277): drop_caches: 2 [ 128.134640][ T6277] syz.4.93 (6277): drop_caches: 2 [ 129.021448][ T5889] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 131.961618][ T5928] usb 1-1: USB disconnect, device number 2 [ 132.128958][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.135670][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.210436][ T5928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.402485][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 133.452723][ T5928] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 133.461659][ T5928] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.480078][ T5928] usb 4-1: config 1 has no interface number 1 [ 133.497398][ T5928] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.537969][ T5928] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.547243][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.555435][ T5928] usb 4-1: Manufacturer: ೵侻ਙȯ [ 134.707956][ T6294] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 134.717897][ T6294] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 134.935046][ T6304] tipc: Started in network mode [ 135.005243][ T6304] tipc: Node identity ac14140c, cluster identity 4711 [ 135.060980][ T6304] tipc: New replicast peer: 255.255.255.255 [ 135.074537][ T6304] tipc: Enabled bearer , priority 10 [ 135.138637][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.103'. [ 135.172174][ T6307] tipc: Disabling bearer [ 135.609365][ T6320] syz.0.107 (6320): drop_caches: 2 [ 135.665714][ T6320] syz.0.107 (6320): drop_caches: 2 [ 136.940709][ T6331] syz.2.114 (6331): drop_caches: 2 [ 136.960517][ T6331] syz.2.114 (6331): drop_caches: 2 [ 137.892275][ T5895] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.132424][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 138.142261][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.168958][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.191119][ T5895] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 138.230443][ T5928] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 138.240627][ T5908] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.255063][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.265096][ T5895] usb 6-1: Product: syz [ 138.278242][ T5895] usb 6-1: Manufacturer: syz [ 138.306031][ T5895] usb 6-1: SerialNumber: syz [ 138.344021][ T5928] usb 4-1: USB disconnect, device number 3 [ 138.353930][ T5895] usb 6-1: config 0 descriptor?? [ 138.427889][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.446364][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 138.501103][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 138.526821][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 138.558221][ T5908] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 138.573126][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.603995][ T5908] usb 1-1: Product: syz [ 138.608499][ T5908] usb 1-1: Manufacturer: syz [ 138.631365][ T5908] usb 1-1: SerialNumber: syz [ 138.652693][ T5908] usb 1-1: config 0 descriptor?? [ 138.700378][ T5908] usb 1-1: no audio or video endpoints found [ 139.217487][ T6364] syz.3.124 (6364): drop_caches: 2 [ 139.227635][ T6364] syz.3.124 (6364): drop_caches: 2 [ 143.029934][ T5908] usb 1-1: USB disconnect, device number 3 [ 143.215209][ T5928] usb 6-1: USB disconnect, device number 3 [ 143.488869][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 144.600409][ T5890] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 144.779610][ T5890] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 144.808979][ T5890] usb 3-1: config 0 has no interface number 0 [ 144.821221][ T5890] usb 3-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 144.835375][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.847830][ T5890] usb 3-1: config 0 descriptor?? [ 144.874521][ T5890] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 144.882654][ T5890] usb 3-1: setting power ON [ 144.887706][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 145.031108][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 145.178359][ T5890] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 145.214442][ T5890] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 145.223488][ T5890] dvb_usb_cxusb 3-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 145.258973][ T5890] usb 3-1: USB disconnect, device number 3 [ 146.598013][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 147.090705][ T5928] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.275282][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 147.311302][ T5928] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 147.344410][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.389391][ T5928] pvrusb2: Hardware description: Terratec Grabster AV400 [ 147.475207][ T5928] pvrusb2: ********** [ 147.479380][ T5928] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 147.499819][ T5928] pvrusb2: Important functionality might not be entirely working. [ 147.508008][ T5928] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 147.519487][ T5928] pvrusb2: ********** [ 147.594226][ T2341] pvrusb2: Invalid write control endpoint [ 147.836611][ T6444] pvrusb2: Invalid write control endpoint [ 148.445373][ T5890] usb 5-1: USB disconnect, device number 5 [ 148.568034][ T2341] pvrusb2: Invalid write control endpoint [ 148.575743][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 148.586166][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 148.595963][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 148.611852][ T2341] pvrusb2: Device being rendered inoperable [ 148.619155][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 148.626385][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 148.636654][ T2341] pvrusb2: Attached sub-driver cx25840 [ 148.642446][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 148.655388][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 152.155617][ T6469] batman_adv: batadv0: Adding interface: ip6gretap1 [ 152.211652][ T6469] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.280902][ T6469] batman_adv: batadv0: Interface activated: ip6gretap1 [ 157.350734][ T6557] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 158.272723][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 159.050364][ T5895] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.206060][ T5895] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 159.247866][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.268580][ T5895] usb 3-1: Product: syz [ 159.274191][ T5895] usb 3-1: Manufacturer: syz [ 159.279849][ T5895] usb 3-1: SerialNumber: syz [ 159.332887][ T5895] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 159.373078][ T5928] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 159.821002][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.829986][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.530482][ T5928] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 160.554315][ T5928] ath9k_htc: Failed to initialize the device [ 160.606392][ T6582] loop4: detected capacity change from 0 to 32768 [ 160.632594][ T5928] usb 3-1: ath9k_htc: USB layer deinitialized [ 160.680708][ T6582] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.200 (6582) [ 160.826903][ T6582] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 160.895135][ T6582] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 160.935609][ T5928] usb 3-1: USB disconnect, device number 4 [ 160.953512][ T6582] BTRFS info (device loop4): using free-space-tree [ 160.983495][ T6594] fuse: Unknown parameter 'u00000000000000000000' [ 161.457054][ T6582] BTRFS info (device loop4): rebuilding free space tree [ 161.722276][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806b899000: rx timeout, send abort [ 161.733277][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806b899000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.088578][ T6623] program syz.5.208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.116399][ T6624] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.665716][ T5830] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 163.882518][ T6647] syz.0.217 (6647): drop_caches: 2 [ 164.132995][ T6647] syz.0.217 (6647): drop_caches: 2 [ 165.664575][ T6651] sctp: failed to load transform for md5: -4 [ 167.365843][ T6680] fuse: Bad value for 'fd' [ 168.288965][ T6677] loop4: detected capacity change from 0 to 32768 [ 168.352560][ T6677] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.224 (6677) [ 168.406335][ T6677] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 168.429204][ T6677] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 168.480734][ T6677] BTRFS info (device loop4): using free-space-tree [ 168.701949][ T6702] Zero length message leads to an empty skb [ 169.122636][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033e06c00: rx timeout, send abort [ 169.132117][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033e06c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 169.570573][ T6677] BTRFS info (device loop4): rebuilding free space tree [ 169.739043][ T5830] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 170.395368][ T6710] syz.5.230 (6710): drop_caches: 