last executing test programs: 2m24.646178813s ago: executing program 2 (id=265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x20020000) 2m24.436123913s ago: executing program 2 (id=266): syz_emit_vhci(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/43, 0x2b}], 0x1) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2m21.975165076s ago: executing program 2 (id=271): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x82d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$vcsu(0x0, 0x6, 0x9c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x328, 0x0, &(0x7f0000000080)=0x0, 0x0) io_uring_setup(0x669, &(0x7f0000000140)={0x0, 0x0, 0x400}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x3, &(0x7f00000001c0), 0x1, 0x40}) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_dev$sg(0x0, 0x0, 0x103302) 2m21.138108335s ago: executing program 2 (id=273): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="2e00000010008188e6b62ac03772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r7, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r8, 0x32dc, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44030000", @ANYRES16=0x0, @ANYBLOB="280227bd7000fbdbdf2518000000050005000000000008000700800400001803028004000100a30005000d097139bb6bfc03e236ed397e38b36c8b5adae5e07f141d641963eca171a47208e86e719316bbc11cb0a9da6b4bbde5dc678675dd41892f5a017c3f1d82a5e09809d79c9f21e446d323e9284c8f5f43ec5cbd78302a5fddcfb5426c74384e8284a3f4642d6585765692c375757e70705f8619bfe92b7a905e1624353a4a89072fe8321f4ef1a6d296a8b8acc37dc78c77c2283d3a4d8fa3f24fad98c2063ae2dcb810008cfe0400c2206fa890f13e738b0d15f75729cef3bef172d330a087f9a3e757a3d5ef3c03000000f235cde4372e8cd657a36dfb7c33d1c1b37fc7c43db97dfc0b7c3b8854aca92b53d5c7cfca18d0ab7733e98343ff53b2685141dbf7704627ed65b1d71d185b5b7359c7d881eda32da519597625310a634aa6d11dcc70c6edf4036595e08cf4129c037ce705224329360bec137d229abd16da19f8584e50d0326dfd16a92e03395143238ae848f3957e35b88d7e65f4ffc533c474eb1dbcf84a89e5e8de2cc4cb26f07d07df7f5e4ab24924a1f4906c3c6ddde1312a2dbffb75e6b8e01ba542f9bdd1a8db32344874685b899ff5738e0606b81562c7b60000005c0103802c000180070002003a57000004000300080001000200000008000100760000000400030008000100010001001c0001800a000200776c616e31000000040003000800010065040000100001800c0002006e6c383032313100040001805000018008000100ff000000040003000800010001000000040003000c0002006e6c3830323131000800010001000080040003000a000218776c616e31000000050002002900000008000100060000000c00018008000100ff030000280001800d0002002d253a277b212f2d00000000130002006272696467655f736c6176655f3000000c00018005000200000000002c00018008000100008000000a000200776c616e31000000130002006272696467655f736c6176655f3000004000018004000300080001000a00000004000300080001008e0b000008000100020000000c0002006e6c38303231310004000300080001000500000004000300080002000008000008000200010000800800077c10000000231b0ce881d50b3b14bf41e5d237a39fed9a89d79f4f1e4eda21c3fd08780434d16f065b5932e2622533a6d215e47f6c5414095b9a5a81d7a46559381130"], 0x344}, 0x1, 0x0, 0x0, 0xc005}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2m20.015090581s ago: executing program 2 (id=275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="22684de22b8749f5f0ffffff0000000000000000000000004d5af22a933398a016cb2c1af90c8b8c2941729504c7529645492ae8060e4feac98509eb9f9a8a1c71435647196efd7291b29e1074be209d6ebb7bd59a4aed8d533ff0073ed24cb6b869113a0c923533688f8455"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'veth0_to_team\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = dup(r3) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}}, 0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x49, 0x80, 0xe99, 0x1, {{0x20, 0x4, 0x1, 0x36, 0x80, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x27, 0xbb, [@private=0xa010102, @private=0xa010100, @multicast1, @remote, @remote, @empty, @private=0xa010100, @local, @multicast1]}, @timestamp_prespec={0x44, 0x34, 0x47, 0x3, 0x7, [{@broadcast, 0x1}, {@broadcast, 0x1}, {@broadcast, 0x9}, {@multicast1, 0x352}, {@remote, 0x6}, {@multicast1, 0x5}]}, @end, @end, @generic={0x0, 0xc, "a8daf0b1b18b91b667ba"}]}}}}}) sendto$packet(r4, &(0x7f0000000040)="a5c19257de28b957bff499a66b603c3ed99bdb69ad6f42d0d4497f4a6644e20e97ba41c88d77e3e47e29", 0x2a, 0x0, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x10, 0x6, @broadcast}, 0x14) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 2m19.522235568s ago: executing program 2 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x351a, 0x100, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m4.039747923s ago: executing program 32 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x351a, 0x100, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m3.161874554s ago: executing program 1 (id=409): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/170, 0xaa}], 0x1, 0x6, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000B00004093\x00'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8921, &(0x7f00000001c0)={'veth1_to_hsr\x00', @random="fa6442c6431f"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000200)={&(0x7f00000000c0)=""/38, 0x26}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) pwritev2(r4, &(0x7f00000013c0)=[{0x0}], 0x1, 0xa, 0xb, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m2.409698575s ago: executing program 1 (id=410): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) capset(0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6001012000703afffe8000000000000000000000000000bbff020000000000000000000000000001860090634835c6000040000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b0500000002000100000000040026a0b2dcec3155a23b15ce8a0d14edd7dfdb5d19648c277d56a89588d417b6f4cd11b817c717b970ea07"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r3}, 0x10) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) epoll_create1(0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) 1m1.536099057s ago: executing program 1 (id=411): ptrace(0x10, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d12"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m0.391585856s ago: executing program 1 (id=414): ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, &(0x7f0000000480)) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x100}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) write$FUSE_ENTRY(r9, &(0x7f0000000340)={0x90, 0x0, r7, {0x6, 0x0, 0xa, 0x0, 0x800, 0x7, {0x5, 0x6, 0x7ff, 0x5, 0x51b5, 0x4, 0xfffffff9, 0x7fffffff, 0x800000f5, 0x6000, 0x9, r8, 0x0, 0x6, 0x3}}}, 0x90) dup3(r9, r6, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x80000001]}}) setuid(r5) 58.897553787s ago: executing program 1 (id=419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x8) open$dir(0x0, 0x8000, 0x40) openat(0xffffffffffffff9c, 0x0, 0x161c80, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r7 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r4, 0x4ce1, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) 58.65759237s ago: executing program 1 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) 57.774625253s ago: executing program 33 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) 45.97731836s ago: executing program 0 (id=446): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca208004b54", 0x34, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 45.082200015s ago: executing program 0 (id=447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES32=r0], 0x0) 42.418085237s ago: executing program 0 (id=454): io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000400)="60f855803236f3030000", 0xa, 0x0, 0x0, 0x2}]) 42.021905094s ago: executing program 0 (id=457): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) dup2(r2, r0) socket$can_bcm(0x1d, 0x2, 0x2) 41.543243479s ago: executing program 0 (id=460): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x1, 0xc, 0x5, 0x401, 0x66, "9029ae779c789d090000130300000000aa9aa7", 0x2, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) 40.621701947s ago: executing program 0 (id=462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(r1, 0x4, &(0x7f0000000040)={0x2, 0x9}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x1e, 0x7, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd25, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, 0x1d92, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5c, &(0x7f0000000300)={@random="358035b0883a", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x1}}, {@x25={0x805, {0x1, 0x3, 0x13, "cd40668b0d85ed90b9c671493009f9a8cc506fe7ebf779e71b738c4d452097509fa13113091bc692939c5ec00aeefcc6e6bc933ad56f402d9927e48ba218864ffe46e8"}}}}, &(0x7f0000000480)={0x0, 0x2, [0x1f0, 0x300, 0xb16, 