2 [ 170.435028][ T6710] syz.5.230 (6710): drop_caches: 2 [ 173.226091][ T6729] netlink: 20 bytes leftover after parsing attributes in process `syz.5.238'. [ 173.700369][ T5895] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 174.118896][ T6749] syz.1.244 (6749): drop_caches: 2 [ 174.151241][ T6749] syz.1.244 (6749): drop_caches: 2 [ 174.395561][ T5895] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.430309][ T5895] usb 4-1: config 0 has no interface number 0 [ 174.477277][ T5895] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.527290][ T5895] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.600416][ T5895] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.639429][ T5895] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 174.663558][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.688746][ T5895] usb 4-1: config 0 descriptor?? [ 175.171931][ T6761] netlink: 'syz.2.250': attribute type 29 has an invalid length. [ 175.217022][ T6744] loop5: detected capacity change from 0 to 32768 [ 175.232495][ T6761] netlink: 'syz.2.250': attribute type 29 has an invalid length. [ 175.263821][ T6744] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.243 (6744) [ 175.271296][ T6761] netlink: 'syz.2.250': attribute type 29 has an invalid length. [ 175.317758][ T5895] uclogic 0003:28BD:0042.0001: failed retrieving string descriptor #100: -71 [ 175.359147][ T6744] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 175.373058][ T5895] uclogic 0003:28BD:0042.0001: failed retrieving pen parameters: -71 [ 175.388969][ T5895] uclogic 0003:28BD:0042.0001: pen probing failed: -71 [ 175.399306][ T6744] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 175.436754][ T5895] uclogic 0003:28BD:0042.0001: failed probing parameters: -71 [ 175.458798][ T5895] uclogic 0003:28BD:0042.0001: probe with driver uclogic failed with error -71 [ 175.469328][ T6744] BTRFS info (device loop5): using free-space-tree [ 175.554222][ T5895] usb 4-1: USB disconnect, device number 4 [ 175.715899][ T6744] BTRFS info (device loop5): rebuilding free space tree [ 176.351319][ T6788] netlink: del zone limit has 4 unknown bytes [ 176.397987][ T5841] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 177.053870][ T6797] syz.3.257 (6797): drop_caches: 2 [ 177.211850][ T6797] syz.3.257 (6797): drop_caches: 2 [ 177.948585][ T6658] Set syz1 is full, maxelem 65536 reached [ 181.931124][ T6837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.749153][ T6839] loop5: detected capacity change from 0 to 32768 [ 182.796526][ T6839] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.268 (6839) [ 182.896201][ T6839] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 182.909265][ T6839] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 182.923560][ T6839] BTRFS info (device loop5): using free-space-tree [ 183.187313][ T6839] BTRFS info (device loop5): rebuilding free space tree [ 184.591036][ T5841] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 185.252883][ T6878] syz.4.272 (6878): drop_caches: 2 [ 185.360020][ T6878] syz.4.272 (6878): drop_caches: 2 [ 186.040411][ T5820] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 186.334004][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 186.788512][ T6801] @: renamed from vlan0 (while UP) [ 187.171964][ T6892] fuse: Unknown parameter 'u00000000000000000000' [ 187.195832][ T6889] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 187.920429][ T5889] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 188.071015][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 188.081594][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.101601][ T5889] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.175820][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.186453][ T5889] usb 3-1: Product: syz [ 188.195135][ T5889] usb 3-1: Manufacturer: syz [ 188.445386][ T5889] usb 3-1: SerialNumber: syz [ 188.614479][ T5889] usb 3-1: config 0 descriptor?? [ 189.569593][ T6920] syz.5.287 (6920): drop_caches: 2 [ 189.639480][ T6920] syz.5.287 (6920): drop_caches: 2 [ 190.723874][ T5889] usb 3-1: USB disconnect, device number 5 [ 191.212682][ T5820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 191.249142][ T5820] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 191.329562][ T5820] usb 4-1: can't read configurations, error -71 [ 191.593958][ T6938] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 192.930548][ T6962] netlink: 92 bytes leftover after parsing attributes in process `syz.0.301'. [ 193.028827][ T6963] syz.3.300 (6963): drop_caches: 2 [ 193.085455][ T6963] syz.3.300 (6963): drop_caches: 2 [ 193.577756][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.590360][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.690278][ T5937] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 193.900573][ T5937] usb 3-1: not running at top speed; connect to a high speed hub [ 193.948791][ T5937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.997974][ T5937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.028669][ T5937] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.042496][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.086725][ T5937] usb 3-1: Product: syz [ 194.100041][ T5937] usb 3-1: Manufacturer: syz [ 194.110636][ T5937] usb 3-1: SerialNumber: syz [ 194.368468][ T5895] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 194.407431][ T5937] usb 3-1: 0:2 : does not exist [ 194.433315][ T5937] usb 3-1: USB disconnect, device number 6 [ 194.519699][ T6595] udevd[6595]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.554091][ T5895] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.569517][ T5895] usb 6-1: config 0 has no interface number 0 [ 194.578214][ T5895] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.613874][ T5895] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.636746][ T5895] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.651969][ T5895] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 194.699766][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.810548][ T5895] usb 6-1: config 0 descriptor?? [ 195.360501][ T5895] usbhid 6-1:0.1: can't add hid device: -71 [ 195.383014][ T5895] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 196.152204][ T5895] usb 6-1: USB disconnect, device number 4 [ 196.606310][ T6996] batman_adv: batadv0: Adding interface: ip6gretap1 [ 196.638923][ T6996] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.690392][ T6996] batman_adv: batadv0: Interface activated: ip6gretap1 [ 197.257219][ T7004] syz.2.314 (7004): drop_caches: 2 [ 197.316761][ T7004] syz.2.314 (7004): drop_caches: 2 [ 197.465101][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.315'. [ 198.080974][ T7006] netlink: 92 bytes leftover after parsing attributes in process `syz.2.316'. [ 198.846735][ T6998] loop5: detected capacity change from 0 to 32768 [ 198.908900][ T6998] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.313 (6998) [ 198.980029][ T6998] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 199.030000][ T6998] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 199.041404][ T7017] fuse: Unknown parameter 'u00000000000000000000' [ 199.080585][ T6998] BTRFS info (device loop5): using free-space-tree [ 199.345429][ T6998] BTRFS info (device loop5): rebuilding free space tree [ 199.839412][ T5841] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 201.157086][ T7066] syz.4.329 (7066): drop_caches: 2 [ 201.441032][ T7066] syz.4.329 (7066): drop_caches: 2 [ 202.065529][ T7085] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 203.770295][ T5895] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 204.042212][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.066354][ T5895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 204.118285][ T5895] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.155712][ T5895] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.196305][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.595708][ T7120] syz.3.346 (7120): drop_caches: 2 [ 204.658542][ T7120] syz.3.346 (7120): drop_caches: 2 [ 205.250490][ T5895] usb 5-1: Product: syz [ 205.375001][ T5895] usb 5-1: Manufacturer: syz [ 205.450289][ T5895] usb 5-1: SerialNumber: syz [ 205.497061][ T5895] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 205.527191][ T5895] cdc_ncm 5-1:1.0: bind() failure [ 205.794393][ T5895] usb 5-1: USB disconnect, device number 6 [ 208.366299][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 209.698231][ T5895] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 209.890301][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 209.899884][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 209.952019][ T5895] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 210.010234][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.070296][ T5895] usb 2-1: Product: syz [ 210.074530][ T5895] usb 2-1: Manufacturer: syz [ 210.100247][ T5895] usb 2-1: SerialNumber: syz [ 210.168152][ T5895] usb 2-1: config 0 descriptor?? [ 210.207857][ T5895] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 210.251529][ T5895] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 211.340861][ T5895] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 211.790319][ T5895] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 211.838445][ T5895] em28xx 2-1:0.0: board has no eeprom [ 211.940448][ T5895] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 211.948322][ T5895] em28xx 2-1:0.0: dvb set to bulk mode. [ 212.000572][ T5928] em28xx 2-1:0.0: Binding DVB extension [ 212.031301][ T7180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.124569][ T5895] usb 2-1: USB disconnect, device number 2 [ 212.152524][ T5895] em28xx 2-1:0.0: Disconnecting em28xx [ 212.415206][ T5928] em28xx 2-1:0.0: Registering input extension [ 212.643545][ T5895] em28xx 2-1:0.0: Closing input extension [ 213.059957][ T5895] em28xx 2-1:0.0: Freeing device [ 216.360377][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 216.366511][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 216.375163][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 216.383641][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 216.389697][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 216.397729][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 216.807314][ T7219] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 217.230404][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 222.340414][ T1205] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 222.517513][ T1205] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.606271][ T1205] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.758679][ T1205] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.009716][ T1205] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.078103][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.384417][ T1205] usb 1-1: Product: syz [ 223.452883][ T1205] usb 1-1: Manufacturer: syz [ 223.618225][ T1205] usb 1-1: SerialNumber: syz [ 223.707265][ T1205] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 223.824185][ T1205] cdc_ncm 1-1:1.0: bind() failure [ 224.050516][ T7300] syzkaller0: entered promiscuous mode [ 224.056079][ T7300] syzkaller0: entered allmulticast mode [ 225.299426][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.5.403'. [ 225.502681][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.403'. [ 226.170300][ T1205] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 226.300328][ T5928] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 226.370329][ T1205] usb 4-1: Using ep0 maxpacket: 8 [ 226.405438][ T1205] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 226.419449][ T5895] usb 1-1: USB disconnect, device number 4 [ 226.426351][ T1205] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 226.481034][ T1205] usb 4-1: config 1 has no interface number 1 [ 226.510699][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 226.521154][ T1205] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 226.551889][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 226.567506][ T1205] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.577191][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.586162][ T1205] usb 4-1: Manufacturer: ೵侻ਙȯ [ 226.608856][ T5928] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 226.869384][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.891239][ T5928] usb 5-1: Product: syz [ 227.499695][ T5928] usb 5-1: Manufacturer: syz [ 227.504399][ T5928] usb 5-1: SerialNumber: syz [ 227.512069][ T5928] usb 5-1: config 0 descriptor?? [ 227.642428][ T5928] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 227.660291][ T5928] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 227.719596][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.790254][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.243339][ T5928] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 228.748937][ T5928] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 228.769302][ T5928] em28xx 5-1:0.0: board has no eeprom [ 228.840233][ T5928] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 228.886272][ T5928] em28xx 5-1:0.0: dvb set to bulk mode. [ 228.904338][ T5895] em28xx 5-1:0.0: Binding DVB extension [ 228.940595][ T5928] usb 5-1: USB disconnect, device number 7 [ 229.032229][ T5928] em28xx 5-1:0.0: Disconnecting em28xx [ 229.156438][ T5895] em28xx 5-1:0.0: Registering input extension [ 229.167583][ T5928] em28xx 5-1:0.0: Closing input extension [ 229.250461][ T5928] em28xx 5-1:0.0: Freeing device [ 231.557485][ T7319] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 231.580472][ T7319] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.598352][ T7356] @: renamed from vlan0 (while UP) [ 231.644265][ T1205] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 231.954882][ T5895] usb 4-1: USB disconnect, device number 7 [ 233.398390][ T7375] netlink: 'syz.5.426': attribute type 1 has an invalid length. [ 233.443288][ T7375] netlink: 'syz.5.426': attribute type 4 has an invalid length. [ 233.502308][ T7379] netlink: 'syz.5.426': attribute type 1 has an invalid length. [ 233.540262][ T7375] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.426'. [ 233.598622][ T7379] netlink: 'syz.5.426': attribute type 4 has an invalid length. [ 233.642435][ T7379] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.426'. [ 233.870531][ T5890] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 234.030473][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 234.043909][ T5890] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.056985][ T5890] usb 4-1: config 0 has no interface number 0 [ 234.125745][ T7395] netlink: 132 bytes leftover after parsing attributes in process `syz.1.420'. [ 234.255137][ T5890] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.278139][ T5890] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.316288][ T5890] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 234.350333][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.389151][ T5890] usb 4-1: config 0 descriptor?? [ 234.730273][ T5928] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 234.920477][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 234.943404][ T5928] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 234.973293][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.000567][ T5928] usb 1-1: Product: syz [ 235.009274][ T5928] usb 1-1: Manufacturer: syz [ 235.027693][ T5890] usbhid 4-1:0.1: can't add hid device: -71 [ 235.036568][ T5928] usb 1-1: SerialNumber: syz [ 235.042962][ T5890] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 235.073968][ T5928] r8152-cfgselector 1-1: Unknown version 0x0000 [ 235.092857][ T5928] r8152-cfgselector 1-1: config 0 descriptor?? [ 235.101404][ T5890] usb 4-1: USB disconnect, device number 8 [ 236.041743][ T5928] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 237.613083][ T1205] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 237.792760][ T1205] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.819594][ T1205] usb 6-1: config 0 has no interface number 0 [ 237.844435][ T1205] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.885380][ T1205] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.917465][ T1205] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.963005][ T1205] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 237.992465][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.031425][ T1205] usb 6-1: config 0 descriptor?? [ 238.126111][ T7429] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.444'. [ 238.989944][ T1205] uclogic 0003:28BD:0042.0002: failed retrieving string descriptor #100: -71 [ 239.026524][ T1205] uclogic 0003:28BD:0042.0002: failed retrieving pen parameters: -71 [ 239.049941][ T1205] uclogic 0003:28BD:0042.0002: pen probing failed: -71 [ 239.068876][ T1205] uclogic 0003:28BD:0042.0002: failed probing parameters: -71 [ 239.087678][ T1205] uclogic 0003:28BD:0042.0002: probe with driver uclogic failed with error -71 [ 239.098893][ T51] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 239.119065][ T1205] usb 6-1: USB disconnect, device number 5 [ 239.412707][ T7443] netlink: 60 bytes leftover after parsing attributes in process `syz.1.449'. [ 239.455279][ T7440] netlink: 60 bytes leftover after parsing attributes in process `syz.1.449'. [ 239.577046][ T7447] syz.2.452 uses obsolete (PF_INET,SOCK_PACKET) [ 240.030382][ T5908] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 240.220033][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 240.284431][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 240.388867][ T5908] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.410320][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.465327][ T5908] usb 6-1: Product: syz [ 240.469540][ T5908] usb 6-1: Manufacturer: syz [ 240.507511][ T5908] usb 6-1: SerialNumber: syz [ 240.538913][ T5908] usb 6-1: config 0 descriptor?? [ 240.604685][ T5908] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.640258][ T5908] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 241.087949][ T7473] netlink: zone id is out of range [ 241.182823][ T5908] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 241.412518][ T7481] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 241.490899][ T7473] netlink: zone id is out of range [ 241.508783][ T7473] netlink: zone id is out of range [ 