0x146]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ffff0000000000002700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001d00b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r7, 0x5) landlock_restrict_self(0xffffffffffffffff, 0x4) r8 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_enter(r8, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) 40.15974776s ago: executing program 34 (id=462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(r1, 0x4, &(0x7f0000000040)={0x2, 0x9}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x1e, 0x7, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd25, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, 0x1d92, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5c, &(0x7f0000000300)={@random="358035b0883a", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x1}}, {@x25={0x805, {0x1, 0x3, 0x13, "cd40668b0d85ed90b9c671493009f9a8cc506fe7ebf779e71b738c4d452097509fa13113091bc692939c5ec00aeefcc6e6bc933ad56f402d9927e48ba218864ffe46e8"}}}}, &(0x7f0000000480)={0x0, 0x2, [0x1f0, 0x300, 0xb16, 0x146]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ffff0000000000002700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001d00b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r7, 0x5) landlock_restrict_self(0xffffffffffffffff, 0x4) r8 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_enter(r8, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) 10.507415737s ago: executing program 5 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 10.426110954s ago: executing program 3 (id=518): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x1}) 10.14975724s ago: executing program 3 (id=519): syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x88100) epoll_create(0x2) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x100) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000140)={0x9, 0x378, 0x8001, 0x3, 0x6, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x8004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491c6170000501d0000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xed0}], 0x1}}], 0x8, 0x0, 0x0) 8.872085321s ago: executing program 3 (id=520): socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x32, &(0x7f00000003c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000380)='net/rt_acct\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) 7.080279331s ago: executing program 4 (id=523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001000000000000080000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xfffdfffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0xffffffffffffff15, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000000001, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 6.831118774s ago: executing program 6 (id=463): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='source', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xb, &(0x7f00000001c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 6.66594611s ago: executing program 4 (id=524): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000080)='GPL\x00', 0xaeef}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) mount$9p_rdma(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x10000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 5.882305304s ago: executing program 5 (id=525): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) 5.124417265s ago: executing program 5 (id=526): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) msgrcv(0x0, 0x0, 0x0, 0x0, 0x800) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfffffffffffffffb, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x6, {}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) 4.369671347s ago: executing program 4 (id=527): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102384, 0x18ff0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, 0x0, 0x4000085) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$unix(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000080)="96da7a", 0x3}, {0x0}], 0x2, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x800) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 3.993416562s ago: executing program 3 (id=528): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) socket$inet6(0xa, 0x3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@hyper}) r5 = fanotify_init(0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000000c0)={0x30000015}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0xc, 0x0, 0x5e, 0x2000001, 0x4, 0x1c, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) 3.683762751s ago: executing program 5 (id=529): socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00), 0xe, 0x51) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000200)=0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, 0x0, &(0x7f0000000580)=0x1e) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c61"], 0x50}}, 0x80) connect$inet(r7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xa010, 0x54014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc005}, 0x0) 3.412697338s ago: executing program 4 (id=530): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x1a, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x7, "e80ee304ecb784"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x130, 0x29, 0x36, {0x5e, 0x22, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x6, [0x7fff, 0x1ff, 0x2133, 0x80, 0x9]}}, @generic={0x8, 0x55, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab09"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x2b0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.570761497s ago: executing program 6 (id=531): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x19}}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9c18, 0x7}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x68}}, 0x0) 2.294108584s ago: executing program 5 (id=532): fsopen(&(0x7f0000000e00)='adfs\x00', 0x1) 2.197421473s ago: executing program 6 (id=533): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 2.12001996s ago: executing program 3 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x88000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x10, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000"], &(0x7f0000000200)='GPL\x00', 0x6, 0x1000, &(0x7f0000032680)=""/4096, 0x41100, 0xbc16a17751e7d86b, '\x00', 0x0, @fallback=0x3, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x3, 0x1, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280), 0x10, 0x5cc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8d88897040fd45e8, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000000800020005007d91"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1f) 1.918156289s ago: executing program 6 (id=535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a0000001400078008001140000000000500150000000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) 1.918015299s ago: executing program 5 (id=536): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x63, 0x200, 0x0, 0x0}], 0x1}) 1.623285677s ago: executing program 4 (id=537): r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 132.576548ms ago: executing program 6 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x851, 0x5108) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100), &(0x7f0000000240)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fdatasync(r1) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x1}, {0x5, 0xc8}}}}, 0x9) r3 = socket$inet6(0xa, 0x2, 0x0) unshare(0x22020600) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="144004", @ANYRES16=r5, @ANYBLOB="796100000000fcdbdf257e000000"], 0x14}}, 0x4000854) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4a24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb}, 0x17) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 74.254314ms ago: executing program 4 (id=539): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 0s ago: executing program 3 (id=540): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103109b75c113090582"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8800000010000104000000000300000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a54001280110001006272696467655f736c617665000000003c000580080025000000000006001f00d500000005001e0000000000050007000000000005000500013c000005001c00010000"], 0x88}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={0x0}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a80)=ANY=[@ANYBLOB="180000001600010a00000000010000000200130004002280d0feb83e41fdc6196b1e6dfcd812e17d7d5d6b590bf46cd3f21c4f23d9739bc9720ebd5601c3014aee83e4158b9d2f627979b0d3b1fead20e33da15099aa88364489971523416cc6fbb2263aa96dbdf2bb76d51729ea42b519798ef330f638a4fbf982df3fbb10b1e8c6a310cdce2c1c8f917a08cb976b83664326e23832e4318371cbc9b04c95cc863c4f6b3208beef3d80d3824bb5a854c4c1dcc0bbc0c5dab2c635100855aab22103431c1ea35871c8ea9d96c22accb0c253becfba7b47d0c898a7a155543ead46009d958eb7b2f9c74f0d0415406152c5ea126607"], 