241.549966][ T7473] netlink: zone id is out of range [ 241.584734][ T7473] netlink: zone id is out of range [ 241.613387][ T7473] netlink: zone id is out of range [ 241.627509][ T5908] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 241.649826][ T5908] em28xx 6-1:0.0: board has no eeprom [ 241.662071][ T7473] netlink: zone id is out of range [ 241.687808][ T7473] netlink: zone id is out of range [ 241.704074][ T7473] netlink: zone id is out of range [ 241.716272][ T7473] netlink: zone id is out of range [ 241.740268][ T5908] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 241.754498][ T5908] em28xx 6-1:0.0: dvb set to bulk mode. [ 241.774677][ T5928] em28xx 6-1:0.0: Binding DVB extension [ 241.808984][ T5908] usb 6-1: USB disconnect, device number 6 [ 241.901161][ T5908] em28xx 6-1:0.0: Disconnecting em28xx [ 242.084442][ T51] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 242.109729][ T5928] em28xx 6-1:0.0: Registering input extension [ 242.147241][ T5908] em28xx 6-1:0.0: Closing input extension [ 242.183941][ T5908] em28xx 6-1:0.0: Freeing device [ 243.360272][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 243.368881][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 243.377321][ T51] Bluetooth: hci1: hardware error 0x00 [ 244.082814][ T7503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.470'. [ 245.480615][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 245.519601][ T7522] vivid-000: disconnect [ 245.551131][ T7521] vivid-000: reconnect [ 246.121562][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 246.130706][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 246.138885][ T51] Bluetooth: hci4: hardware error 0x00 [ 247.630482][ T1205] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 247.790502][ T5908] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 247.804123][ T1205] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 247.830219][ T1205] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 247.860236][ T1205] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 247.884729][ T1205] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 247.910354][ T5890] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 247.940648][ T1205] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 247.962513][ T5908] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.011400][ T1205] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.020761][ T5850] Bluetooth: hci2: unexpected event for opcode 0x000c [ 248.023769][ T5908] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 248.049501][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.057685][ T5908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 248.057783][ T5908] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 248.057814][ T5908] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 248.059815][ T5908] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.098499][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.106572][ T5908] usb 5-1: Product: syz [ 248.110781][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 248.110794][ T5908] usb 5-1: Manufacturer: syz [ 248.136859][ T5908] cdc_wdm 5-1:1.0: skipping garbage [ 248.146728][ T5908] cdc_wdm 5-1:1.0: skipping garbage [ 248.157163][ T5890] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 248.169908][ T5908] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 248.186846][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.193699][ T5908] cdc_wdm 5-1:1.0: Unknown control protocol [ 248.200742][ T1205] usb 1-1: Product: syz [ 248.200765][ T1205] usb 1-1: Manufacturer: syz [ 248.235192][ T1205] cdc_wdm 1-1:1.0: skipping garbage [ 248.245000][ T5890] usb 4-1: Product: syz [ 248.293696][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 248.340338][ T1205] cdc_wdm 1-1:1.0: skipping garbage [ 248.345811][ T5890] usb 4-1: Manufacturer: syz [ 248.350688][ T5890] usb 4-1: SerialNumber: syz [ 248.365312][ T1205] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 248.395725][ T5890] r8152-cfgselector 4-1: Unknown version 0x0000 [ 248.402356][ T5890] r8152-cfgselector 4-1: config 0 descriptor?? [ 248.410421][ T1205] cdc_wdm 1-1:1.0: Unknown control protocol [ 248.842247][ T5890] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 249.939891][ T7570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.228133][ T7575] vivid-004: disconnect [ 250.246785][ T7574] vivid-004: reconnect [ 250.583699][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 250.590514][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 250.596833][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 250.603420][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 250.610315][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 250.616918][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 250.623289][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 250.629896][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 250.640256][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 250.646881][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 250.653831][ T5908] usb 5-1: USB disconnect, device number 8 [ 250.660435][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 250.667045][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 250.673106][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 250.746340][ T5890] usb 1-1: USB disconnect, device number 6 [ 250.820260][ T5895] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 251.060911][ T5895] usb 3-1: not running at top speed; connect to a high speed hub [ 251.200370][ T5908] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 251.385411][ T5895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.393767][ T5908] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.402030][ T5895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.410998][ T5908] usb 5-1: config 0 has no interface number 0 [ 252.420678][ T5908] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.433639][ T5908] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.443731][ T5908] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.456638][ T5908] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 252.465753][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.477452][ T5908] usb 5-1: config 0 descriptor?? [ 252.569750][ T5895] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.590953][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.714793][ T5895] usb 3-1: Product: syz [ 252.757699][ T5895] usb 3-1: Manufacturer: syz [ 252.824046][ T5895] usb 3-1: SerialNumber: syz [ 252.905847][ T5908] usbhid 5-1:0.1: can't add hid device: -71 [ 252.912558][ T5908] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 252.941020][ T5908] usb 5-1: USB disconnect, device number 9 [ 253.113093][ T5895] usb 3-1: 0:2 : does not exist [ 253.199428][ T5895] usb 3-1: USB disconnect, device number 7 [ 253.314531][ T6595] udevd[6595]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.491773][ T5890] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 254.703187][ T5890] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 254.748719][ T5890] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 254.822361][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 254.921896][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 255.017568][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.024644][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.042935][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 255.131947][ T5890] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.214935][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.234184][ T7623] fuse: Bad value for 'fd' [ 255.266439][ T5890] usb 5-1: Product: syz [ 255.281662][ T5890] usb 5-1: Manufacturer: syz [ 255.351662][ T5890] cdc_wdm 5-1:1.0: skipping garbage [ 255.369321][ T5890] cdc_wdm 5-1:1.0: skipping garbage [ 255.415221][ T5890] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 255.446102][ T5890] cdc_wdm 5-1:1.0: Unknown control protocol [ 256.563217][ T7640] tipc: Enabling of bearer rejected, failed to enable media [ 257.305615][ T7647] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.518'. [ 257.343367][ T7646] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.518'. [ 257.403785][ T5908] usb 5-1: USB disconnect, device number 10 [ 257.436916][ T7647] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.518'. [ 257.500746][ T7651] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.519'. [ 257.570975][ T7649] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.519'. [ 257.657474][ T7651] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.519'. [ 257.729108][ T7653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.520'. [ 257.848043][ T7664] batman_adv: batadv0: Adding interface: ip6gretap1 [ 257.929946][ T7664] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.120562][ T5890] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 258.132631][ T7664] batman_adv: batadv0: Interface activated: ip6gretap1 [ 258.329103][ T5890] usb 4-1: config 0 has no interfaces? [ 258.393696][ T5890] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 258.444487][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.482633][ T5890] usb 4-1: Product: syz [ 258.507343][ T5890] usb 4-1: Manufacturer: syz [ 258.529457][ T5890] usb 4-1: SerialNumber: syz [ 258.575092][ T5890] usb 4-1: config 0 descriptor?? [ 258.614651][ T7682] netlink: 211456 bytes leftover after parsing attributes in process `syz.1.528'. [ 258.647625][ T7682] net_ratelimit: 16 callbacks suppressed [ 258.647640][ T7682] netlink: zone id is out of range [ 258.663551][ T7673] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 258.716534][ T7682] netlink: get zone limit has 8 unknown bytes [ 258.753977][ T7673] syzkaller0: entered promiscuous mode [ 258.790275][ T7673] syzkaller0: entered allmulticast mode [ 258.818176][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.827223][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.691205][ T971] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 259.852510][ T971] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.866250][ T971] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.950315][ T5895] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 259.968429][ T971] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.978015][ T971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 259.989280][ T971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 260.030756][ T971] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 260.041208][ T971] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.049420][ T971] usb 3-1: Product: syz [ 260.065363][ T971] usb 3-1: Manufacturer: syz [ 260.084985][ T971] cdc_wdm 3-1:1.0: skipping garbage [ 260.094820][ T971] cdc_wdm 3-1:1.0: skipping garbage [ 260.106211][ T971] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 260.113472][ T971] cdc_wdm 3-1:1.0: Unknown control protocol [ 260.123894][ T5895] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.134219][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 260.148261][ T5895] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.212329][ T5895] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.347005][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.433936][ T5895] usb 2-1: Product: syz [ 260.452246][ T5895] usb 2-1: Manufacturer: syz [ 260.488859][ T5895] usb 2-1: SerialNumber: syz [ 260.603995][ T5895] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 260.611302][ T5895] cdc_ncm 2-1:1.0: bind() failure [ 262.227686][ T5889] usb 4-1: USB disconnect, device number 10 [ 262.516903][ T5895] usb 3-1: USB disconnect, device number 8 [ 263.805019][ T5895] usb 2-1: USB disconnect, device number 3 [ 264.733985][ T7765] netlink: 468 bytes leftover after parsing attributes in process `syz.1.556'. [ 266.041440][ T5937] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 266.210227][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 266.249011][ T5937] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 266.294702][ T5937] usb 5-1: config 0 has no interface number 0 [ 266.320445][ T5937] usb 5-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.382034][ T5937] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 266.417718][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 266.446568][ T5937] usb 5-1: Product: syz [ 266.474350][ T5937] usb 5-1: SerialNumber: syz [ 266.496859][ T5937] usb 5-1: config 0 descriptor?? [ 266.529249][ T5937] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 266.743242][ T5937] usb 5-1: USB disconnect, device number 11 [ 267.190247][ T5937] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 267.440239][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 267.616549][ T5937] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 267.773178][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.160275][ T5937] usb 3-1: Product: syz [ 268.164491][ T5937] usb 3-1: Manufacturer: syz [ 268.169092][ T5937] usb 3-1: SerialNumber: syz [ 268.270496][ T5937] r8152-cfgselector 3-1: Unknown version 0x0000 [ 268.289706][ T5937] r8152-cfgselector 3-1: config 0 descriptor?? [ 268.730961][ T7829] vivid-000: disconnect [ 268.748044][ T7828] vivid-000: reconnect [ 268.764155][ T5889] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 269.715048][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 269.783623][ T7848] netlink: 468 bytes leftover after parsing attributes in process `syz.3.585'. [ 270.143660][ T7852] netlink: 'syz.2.588': attribute type 9 has an invalid length. [ 270.164729][ T7853] process 'syz.3.585' launched './file1' with NULL argv: empty string added [ 270.875943][ T7858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.592'. [ 272.326422][ T7883] netlink: 'syz.5.600': attribute type 15 has an invalid length. [ 272.334822][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.5.600'. [ 273.150279][ T1205] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 273.172871][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 273.196208][ T7892] netlink: 'syz.5.603': attribute type 11 has an invalid length. [ 273.340882][ T1205] usb 2-1: Using ep0 maxpacket: 16 [ 273.366715][ T1205] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 273.394359][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.422477][ T1205] usb 2-1: Product: syz [ 273.431324][ T1205] usb 2-1: Manufacturer: syz [ 273.442323][ T1205] usb 2-1: SerialNumber: syz [ 273.477354][ T1205] r8152-cfgselector 2-1: Unknown version 0x0000 [ 273.496420][ T1205] r8152-cfgselector 2-1: config 0 descriptor?? [ 274.758944][ T5895] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 274.869229][ T7910] syzkaller0: entered promiscuous mode [ 274.883165][ T7910] syzkaller0: entered allmulticast mode [ 277.701863][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 279.440336][ T5890] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 279.936766][ T7970] netlink: 40 bytes leftover after parsing attributes in process `syz.4.624'. [ 280.104101][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.124483][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 280.151118][ T5890] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.431818][ T5890] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.445650][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.531678][ T5937] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 281.209167][ T5890] usb 1-1: Product: syz [ 281.213438][ T5890] usb 1-1: Manufacturer: syz [ 281.218041][ T5890] usb 1-1: SerialNumber: syz [ 281.258329][ T5890] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 281.271790][ T5890] cdc_ncm 1-1:1.0: bind() failure [ 281.392653][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.408812][ T5937] usb 4-1: not running at top speed; connect to a high speed hub [ 281.660398][ T5937] usb 4-1: config 1 interface 0 has no altsetting 0 [ 282.440630][ T5937] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 282.449726][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.495445][ T5937] usb 4-1: Product: syz [ 282.499651][ T5937] usb 4-1: Manufacturer: syz [ 282.550179][ T5937] usb 4-1: SerialNumber: syz [ 282.697283][ T8005] netlink: 'syz.2.633': attribute type 11 has an invalid length. [ 282.847581][ T5937] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9 [ 282.908759][ T5184] bcm5974 4-1:1.0: could not read from device [ 282.930913][ T5184] bcm5974 4-1:1.0: could not read from device [ 283.048768][ T5184] bcm5974 4-1:1.0: could not read from device [ 283.105894][ T5937] usb 4-1: USB disconnect, device number 11 [ 284.410286][ T5937] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 285.646588][ T5937] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 285.676237][ T5937] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 285.718713][ T5937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 285.738284][ T5937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 285.749540][ T5937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 285.907857][ T5937] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.949790][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.970496][ T5937] usb 4-1: Product: syz [ 285.974706][ T5937] usb 4-1: Manufacturer: syz [ 286.024024][ T5937] cdc_wdm 4-1:1.0: skipping garbage [ 286.029285][ T5937] cdc_wdm 4-1:1.0: skipping garbage [ 286.059925][ T5928] usb 1-1: USB disconnect, device number 7 [ 286.097615][ T5937] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 286.145564][ T5937] cdc_wdm 4-1:1.0: Unknown control protocol [ 286.346975][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.353624][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.360143][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.366742][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.373245][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.379832][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.386322][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.392920][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.399306][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.405904][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.412279][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.418889][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.431302][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.437938][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.444721][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.451323][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.457632][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.464246][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.470538][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.477138][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.500940][ T1205] usb 4-1: USB disconnect, device number 12 [ 286.506924][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 287.560979][ T8061] netlink: 'syz.1.653': attribute type 11 has an invalid length. [ 288.089894][ T8067] netlink: zone id is out of range [ 288.325928][ T8067] netlink: zone id is out of range [ 288.388073][ T8067] netlink: zone id is out of range [ 288.463452][ T8067] netlink: zone id is out of range [ 288.567109][ T8078] syz.5.650 (8078): drop_caches: 2 [ 288.581785][ T8078] syz.5.650 (8078): drop_caches: 2 [ 288.802983][ T8067] netlink: zone id is out of range [ 288.808742][ T8067] netlink: zone id is out of range [ 288.842072][ T8067] netlink: zone id is out of range [ 288.847593][ T8067] netlink: zone id is out of range [ 288.855600][ T8067] netlink: zone id is out of range [ 288.860394][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 288.861950][ T8067] netlink: zone id is out of range [ 289.090340][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 289.106654][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 289.118450][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 289.169015][ T5928] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 289.178582][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.209658][ T5928] usb 2-1: Product: syz [ 289.220009][ T5928] usb 2-1: Manufacturer: syz [ 289.232445][ T5928] usb 2-1: SerialNumber: syz [ 289.265490][ T5928] usb 2-1: config 0 descriptor?? [ 289.348143][ T5928] usb 2-1: no audio or video endpoints found [ 289.760289][ T5928] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 289.930702][ T1205] usb 2-1: USB disconnect, device number 5 [ 290.022013][ T5928] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.049126][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.075509][ T5928] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.138461][ T5928] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.148709][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.174579][ T5928] usb 1-1: Product: syz [ 290.192155][ T5928] usb 1-1: Manufacturer: syz [ 290.220432][ T5928] usb 1-1: SerialNumber: syz [ 290.259357][ T5928] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 290.267078][ T5928] cdc_ncm 1-1:1.0: bind() failure [ 293.010267][ T5889] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 293.241268][ T5889] usb 3-1: config 0 has no interfaces? [ 293.984426][ T5889] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 293.999030][ T8132] net_ratelimit: 3 callbacks suppressed [ 293.999045][ T8132] netlink: zone id is out of range [ 294.060249][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.068298][ T5889] usb 3-1: Product: syz [ 294.152631][ T8132] netlink: zone id is out of range [ 294.176129][ T5889] usb 3-1: Manufacturer: syz [ 294.190282][ T5889] usb 3-1: SerialNumber: syz [ 294.223707][ T8132] netlink: zone id is out of range [ 294.224254][ T5889] usb 3-1: config 0 descriptor?? [ 294.568761][ T8132] netlink: zone id is out of range [ 294.675112][ T8139] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 294.687299][ T8139] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 295.381469][ T8132] netlink: zone id is out of range [ 295.399547][ T8132] netlink: zone id is out of range [ 295.405431][ T8132] netlink: zone id is out of range [ 295.415357][ T8132] netlink: zone id is out of range [ 295.446173][ T8132] netlink: zone id is out of range [ 295.460394][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.472350][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.497479][ T8132] netlink: zone id is out of range [ 297.031568][ T5889] usb 1-1: USB disconnect, device number 8 [ 300.220103][ T5928] usb 3-1: USB disconnect, device number 10 [ 300.320400][ T8181] net_ratelimit: 3 callbacks suppressed [ 300.320422][ T8181] netlink: zone id is out of range [ 300.531657][ T8181] netlink: zone id is out of range [ 300.622520][ T8181] netlink: zone id is out of range [ 300.627693][ T8181] netlink: zone id is out of range [ 300.672865][ T8181] netlink: zone id is out of range [ 300.900630][ T8195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.690'. [ 301.052099][ T8181] netlink: zone id is out of range [ 301.057452][ T8181] netlink: zone id is out of range [ 301.064334][ T8181] netlink: zone id is out of range [ 301.069648][ T8181] netlink: zone id is out of range [ 301.080915][ T8181] netlink: zone id is out of range [ 301.331717][ T1205] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 301.630317][ T1205] usb 4-1: Using ep0 maxpacket: 8 [ 301.685049][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.716189][ T1205] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 301.743050][ T1205] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 301.776093][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.815769][ T1205] usb 4-1: Product: syz [ 301.828662][ T1205] usb 4-1: Manufacturer: syz [ 301.833830][ T1205] usb 4-1: SerialNumber: syz [ 301.850828][ T1205] usb 4-1: config 0 descriptor?? [ 304.397711][ T5908] usb 4-1: USB disconnect, device number 13 [ 305.490636][ T1205] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 305.683176][ T5908] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 305.705004][ T1205] usb 6-1: config 0 has no interfaces? [ 305.737954][ T1205] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 305.751621][ T1205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.769039][ T1205] usb 6-1: Product: syz [ 305.786183][ T1205] usb 6-1: Manufacturer: syz [ 305.791782][ T1205] usb 6-1: SerialNumber: syz [ 305.990428][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 305.997230][ T1205] usb 6-1: config 0 descriptor?? [ 306.010007][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 306.022380][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 306.888798][ T5908] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 306.904679][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.913261][ T5908] usb 4-1: Product: syz [ 306.918522][ T5908] usb 4-1: Manufacturer: syz [ 306.922752][ T8232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.923797][ T5908] usb 4-1: SerialNumber: syz [ 306.939058][ T5908] usb 4-1: config 0 descriptor?? [ 306.951895][ T8232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.967043][ T5908] usb 4-1: no audio or video endpoints found [ 308.901680][ T5820] usb 6-1: USB disconnect, device number 7 [ 309.682514][ T8218] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 309.922215][ T5928] usb 4-1: USB disconnect, device number 14 [ 310.331075][ T5937] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 310.491059][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 310.518527][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 310.578363][ T5937] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 310.618169][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.648010][ T5937] usb 1-1: Product: syz [ 310.661422][ T5937] usb 1-1: Manufacturer: syz [ 310.666185][ T5937] usb 1-1: SerialNumber: syz [ 310.924848][ T5937] usb 1-1: config 0 descriptor?? [ 311.087087][ T5937] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 311.109682][ T5937] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 311.685604][ T5937] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 313.019039][ T5937] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 313.048961][ T5937] em28xx 1-1:0.0: board has no eeprom [ 313.131664][ T5937] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 313.154751][ T5937] em28xx 1-1:0.0: dvb set to bulk mode. [ 313.173130][ T5908] em28xx 1-1:0.0: Binding DVB extension [ 313.190540][ T5928] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 313.220441][ T5937] usb 1-1: USB disconnect, device number 9 [ 313.270300][ T5937] em28xx 1-1:0.0: Disconnecting em28xx [ 313.364631][ T5908] em28xx 1-1:0.0: Registering input extension [ 313.377647][ T5937] em28xx 1-1:0.0: Closing input extension [ 313.390774][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 313.405465][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 313.439664][ T5937] em28xx 1-1:0.0: Freeing device [ 313.445139][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 313.473918][ T5928] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 313.523030][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.537171][ T5928] usb 5-1: Product: syz [ 313.548533][ T5928] usb 5-1: Manufacturer: syz [ 313.600382][ T5928] usb 5-1: SerialNumber: syz [ 313.637765][ T5928] usb 5-1: config 0 descriptor?? [ 313.665826][ T5928] usb 5-1: no audio or video endpoints found [ 314.216770][ T8343] syz.3.732 (8343): drop_caches: 2 [ 314.222404][ T8343] syz.3.732 (8343): drop_caches: 2 [ 316.445337][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.453660][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.537466][ T8353] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 316.748937][ T1205] usb 5-1: USB disconnect, device number 12 [ 317.268412][ T8383] JFS: discard option not supported on device [ 317.279562][ T8383] Mount JFS Failure: -22 [ 317.284069][ T8383] jfs_mount failed w/return code = -22 [ 318.362316][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.749'. [ 319.364163][ T8413] xt_socket: unknown flags 0x4c [ 322.362135][ T8447] kernel profiling enabled (shift: 7) [ 323.643165][ T5937] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 323.805868][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 323.829374][ T5937] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 323.853038][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.889298][ T5937] usb 4-1: config 0 descriptor?? [ 323.914294][ T5937] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 324.467318][ T8439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.762'. [ 325.147277][ T5937] gspca_nw80x: reg_w err -71 [ 325.251115][ T5937] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 326.487141][ T5937] usb 4-1: USB disconnect, device number 15 [ 327.446111][ T8492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.781'. [ 333.147642][ T8542] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[8542] [ 333.901826][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.795'. [ 334.681838][ T8560] syz.1.805 (8560): drop_caches: 2 [ 334.687863][ T8560] syz.1.805 (8560): drop_caches: 2 [ 334.724028][ T8559] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.804'. [ 335.140309][ T1205] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 335.342257][ T1205] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.359607][ T1205] usb 1-1: config 0 has no interface number 0 [ 335.378008][ T1205] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.504396][ T1205] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.531546][ T1205] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 335.558189][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.602586][ T1205] usb 1-1: config 0 descriptor?? [ 336.106014][ T1205] uclogic 0003:256C:006D.0003: No inputs registered, leaving [ 336.203082][ T1205] uclogic 0003:256C:006D.0003: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input1 [ 336.278567][ T1205] usb 1-1: USB disconnect, device number 10 [ 336.615664][ T8586] fido_id[8586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 337.454642][ T8597] netlink: 92 bytes leftover after parsing attributes in process `syz.5.818'. [ 338.298597][ T8585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.814'. [ 338.939256][ T8619] syz.4.821 (8619): drop_caches: 2 [ 338.945037][ T8619] syz.4.821 (8619): drop_caches: 2 [ 340.783383][ T8632] netlink: 132 bytes leftover after parsing attributes in process `syz.0.828'. [ 341.729261][ T8650] netlink: 92 bytes leftover after parsing attributes in process `syz.5.836'. [ 342.548300][ T8663] syz.1.839 (8663): drop_caches: 2 [ 342.561563][ T8663] syz.1.839 (8663): drop_caches: 2 [ 345.102048][ T8689] netlink: 132 bytes leftover after parsing attributes in process `syz.3.847'. [ 345.374720][ T8695] netlink: 92 bytes leftover after parsing attributes in process `syz.1.849'. [ 349.120602][ T5928] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 349.150401][ T8741] netlink: 92 bytes leftover after parsing attributes in process `syz.4.866'. [ 349.265447][ T8729] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 349.290538][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 349.318312][ T5928] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 349.342059][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 349.355316][ T8729] syzkaller0: entered promiscuous mode [ 349.362002][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.385816][ T8729] syzkaller0: entered allmulticast mode [ 349.540175][ T5928] usb 4-1: Product: syz [ 349.564456][ T5928] usb 4-1: Manufacturer: syz [ 349.595455][ T5928] usb 4-1: SerialNumber: syz [ 349.677875][ T5928] usb 4-1: config 0 descriptor?? [ 349.731963][ T8748] netlink: 132 bytes leftover after parsing attributes in process `syz.4.867'. [ 351.882631][ T5928] usb 4-1: USB disconnect, device number 16 [ 352.380416][ T5889] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 352.662655][ T5889] usb 5-1: unable to get BOS descriptor or descriptor too short [ 352.673869][ T5889] usb 5-1: not running at top speed; connect to a high speed hub [ 352.683863][ T5889] usb 5-1: config 1 interface 0 has no altsetting 0 [ 352.693866][ T5889] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 352.703605][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.712002][ T5889] usb 5-1: Product: syz [ 352.716280][ T5889] usb 5-1: Manufacturer: syz [ 352.721683][ T5889] usb 5-1: SerialNumber: syz [ 352.957445][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input11 [ 352.979394][ T5184] bcm5974 5-1:1.0: could not read from device [ 352.987845][ T5889] usb 5-1: USB disconnect, device number 13 [ 353.010413][ T5184] bcm5974 5-1:1.0: could not read from device [ 353.438376][ T8788] netlink: 92 bytes leftover after parsing attributes in process `syz.3.879'. [ 353.660748][ T5895] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 353.877192][ T5895] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 353.910389][ T5895] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 353.951785][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 353.961803][ T5895] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 354.306141][ T5895] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 354.348914][ T5895] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 354.398062][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 354.420734][ T5895] usb 2-1: Product: syz [ 354.434135][ T5895] usb 2-1: Manufacturer: syz [ 354.492240][ T5895] cdc_wdm 2-1:1.0: skipping garbage [ 354.505208][ T5895] cdc_wdm 2-1:1.0: skipping garbage [ 354.536507][ T5895] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 354.555588][ T8806] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[8806] [ 354.600882][ T5895] cdc_wdm 2-1:1.0: Unknown control protocol [ 355.563786][ T5908] usb 2-1: USB disconnect, device number 6 [ 357.561419][ T8832] netlink: 92 bytes leftover after parsing attributes in process `syz.1.895'. [ 357.597831][ T8831] syz.5.894 (8831): drop_caches: 2 [ 357.609736][ T8831] syz.5.894 (8831): drop_caches: 2 [ 357.726764][ T8834] fuse: Bad value for 'fd' [ 359.182795][ T8865] mmap: syz.0.906 (8865) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 359.529542][ T8874] netlink: 92 bytes leftover after parsing attributes in process `syz.4.910'. [ 360.730675][ T8882] fuse: Bad value for 'fd' [ 361.098108][ T8888] syz.3.914 (8888): drop_caches: 2 [ 361.105401][ T8888] syz.3.914 (8888): drop_caches: 2 [ 361.678070][ T8896] syz.4.916 (8896): drop_caches: 2 [ 361.691746][ T8896] syz.4.916 (8896): drop_caches: 2 [ 363.248628][ T5908] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 363.323239][ T5908] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 363.481598][ T1205] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 363.652802][ T5889] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 363.822656][ T1205] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.943761][ T5889] usb 1-1: unable to get BOS descriptor or descriptor too short [ 363.980994][ T1205] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 363.991806][ T5889] usb 1-1: not running at top speed; connect to a high speed hub [ 364.010302][ T1205] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 364.062774][ T5889] usb 1-1: config 1 interface 0 has no altsetting 0 [ 364.159282][ T1205] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 364.172711][ T5889] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 364.200968][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.215371][ T1205] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 364.234925][ T5889] usb 1-1: Product: syz [ 364.241655][ T5889] usb 1-1: Manufacturer: syz [ 364.248193][ T5889] usb 1-1: SerialNumber: syz [ 364.255239][ T1205] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 364.273380][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 364.281524][ T1205] usb 4-1: Product: syz [ 364.286019][ T1205] usb 4-1: Manufacturer: syz [ 364.297624][ T1205] cdc_wdm 4-1:1.0: skipping garbage [ 364.310276][ T1205] cdc_wdm 4-1:1.0: skipping garbage [ 364.352725][ T1205] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 364.359789][ T1205] cdc_wdm 4-1:1.0: Unknown control protocol [ 364.636204][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 364.744708][ T5184] bcm5974 1-1:1.0: could not read from device [ 364.780387][ T5895] usb 4-1: USB disconnect, device number 17 [ 364.875316][ T5184] bcm5974 1-1:1.0: could not read from device [ 364.878662][ T5889] usb 1-1: USB disconnect, device number 11 [ 365.380820][ T5184] bcm5974 1-1:1.0: could not read from device [ 365.655998][ T8946] syz.1.931 (8946): drop_caches: 2 [ 365.670070][ T8946] syz.1.931 (8946): drop_caches: 2 [ 370.260431][ T5895] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 