0x18}}, 0x0) syz_usb_disconnect(r0) r4 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) kernel console output (not intermixed with test programs): mode [ 87.980550][ T5768] hsr_slave_1: entered promiscuous mode [ 87.986802][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.994686][ T5768] Cannot create hsr debugfs directory [ 88.285946][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.305517][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.316317][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.346377][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.410967][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.423131][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.433400][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.466937][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.559451][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.583497][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.612293][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.625156][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.719995][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.733095][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.746003][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.758964][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.864886][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.882874][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.913232][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.945078][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.952653][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.966155][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.015124][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.022338][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.033168][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.040393][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.080592][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.087874][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.130163][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.199023][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.242434][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.263676][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.313815][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.333137][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.340428][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.351850][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.359078][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.421018][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.428624][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.515421][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.522692][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.529985][ T5770] Bluetooth: hci0: command tx timeout [ 89.535453][ T5770] Bluetooth: hci2: command tx timeout [ 89.607728][ T5770] Bluetooth: hci3: command tx timeout [ 89.688312][ T5770] Bluetooth: hci1: command tx timeout [ 89.852059][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.875404][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.042738][ T5773] veth0_vlan: entered promiscuous mode [ 90.053280][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.068001][ T5765] veth0_vlan: entered promiscuous mode [ 90.096061][ T5773] veth1_vlan: entered promiscuous mode [ 90.123952][ T5765] veth1_vlan: entered promiscuous mode [ 90.176760][ T5773] veth0_macvtap: entered promiscuous mode [ 90.204736][ T5773] veth1_macvtap: entered promiscuous mode [ 90.220255][ T5766] veth0_vlan: entered promiscuous mode [ 90.252350][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.282598][ T5766] veth1_vlan: entered promiscuous mode [ 90.295660][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.312100][ T5765] veth0_macvtap: entered promiscuous mode [ 90.325500][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.335651][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.346361][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.355608][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.371883][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.381778][ T5765] veth1_macvtap: entered promiscuous mode [ 90.480436][ T5766] veth0_macvtap: entered promiscuous mode [ 90.499713][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.511300][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.526126][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.565734][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.577920][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.591712][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.615179][ T5766] veth1_macvtap: entered promiscuous mode [ 90.639954][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.650297][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.659710][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.668786][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.683779][ T5768] veth0_vlan: entered promiscuous mode [ 90.695245][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.709640][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.743203][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.754358][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.764360][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.776601][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.791365][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.825881][ T5768] veth1_vlan: entered promiscuous mode [ 90.839459][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.850680][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.860661][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.871229][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.883041][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.893394][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.908476][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.924577][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.936131][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.946971][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.956069][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.034960][ T5768] veth0_macvtap: entered promiscuous mode [ 91.083024][ T5768] veth1_macvtap: entered promiscuous mode [ 91.116834][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.133903][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.259622][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.261608][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.280075][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.295466][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.310957][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.326049][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.343687][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.344571][ T5860] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.355840][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.384225][ T5860] syz.1.2[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.396269][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.404251][ T5860] loop1: detected capacity change from 0 to 164 [ 91.430582][ T5860] ISOFS: unable to read i-node block [ 91.439009][ T5860] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 91.463389][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.487400][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.498286][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.509396][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.519550][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.530876][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.556794][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.596988][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.608586][ T5770] Bluetooth: hci2: command tx timeout [ 91.614067][ T5770] Bluetooth: hci0: command tx timeout [ 91.627674][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.656091][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.687372][ T5770] Bluetooth: hci3: command tx timeout [ 91.708680][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.737081][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.746982][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.772942][ T5770] Bluetooth: hci1: command tx timeout [ 91.824316][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.839797][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.257609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 92.267976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.792284][ T5770] Bluetooth: hci0: command tx timeout [ 93.798666][ T5770] Bluetooth: hci2: command tx timeout [ 93.804156][ T5770] Bluetooth: hci3: command tx timeout [ 93.810230][ T788] cfg80211: failed to load regulatory.db [ 93.850466][ T5778] Bluetooth: hci1: command tx timeout [ 94.019783][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.055039][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.111873][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.167994][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.529541][ T5857] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.801937][ T5857] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 95.822074][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.837243][ T5857] usb 4-1: Product: syz [ 95.842174][ T5857] usb 4-1: Manufacturer: syz [ 95.847423][ T5857] usb 4-1: SerialNumber: syz [ 96.835986][ T5878] loop2: detected capacity change from 0 to 32768 [ 96.842657][ C0] sched: RT throttling activated [ 96.866649][ T5857] usb 4-1: config 0 descriptor?? [ 96.901913][ T5857] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 97.624375][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.815170][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.008154][ T5884] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.192346][ T5889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.249610][ T5857] gspca_sunplus: reg_r err -110 [ 98.346845][ T5889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.548748][ T5876] loop1: detected capacity change from 0 to 32768 [ 98.631289][ T5876] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop1": -EINTR [ 98.811643][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.868451][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.961812][ T5887] loop2: detected capacity change from 0 to 32768 [ 99.027771][ T5887] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.9 (5887) [ 99.117616][ T5887] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 99.147321][ T5887] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 99.178025][ T5887] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 99.215170][ T5887] BTRFS info (device loop2): use lzo compression, level 0 [ 99.233289][ T5887] BTRFS info (device loop2): using free space tree [ 99.414707][ T5887] BTRFS info (device loop2): enabling ssd optimizations [ 99.455265][ T5887] BTRFS info (device loop2): auto enabling async discard [ 99.560816][ T5904] loop1: detected capacity change from 0 to 32768 [ 99.592988][ T5904] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.11 (5904) [ 99.651216][ T5904] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 99.666775][ T5892] loop0: detected capacity change from 0 to 32768 [ 99.685777][ T5904] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 99.720512][ T5892] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.10 (5892) [ 99.740352][ T5904] BTRFS info (device loop1): enabling disk space caching [ 99.767965][ T5904] BTRFS info (device loop1): force clearing of disk cache [ 99.782253][ T5904] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 99.808450][ T5904] BTRFS info (device loop1): use zstd compression, level 3 [ 99.811810][ T5892] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 99.837727][ T5904] BTRFS info (device loop1): disk space caching is enabled [ 99.877531][ T5892] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 99.903772][ T5892] BTRFS info (device loop0): using free space tree [ 99.924393][ T5858] usb 4-1: USB disconnect, device number 2 [ 100.127384][ T5904] BTRFS info (device loop1): enabling ssd optimizations [ 100.157605][ T5904] BTRFS info (device loop1): auto enabling async discard [ 100.236756][ T5904] BTRFS info (device loop1): rebuilding free space tree [ 100.248974][ T5892] BTRFS info (device loop0): enabling ssd optimizations [ 100.256001][ T5892] BTRFS info (device loop0): auto enabling async discard [ 100.427929][ T5904] BTRFS info (device loop1): disabling free space tree [ 100.467380][ T5904] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.514524][ T5904] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.837037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 100.850497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 100.859456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.367773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.473900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.482658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.537525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.546101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.133777][ T5773] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 104.846118][ T5972] loop3: detected capacity change from 0 to 512 [ 104.906861][ T5972] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 105.135459][ T5972] loop3: detected capacity change from 0 to 1024 [ 105.250146][ T5972] hfsplus: unable to parse mount options [ 105.331801][ T5765] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 105.441441][ T5766] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 106.240821][ T5994] hub 6-0:1.0: USB hub found [ 106.443636][ T5994] hub 6-0:1.0: 1 port detected [ 107.001532][ T5999] sctp: failed to load transform for md5: -2 [ 107.965937][ T6007] syz.3.21 (6007): drop_caches: 2 [ 108.581096][ T1191] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.827550][ T1191] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 108.854608][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.870927][ T1191] usb 2-1: Product: syz [ 108.885115][ T1191] usb 2-1: Manufacturer: syz [ 108.901821][ T1191] usb 2-1: SerialNumber: syz [ 108.955935][ T5997] loop2: detected capacity change from 0 to 32768 [ 108.987578][ T5997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.16 (5997) [ 109.080699][ T5997] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.124905][ T5997] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 109.147857][ T5997] BTRFS error (device loop2): unrecognized mount option 'fsuuid=g10cad10-3561-409d-6267-6f1df324' [ 109.180460][ T5997] BTRFS error (device loop2): open_ctree failed: -22 [ 109.222652][ T1191] mdc800 2-1:39.0: probe fails -> wrong Number of Configuration [ 109.285640][ T1191] usb 2-1: USB disconnect, device number 2 [ 109.383904][ T5986] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (5986) [ 117.813497][ T6084] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.453924][ T6103] Zero length message leads to an empty skb [ 121.260213][ T6112] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.343837][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 125.141921][ T6135] netlink: 'syz.1.55': attribute type 3 has an invalid length. [ 126.227517][ T5858] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.417385][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 126.438669][ T5858] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 126.448751][ T5858] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 126.458295][ T5858] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 126.473571][ T5858] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 126.484772][ T5858] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 126.509031][ T5858] usb 2-1: config 0 has no interface number 0 [ 126.529582][ T5858] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 126.547189][ T5858] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 126.557778][ T5858] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 126.573431][ T5858] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.588630][ T5858] usb 2-1: config 0 interface 125 has no altsetting 0 [ 126.599818][ T5858] usb 2-1: config 0 interface 125 has no altsetting 2 [ 126.632373][ T5858] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 126.643047][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.655583][ T5858] usb 2-1: Product: syz [ 126.665624][ T5858] usb 2-1: Manufacturer: syz [ 126.677461][ T5858] usb 2-1: SerialNumber: syz [ 126.726882][ T5858] usb 2-1: config 0 descriptor?? [ 126.789299][ T5858] usb 2-1: selecting invalid altsetting 2 [ 127.355723][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 127.379662][ T6151] IPVS: Error joining to the multicast group [ 127.448567][ T5770] Bluetooth: hci3: command tx timeout [ 127.553265][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 127.857546][ T5858] get_1284_register timeout [ 127.863165][ C1] usb 2-1: async_complete: urb error -104 [ 127.869281][ C1] usb 2-1: async_complete: urb error -104 [ 127.875144][ C1] usb 2-1: async_complete: urb error -104 [ 127.881002][ C1] usb 2-1: async_complete: urb error -104 [ 127.911743][ T5858] uss720: probe of 2-1:0.125 failed with error -5 [ 128.223094][ T6134] orangefs_mount: mount request failed with -4 [ 128.405669][ T5858] usb 2-1: USB disconnect, device number 3 [ 129.189661][ T6174] JFS: discard option not supported on device [ 129.196928][ T6174] Mount JFS Failure: -22 [ 129.201414][ T6174] jfs_mount failed w/return code = -22 [ 132.623669][ T5757] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 132.663949][ T5757] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.161877][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.205688][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.709158][ T6206] ip6erspan0: entered promiscuous mode [ 139.683538][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 139.694181][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'. [ 139.828943][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 139.838075][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'. [ 142.253983][ T6245] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 142.426011][ T6245] veth0_vlan: entered allmulticast mode [ 142.499500][ T6245] veth0_vlan: left promiscuous mode [ 142.507915][ T6245] veth0_vlan: entered promiscuous mode [ 142.518787][ T6245] team0: Device veth0_vlan failed to register rx_handler [ 144.869989][ T6245] syz.3.85 (6245) used greatest stack depth: 20584 bytes left [ 145.722962][ T6269] syz.0.92 uses obsolete (PF_INET,SOCK_PACKET) [ 146.781845][ T6272] capability: warning: `syz.1.90' uses deprecated v2 capabilities in a way that may be insecure [ 148.448283][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 148.807335][ T5814] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.023829][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 149.036023][ T5814] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.075823][ T5814] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.158333][ T5814] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.249496][ T5814] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 149.334987][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 149.373441][ T5814] usb 3-1: Product: syz [ 149.388146][ T5814] usb 3-1: Manufacturer: syz [ 149.392829][ T5814] usb 3-1: SerialNumber: syz [ 150.142406][ T5814] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 152.070740][ T23] usb 3-1: USB disconnect, device number 2 [ 156.782014][ T6361] input: syz0 as /devices/virtual/input/input6 [ 157.286601][ T23] appletouch 3-1:1.0: input: appletouch disconnected [ 160.287631][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 160.444048][ T6401] syzkaller1: entered promiscuous mode [ 160.449776][ T6401] syzkaller1: entered allmulticast mode [ 160.569243][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 160.587608][ T27] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 160.672541][ T27] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 160.697265][ T27] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 160.716989][ T27] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 160.780989][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.797763][ T27] usb 2-1: Product: syz [ 160.816998][ T27] usb 2-1: Manufacturer: syz [ 160.822962][ T27] usb 2-1: SerialNumber: syz [ 160.875350][ T27] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 161.023282][ T27] imon 2-1:155.0: unable to initialize intf0, err -19 [ 161.031414][ T27] imon:imon_probe: failed to initialize context! [ 161.047369][ T27] imon 2-1:155.0: unable to register, err -19 [ 161.852615][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.861588][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.457562][ T5857] usb 2-1: USB disconnect, device number 4 [ 165.789399][ T6435] 9pnet_virtio: no channels available for device syz [ 166.647919][ T6435] ======================================================= [ 166.647919][ T6435] WARNING: The mand mount option has been deprecated and [ 166.647919][ T6435] and is ignored by this kernel. Remove the mand [ 166.647919][ T6435] option from the mount to silence this warning. [ 166.647919][ T6435] ======================================================= [ 166.717866][ T6435] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 166.901888][ T6435] overlayfs: failed to look up (tracing) for ino (-66) [ 169.050548][ T6468] process 'syz.1.149' launched '/dev/fd/10' with NULL argv: empty string added [ 174.556475][ T6512] binder: 6502:6512 ioctl c0306201 0 returned -14 [ 177.048865][ T1191] libceph: connect (1)[c::]:6789 error -101 [ 177.057663][ T1191] libceph: mon0 (1)[c::]:6789 connect error [ 177.325081][ T23] libceph: connect (1)[c::]:6789 error -101 [ 177.558744][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 177.621414][ T6543] ceph: No mds server is up or the cluster is laggy [ 180.167441][ T1191] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 180.395094][ T1191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.416356][ T1191] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.427216][ T1191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.477892][ T1191] usb 1-1: config 0 descriptor?? [ 181.017722][ T1191] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 181.091985][ T1191] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input8 [ 181.497700][ T1191] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 183.213919][ T6599] genirq: Flags mismatch irq 10. 00000000 (comedi_parport) vs. 00000080 (virtio2) [ 183.227542][ T6599] Bluetooth: MGMT ver 1.22 [ 183.937598][ T8] usb 1-1: USB disconnect, device number 2 [ 186.462061][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 186.867418][ T5824] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 187.964437][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 187.997187][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 188.006400][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.017444][ T5824] usb 3-1: config 0 has no interfaces? [ 188.023074][ T5824] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 188.861151][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.895190][ T5824] usb 3-1: config 0 descriptor?? [ 188.917294][ T23] usb 4-1: device descriptor read/64, error -71 [ 189.207313][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 189.377908][ T23] usb 4-1: device descriptor read/64, error -71 [ 189.607969][ T23] usb usb4-port1: attempt power cycle [ 189.863070][ T6662] syz.1.201: attempt to access beyond end of device [ 189.863070][ T6662] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 189.877927][ T6662] syz.1.201: attempt to access beyond end of device [ 189.877927][ T6662] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 189.890909][ T6662] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 189.902852][ T6662] syz.1.201: attempt to access beyond end of device [ 189.902852][ T6662] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 189.915880][ T6662] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 189.933711][ T6662] syz.1.201: attempt to access beyond end of device [ 189.933711][ T6662] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 189.949297][ T6662] syz.1.201: attempt to access beyond end of device [ 189.949297][ T6662] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 189.962316][ T6662] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 189.973155][ T6662] syz.1.201: attempt to access beyond end of device [ 189.973155][ T6662] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 189.986245][ T6662] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 190.001490][ T6662] syz.1.201: attempt to access beyond end of device [ 190.001490][ T6662] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 190.016233][ T6662] syz.1.201: attempt to access beyond end of device [ 190.016233][ T6662] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 190.029381][ T6662] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 190.039863][ T6662] syz.1.201: attempt to access beyond end of device [ 190.039863][ T6662] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 190.053880][ T6662] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 190.066380][ T6662] syz.1.201: attempt to access beyond end of device [ 190.066380][ T6662] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 190.080064][ T6662] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 190.090596][ T6662] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 