370.594206][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 370.663732][ T5895] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 370.696892][ T1205] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.728574][ T5895] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 370.743792][ T1205] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.359062][ T5895] usb 2-1: config 1 has no interface number 1 [ 371.546519][ T5895] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 376.624429][ T5895] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.689212][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.798874][ T5895] usb 2-1: can't set config #1, error -32 [ 376.961317][ T9073] xt_socket: unknown flags 0x4c [ 376.993388][ T5895] usb 2-1: USB disconnect, device number 7 [ 378.420673][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.427014][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.130656][ T1205] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 379.323934][ T1205] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.350495][ T1205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.393377][ T1205] usb 1-1: config 0 has no interface number 0 [ 379.416778][ T1205] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 379.457230][ T1205] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 379.591344][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 379.635664][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.117471][ T1205] usb 1-1: config 0 descriptor?? [ 380.152525][ T1205] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 380.380217][ T5937] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 380.660450][ T5937] usb 6-1: Using ep0 maxpacket: 8 [ 380.737522][ T5937] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 380.820147][ T5937] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 380.895291][ T5937] usb 6-1: config 1 has no interface number 1 [ 381.038901][ T5937] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 381.555492][ T5937] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.586860][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 382.668628][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.678434][ T5937] usb 6-1: Manufacturer: ೵侻ਙȯ [ 382.823380][ T5889] usb 1-1: USB disconnect, device number 12 [ 386.539542][ T5937] usb 6-1: can't set config #1, error -71 [ 386.606531][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 386.627326][ T5937] usb 6-1: USB disconnect, device number 8 [ 387.695708][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1010'. [ 388.470175][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 388.651041][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 388.706140][ T24] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 388.743763][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.771707][ T24] usb 6-1: Product: syz [ 388.786166][ T24] usb 6-1: Manufacturer: syz [ 388.809200][ T24] usb 6-1: SerialNumber: syz [ 388.845714][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 388.866613][ T24] r8152-cfgselector 6-1: config 0 descriptor?? [ 389.101183][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 389.138120][ T24] r8152-cfgselector 6-1: bad CDC descriptors [ 389.609370][ T24] r8152-cfgselector 6-1: USB disconnect, device number 9 [ 391.659465][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1022'. [ 392.976024][ T9251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.992633][ T9258] fuse: Unknown parameter 'u00000000000000000000' [ 393.892233][ T9259] netlink: 'syz.1.1030': attribute type 11 has an invalid length. [ 393.900243][ T9259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1030'. [ 396.500743][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 399.031545][ T9313] fuse: Unknown parameter 'u00000000000000000000' [ 403.259645][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 405.869581][ T9378] fuse: Unknown parameter 'u00000000000000000000' [ 407.157982][ T9399] syz.3.1067 (9399): drop_caches: 2 [ 407.840718][ T9414] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1072'. [ 410.004981][ T51] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 410.575485][ T9436] fuse: Unknown parameter 'u0000000000000000000000000000000000000000' [ 413.754320][ T9463] syz.2.1086: attempt to access beyond end of device [ 413.754320][ T9463] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 413.767739][ T9463] FAT-fs (loop5): unable to read boot sector [ 414.061113][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 414.073137][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 414.082971][ T51] Bluetooth: hci3: hardware error 0x00 [ 416.121519][ T9483] fuse: Unknown parameter 'u0000000000000000000000000000000000000000' [ 416.522426][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 418.655816][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1101'. [ 419.831363][ T5850] non-paged memory [ 419.835468][ T5850] list_del corruption, ffff888077c21580->next is LIST_POISON1 (dead000000000100) [ 419.846964][ T5850] ------------[ cut here ]------------ [ 419.852517][ T5850] kernel BUG at lib/list_debug.c:58! [ 420.077109][ T5850] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 420.083593][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: kworker/u9:8 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 420.095742][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.105790][ T5850] Workqueue: hci5 hci_conn_timeout [ 420.110914][ T5850] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 420.117934][ T5850] Code: 00 8f e2 8b 48 89 de e8 b0 f6 5f fc 90 0f 0b 4c 89 e7 e8 35 6b 3b fd 48 c7 c7 60 8f e2 8b 48 89 de 4c 89 e2 e8 93 f6 5f fc 90 <0f> 0b 4c 89 e7 e8 18 6b 3b fd 48 c7 c7 c0 8f e2 8b 48 89 de 4c 89 [ 420.137534][ T5850] RSP: 0018:ffffc90003a07980 EFLAGS: 00010246 [ 420.143598][ T5850] RAX: 000000000000004e RBX: ffff888077c21580 RCX: b01e3fbf85d2b700 [ 420.151560][ T5850] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 420.159524][ T5850] RBP: ffffffff8a757700 R08: 0000000000000003 R09: 0000000000000004 [ 420.167501][ T5850] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dead000000000100 [ 420.175465][ T5850] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 420.183432][ T5850] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 420.192356][ T5850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.198930][ T5850] CR2: 00007fc9478e56c0 CR3: 00000000329e0000 CR4: 0000000000350ef0 [ 420.206895][ T5850] Call Trace: [ 420.210170][ T5850] [ 420.213093][ T5850] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 420.218753][ T5850] hci_cancel_connect_sync+0xc8/0x120 [ 420.224134][ T5850] hci_abort_conn+0x191/0x330 [ 420.228805][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.234433][ T5850] ? process_scheduled_works+0x9ef/0x17b0 [ 420.240331][ T5850] process_scheduled_works+0xae1/0x17b0 [ 420.245894][ T5850] ? __pfx_process_scheduled_works+0x10/0x10 [ 420.251880][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.257515][ T5850] worker_thread+0x8a0/0xda0 [ 420.262099][ T5850] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.268432][ T5850] ? __kthread_parkme+0x7b/0x200 [ 420.273383][ T5850] kthread+0x711/0x8a0 [ 420.277451][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 420.282566][ T5850] ? __pfx_kthread+0x10/0x10 [ 420.287149][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.292782][ T5850] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.297981][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.303609][ T5850] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.308812][ T5850] ? __pfx_kthread+0x10/0x10 [ 420.313398][ T5850] ret_from_fork+0x3fc/0x770 [ 420.317995][ T5850] ? __pfx_ret_from_fork+0x10/0x10 [ 420.323121][ T5850] ? __switch_to_asm+0x39/0x70 [ 420.327877][ T5850] ? __switch_to_asm+0x33/0x70 [ 420.332637][ T5850] ? __pfx_kthread+0x10/0x10 [ 420.337222][ T5850] ret_from_fork_asm+0x1a/0x30 [ 420.342005][ T5850] [ 420.345011][ T5850] Modules linked in: [ 420.350251][ T5850] ---[ end trace 0000000000000000 ]--- [ 420.356827][ T5850] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 420.365036][ T5850] Code: 00 8f e2 8b 48 89 de e8 b0 f6 5f fc 90 0f 0b 4c 89 e7 e8 35 6b 3b fd 48 c7 c7 60 8f e2 8b 48 89 de 4c 89 e2 e8 93 f6 5f fc 90 <0f> 0b 4c 89 e7 e8 18 6b 3b fd 48 c7 c7 c0 8f e2 8b 48 89 de 4c 89 [ 420.384951][ T5850] RSP: 0018:ffffc90003a07980 EFLAGS: 00010246 [ 420.391035][ T5850] RAX: 000000000000004e RBX: ffff888077c21580 RCX: b01e3fbf85d2b700 [ 420.398995][ T5850] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 420.407010][ T5850] RBP: ffffffff8a757700 R08: 0000000000000003 R09: 0000000000000004 [ 420.414997][ T5850] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dead000000000100 [ 420.422989][ T5850] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 420.430972][ T5850] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 420.439890][ T5850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.446528][ T5850] CR2: 00007fc9478e56c0 CR3: 00000000329e0000 CR4: 0000000000350ef0 [ 420.454544][ T5850] Kernel panic - not syncing: Fatal exception [ 420.460802][ T5850] Kernel Offset: disabled [ 420.465118][ T5850] Rebooting in 86400 seconds..