190.100278][ T6662] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 191.915953][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.924892][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.209550][ T23] usb 3-1: USB disconnect, device number 3 [ 193.270634][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 193.619185][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 193.753783][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 193.874661][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 193.919822][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 193.952013][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.974285][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 193.997618][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.027696][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 194.047272][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 194.078497][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 194.102494][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.122841][ T9] usb 4-1: config 0 descriptor?? [ 194.318835][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.340637][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.359294][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.398627][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 194.415240][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.441628][ T9] usb 4-1: USB disconnect, device number 6 [ 194.470075][ T9] usblp0: removed [ 194.570871][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.581111][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.931089][ T6654] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.940086][ T6654] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.949536][ T6654] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.958517][ T6654] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.988442][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 195.237225][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 195.257996][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 157 [ 195.293852][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.327180][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 195.380086][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 195.393673][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.413851][ T9] usb 4-1: Product: syz [ 195.418485][ T9] usb 4-1: Manufacturer: syz [ 195.423218][ T9] usb 4-1: SerialNumber: syz [ 195.437962][ T9] usb 4-1: config 0 descriptor?? [ 195.470483][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 195.488353][ T9] port100 4-1:0.0: NFC: Could not get supported command types [ 195.754014][ T788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 195.767987][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 195.994602][ T23] usb 3-1: config 0 has no interfaces? [ 196.019139][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 196.029122][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 196.037619][ T23] usb 3-1: Product: syz [ 196.042279][ T23] usb 3-1: Manufacturer: syz [ 196.042873][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.047259][ T23] usb 3-1: SerialNumber: syz [ 196.106996][ T23] usb 3-1: config 0 descriptor?? [ 196.177490][ T5757] usb 4-1: USB disconnect, device number 7 [ 196.207245][ T788] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 196.244088][ T788] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 196.254791][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.271768][ T788] usb 2-1: config 0 descriptor?? [ 196.392488][ T6691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.211'. [ 196.717310][ T5757] usb 3-1: USB disconnect, device number 4 [ 197.191398][ T788] kovaplus 0003:1E7D:2D50.0003: item fetching failed at offset 2/5 [ 197.274230][ T788] kovaplus 0003:1E7D:2D50.0003: parse failed [ 197.294850][ T788] kovaplus: probe of 0003:1E7D:2D50.0003 failed with error -22 [ 197.358733][ T788] usb 2-1: USB disconnect, device number 5 [ 197.894789][ T5986] udevd[5986]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 198.845050][ T6724] bio_check_eod: 2 callbacks suppressed [ 198.845094][ T6724] syz.2.220: attempt to access beyond end of device [ 198.845094][ T6724] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 198.864568][ T6724] hpfs: hpfs_map_sector(): read error [ 199.828958][ T28] audit: type=1326 audit(1766323156.389:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.2.224" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b1218f749 code=0x0 [ 199.887512][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 200.024209][ T6713] syz.1.218: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 200.044149][ T6713] CPU: 0 PID: 6713 Comm: syz.1.218 Not tainted syzkaller #0 [ 200.051510][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.061628][ T6713] Call Trace: [ 200.064936][ T6713] [ 200.067897][ T6713] dump_stack_lvl+0x16c/0x230 [ 200.072624][ T6713] ? show_regs_print_info+0x20/0x20 [ 200.077863][ T6713] ? load_image+0x3b0/0x3b0 [ 200.082398][ T6713] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 200.088847][ T6713] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 200.095385][ T6713] warn_alloc+0x210/0x300 [ 200.099755][ T6713] ? zone_watermark_ok_safe+0x230/0x230 [ 200.105338][ T6713] ? _raw_spin_unlock+0x28/0x40 [ 200.110244][ T6713] ? netlink_rcv_skb+0x216/0x480 [ 200.115215][ T6713] __vmalloc_node_range+0x662/0x1320 [ 200.120538][ T6713] ? __asan_memset+0x22/0x40 [ 200.125190][ T6713] ? free_vm_area+0x50/0x50 [ 200.129743][ T6713] ? kvmalloc_node+0x70/0x180 [ 200.134468][ T6713] ? rcu_is_watching+0x15/0xb0 [ 200.139265][ T6713] ? kvmalloc_node+0x70/0x180 [ 200.143969][ T6713] ? trace_kmalloc+0x1f/0xa0 [ 200.148591][ T6713] kvmalloc_node+0x13f/0x180 [ 200.153222][ T6713] ? hash_netport4_resize+0x232/0x1b50 [ 200.158714][ T6713] hash_netport4_resize+0x232/0x1b50 [ 200.164032][ T6713] ? hash_netport4_uadt+0xc1f/0xed0 [ 200.169272][ T6713] ? hash_netport4_uadt+0xed0/0xed0 [ 200.174497][ T6713] ? hash_netport4_kadt+0x560/0x560 [ 200.179730][ T6713] ? _local_bh_enable+0xa0/0xa0 [ 200.184621][ T6713] call_ad+0x43f/0xae0 [ 200.188742][ T6713] ? ip_set_ad+0x930/0x930 [ 200.193223][ T6713] ? __nla_parse+0x40/0x50 [ 200.197690][ T6713] ip_set_ad+0x787/0x930 [ 200.201965][ T6713] ? trace_raw_output_contention_end+0xd0/0xd0 [ 200.208154][ T6713] ? ip_set_dump_done+0x1e0/0x1e0 [ 200.213223][ T6713] ? rcu_is_watching+0x15/0xb0 [ 200.218045][ T6713] nfnetlink_rcv_msg+0xb49/0x1130 [ 200.223171][ T6713] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.229275][ T6713] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 200.234521][ T6713] ? nfnetlink_unbind+0x160/0x160 [ 200.239597][ T6713] ? __dev_queue_xmit+0x1a64/0x35a0 [ 200.244832][ T6713] ? __netlink_deliver_tap+0x5ab/0x830 [ 200.250355][ T6713] ? netlink_deliver_tap+0x19c/0x1b0 [ 200.255689][ T6713] ? netlink_unicast+0x72c/0x8d0 [ 200.260656][ T6713] ? netlink_sendmsg+0x8c1/0xbe0 [ 200.265617][ T6713] ? ____sys_sendmsg+0x5bf/0x950 [ 200.270586][ T6713] ? ___sys_sendmsg+0x220/0x290 [ 200.275460][ T6713] ? __se_sys_sendmsg+0x1a5/0x270 [ 200.280526][ T6713] ? do_syscall_64+0x55/0xb0 [ 200.285157][ T6713] netlink_rcv_skb+0x216/0x480 [ 200.289956][ T6713] ? nfnetlink_unbind+0x160/0x160 [ 200.295019][ T6713] ? netlink_ack+0x1110/0x1110 [ 200.299850][ T6713] ? apparmor_capable+0x137/0x1a0 [ 200.304923][ T6713] ? bpf_lsm_capable+0x9/0x10 [ 200.309665][ T6713] ? security_capable+0x89/0xb0 [ 200.314551][ T6713] nfnetlink_rcv+0x274/0x2180 [ 200.319299][ T6713] ? __local_bh_enable_ip+0x12e/0x1c0 [ 200.324715][ T6713] ? lockdep_hardirqs_on+0x98/0x150 [ 200.329957][ T6713] ? __local_bh_enable_ip+0x12e/0x1c0 [ 200.335373][ T6713] ? _local_bh_enable+0xa0/0xa0 [ 200.340262][ T6713] ? __dev_queue_xmit+0x245/0x35a0 [ 200.345424][ T6713] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 200.351038][ T6713] ? __dev_queue_xmit+0x245/0x35a0 [ 200.356198][ T6713] ? ref_tracker_free+0x634/0x7d0 [ 200.361252][ T6713] ? __copy_skb_header+0xa7/0x550 [ 200.366344][ T6713] ? refcount_inc+0x70/0x70 [ 200.370895][ T6713] ? __skb_clone+0x63/0x790 [ 200.375435][ T6713] ? __skb_clone+0x480/0x790 [ 200.380073][ T6713] ? __netlink_deliver_tap+0x7e8/0x830 [ 200.385562][ T6713] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.390785][ T6713] ? __lock_acquire+0x7c80/0x7c80 [ 200.395891][ T6713] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.401121][ T6713] netlink_unicast+0x751/0x8d0 [ 200.405929][ T6713] netlink_sendmsg+0x8c1/0xbe0 [ 200.410734][ T6713] ? netlink_getsockopt+0x580/0x580 [ 200.415965][ T6713] ? aa_sock_msg_perm+0x94/0x150 [ 200.420939][ T6713] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 200.426256][ T6713] ? security_socket_sendmsg+0x80/0xa0 [ 200.431748][ T6713] ? netlink_getsockopt+0x580/0x580 [ 200.436971][ T6713] ____sys_sendmsg+0x5bf/0x950 [ 200.441780][ T6713] ? __asan_memset+0x22/0x40 [ 200.446419][ T6713] ? __sys_sendmsg_sock+0x30/0x30 [ 200.451576][ T6713] ? __import_iovec+0x5f2/0x860 [ 200.456498][ T6713] ? import_iovec+0x73/0xa0 [ 200.461052][ T6713] ___sys_sendmsg+0x220/0x290 [ 200.465786][ T6713] ? __sys_sendmsg+0x270/0x270 [ 200.470649][ T6713] ? debug_mutex_init+0x38/0x70 [ 200.475582][ T6713] __se_sys_sendmsg+0x1a5/0x270 [ 200.480482][ T6713] ? __x64_sys_sendmsg+0x80/0x80 [ 200.485494][ T6713] ? lockdep_hardirqs_on+0x98/0x150 [ 200.490747][ T6713] do_syscall_64+0x55/0xb0 [ 200.495198][ T6713] ? clear_bhb_loop+0x40/0x90 [ 200.499916][ T6713] ? clear_bhb_loop+0x40/0x90 [ 200.504623][ T6713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.510563][ T6713] RIP: 0033:0x7ff8d2b8f749 [ 200.515009][ T6713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.534636][ T6713] RSP: 002b:00007ff8d3b05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.543095][ T6713] RAX: ffffffffffffffda RBX: 00007ff8d2de5fa0 RCX: 00007ff8d2b8f749 [ 200.551099][ T6713] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000004 [ 200.559127][ T6713] RBP: 00007ff8d2c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.567132][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.575239][ T6713] R13: 00007ff8d2de6038 R14: 00007ff8d2de5fa0 R15: 00007ffd429f19d8 [ 200.583273][ T6713] [ 200.593616][ T6713] Mem-Info: [ 200.598688][ T6713] active_anon:22091 inactive_anon:0 isolated_anon:0 [ 200.598688][ T6713] active_file:17617 inactive_file:39944 isolated_file:0 [ 200.598688][ T6713] unevictable:768 dirty:84 writeback:0 [ 200.598688][ T6713] slab_reclaimable:9414 slab_unreclaimable:93069 [ 200.598688][ T6713] mapped:24731 shmem:17760 pagetables:637 [ 200.598688][ T6713] sec_pagetables:0 bounce:0 [ 200.598688][ T6713] kernel_misc_reclaimable:0 [ 200.598688][ T6713] free:1323973 free_pcp:12590 free_cma:0 [ 200.645640][ T6713] Node 0 active_anon:88364kB inactive_anon:0kB active_file:70468kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98924kB dirty:332kB writeback:0kB shmem:69504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11664kB pagetables:2548kB sec_pagetables:0kB all_unreclaimable? no [ 200.678898][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.690194][ T23] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 200.703616][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.712999][ T6713] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 200.744734][ T23] usb 4-1: config 0 descriptor?? [ 200.758244][ T6713] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 200.786109][ T6713] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 200.792185][ T6713] Node 0 DMA32 free:1383808kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:88148kB inactive_anon:0kB active_file:70468kB inactive_file:158252kB unevictable:1536kB writepending:336kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:30320kB local_pcp:16288kB free_cma:0kB [ 200.826993][ T6713] lowmem_reserve[]: 0 0 1 1 1 [ 200.834783][ T6713] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.862832][ T6713] lowmem_reserve[]: 0 0 0 0 0 [ 200.868828][ T6713] Node 1 Normal free:3896752kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20000kB local_pcp:6944kB free_cma:0kB [ 200.899111][ T6713] lowmem_reserve[]: 0 0 0 0 0 [ 200.905348][ T6713] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 200.925909][ T6713] Node 0 DMA32: 0*4kB 618*8kB (U) 759*16kB (UME) 356*32kB (UME) 337*64kB (UME) 80*128kB (UME) 42*256kB (UME) 16*512kB (UM) 12*1024kB (UME) 7*2048kB (ME) 312*4096kB (UM) = 1383808kB [ 200.953801][ T6713] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 200.968058][ T6713] Node 1 Normal: 202*4kB (UME) 53*8kB (UME) 42*16kB (UME) 74*32kB (UME) 34*64kB (UME) 5*128kB (UME) 2*256kB (ME) 2*512kB (UE) 1*1024kB (U) 2*2048kB (UE) 948*4096kB (M) = 3896752kB [ 200.986908][ T6713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.997753][ T6713] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.004751][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.010461][ T6713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.026205][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.034671][ T6713] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.044672][ T6713] 75322 total pagecache pages [ 201.050095][ T6713] 0 pages in swap cache [ 201.054575][ T6713] Free swap = 124412kB [ 201.059479][ T6713] Total swap = 124996kB [ 201.063804][ T6713] 2097051 pages RAM [ 201.097256][ T6713] 0 pages HighMem/MovableOnly [ 201.102262][ T6713] 416127 pages reserved [ 201.112460][ T6713] 0 pages cma reserved [ 201.289874][ T23] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 201.314023][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input10 [ 201.508721][ T6750] overlayfs: missing 'workdir' [ 201.681884][ T23] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 202.377647][ T788] usb 4-1: USB disconnect, device number 8 [ 202.479578][ T6755] fido_id[6755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 202.866202][ T6767] overlayfs: missing 'lowerdir' [ 205.836815][ T5765] syz-executor (5765) used greatest stack depth: 19888 bytes left [ 206.256775][ T6786] nvme_fabrics: unknown parameter or missing value 'unlock all' in ctrl creation request [ 206.270144][ T1191] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.477397][ T1191] usb 3-1: Using ep0 maxpacket: 8 [ 206.520392][ T1191] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 206.678510][ T1191] usb 3-1: config 179 has no interface number 0 [ 206.722150][ T1191] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 207.167883][ T1191] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 207.223633][ T1191] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.275708][ T1191] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 207.299043][ T1191] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 207.355013][ T1191] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 207.384994][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.417170][ T6782] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.769494][ T1191] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 208.121447][ T1191] usb 3-1: USB disconnect, device number 5 [ 208.127674][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 208.127710][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 208.434310][ T1191] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 209.502173][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.513667][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.522187][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.531620][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.540221][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.547862][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.681945][ T28] audit: type=1326 audit(1766323167.219:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.1.246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2b8f749 code=0x0 [ 211.608474][ T5770] Bluetooth: hci1: command tx timeout [ 211.663581][ T6804] chnl_net:caif_netlink_parms(): no params data found [ 212.089780][ T6829] set match dimension is over the limit! [ 212.150942][ T5770] Bluetooth: hci3: command 0x0406 tx timeout [ 212.150986][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 212.157451][ T5770] Bluetooth: hci2: command 0x0406 tx timeout [ 213.319598][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.342519][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.378249][ T6804] bridge_slave_0: entered allmulticast mode [ 213.424792][ T6804] bridge_slave_0: entered promiscuous mode [ 213.459947][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.634913][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.657426][ T6804] bridge_slave_1: entered allmulticast mode [ 213.688663][ T5778] Bluetooth: hci1: command tx timeout [ 213.746113][ T6804] bridge_slave_1: entered promiscuous mode [ 214.564718][ T6804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.585368][ T6804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.756317][ T6804] team0: Port device team_slave_0 added [ 214.766105][ T6804] team0: Port device team_slave_1 added [ 215.777259][ T5778] Bluetooth: hci1: command tx timeout [ 217.063263][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.077215][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.292090][ T6804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.361877][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.377208][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.432886][ T6804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.768308][ T6804] hsr_slave_0: entered promiscuous mode [ 217.787598][ T6804] hsr_slave_1: entered promiscuous mode [ 217.801937][ T6804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.827219][ T6804] Cannot create hsr debugfs directory [ 217.847379][ T5778] Bluetooth: hci1: command tx timeout [ 217.908674][ T6871] block nbd3: shutting down sockets [ 218.437124][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 219.447462][ T5841] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 220.619499][ T5841] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 220.630195][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.651569][ T5841] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 220.664306][ T5841] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 220.673782][ T5841] usb 4-1: Manufacturer: syz [ 220.710424][ T5841] usb 4-1: config 0 descriptor?? [ 220.891820][ T5841] rc_core: IR keymap rc-hauppauge not found [ 220.904745][ T5841] Registered IR keymap rc-empty [ 220.939585][ T5841] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 221.014949][ T5841] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 221.088839][ T5841] usb 4-1: USB disconnect, device number 9 [ 221.316078][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 221.594730][ T6804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.634654][ T6804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.664254][ T6804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.684568][ T6804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.732107][ T9] usb 2-1: config 0 has no interfaces? [ 221.752814][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.782654][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.809629][ T9] usb 2-1: Product: syz [ 221.827359][ T9] usb 2-1: Manufacturer: syz [ 221.843994][ T9] usb 2-1: SerialNumber: syz [ 221.873307][ T9] usb 2-1: config 0 descriptor?? [ 221.944772][ T6804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.974396][ T6804] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.996303][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.003574][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.589523][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.596839][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.648255][ T5757] usb 2-1: USB disconnect, device number 6 [ 222.803392][ T6804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.308481][ T6804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.399099][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 223.764173][ T6804] veth0_vlan: entered promiscuous mode [ 224.196244][ T6804] veth1_vlan: entered promiscuous mode [ 224.226386][ T6804] veth0_macvtap: entered promiscuous mode [ 224.277417][ T6804] veth1_macvtap: entered promiscuous mode [ 224.334653][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.350935][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.364222][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.375208][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.385683][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.399061][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.413679][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.435950][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.447009][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.459433][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.470462][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.480628][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.494742][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.509288][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.539269][ T6804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.548653][ T6804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.562973][ T6804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.572048][ T6804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.758627][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.769516][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.869271][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.877529][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.233082][ T788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 226.626363][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.842200][ T788] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 227.130239][ T6949] syzkaller0: entered promiscuous mode [ 227.135791][ T6949] syzkaller0: entered allmulticast mode [ 227.232542][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.257380][ T788] usb 1-1: config 0 descriptor?? [ 227.275769][ T788] pwc: Askey VC010 type 2 USB webcam detected. [ 229.091261][ T788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 229.166611][ T788] pwc: recv_control_msg error -32 req 02 val 2700 [ 229.226696][ T788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 230.598627][ T788] pwc: recv_control_msg error -71 req 04 val 1300 [ 231.347220][ T788] pwc: recv_control_msg error -71 req 04 val 1400 [ 231.365381][ T788] pwc: recv_control_msg error -71 req 02 val 2000 [ 231.387264][ T788] pwc: recv_control_msg error -71 req 02 val 2100 [ 231.402110][ T788] pwc: recv_control_msg error -71 req 04 val 1500 [ 231.409258][ T788] pwc: recv_control_msg error -71 req 02 val 2500 [ 231.426178][ T788] pwc: recv_control_msg error -71 req 02 val 2400 [ 231.459931][ T788] pwc: recv_control_msg error -71 req 02 val 2600 [ 231.474041][ T788] pwc: recv_control_msg error -71 req 02 val 2900 [ 231.489627][ T788] pwc: recv_control_msg error -71 req 02 val 2800 [ 231.514348][ T788] pwc: recv_control_msg error -71 req 04 val 1100 [ 231.545663][ T788] pwc: recv_control_msg error -71 req 04 val 1200 [ 231.623248][ T788] pwc: Registered as video103. [ 231.637172][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 231.715060][ T788] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 231.717404][ T5824] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 231.899237][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 231.942979][ T788] usb 1-1: USB disconnect, device number 3 [ 232.015322][ T9] usb 2-1: config 5 has an invalid interface number: 148 but max is 0 [ 232.103958][ T9] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 232.331835][ T9] usb 2-1: config 5 has no interface number 0 [ 232.418484][ T9] usb 2-1: config 5 interface 148 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 232.552532][ T9] usb 2-1: config 5 interface 148 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.716682][ T9] usb 2-1: config 5 interface 148 has no altsetting 0 [ 232.786330][ T9] usb 2-1: string descriptor 0 read error: -71 [ 232.803963][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 232.827953][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.887037][ T9] usb 2-1: can't set config #5, error -71 [ 232.887145][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 232.898441][ T9] usb 2-1: USB disconnect, device number 7 [ 232.925004][ T5824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.955827][ T5824] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 232.978147][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.065828][ T5824] usb 4-1: config 0 descriptor?? [ 233.091417][ T5824] dw2102: su3000_identify_state [ 233.119234][ T5824] dvb-usb: found a 'TeVii S662' in warm state. [ 233.126601][ T5824] dw2102: su3000_power_ctrl: 1, initialized 0 [ 233.161265][ T5824] dvb-usb: bulk message failed: -22 (2/0) [ 233.272220][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.286647][ T5824] dvbdev: DVB: registering new adapter (TeVii S662) [ 233.298022][ T6976] dvb-usb: bulk message failed: -22 (4/0) [ 233.304038][ T6976] dw2102: i2c transfer failed. [ 233.454871][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888145ad5000: Timeout. Failed to send simple message. [ 233.455825][ T6976] dvb-usb: bulk message failed: -22 (21/0) [ 233.684909][ T6976] dw2102: i2c transfer failed. [ 234.271671][ T5824] usb 4-1: media controller created [ 234.277410][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 234.283562][ T5824] dw2102: i2c transfer failed. [ 234.289700][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 234.296696][ T5824] dw2102: i2c transfer failed. [ 234.301659][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 235.927421][ T5824] dw2102: i2c transfer failed. [ 235.956675][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 235.963319][ T5824] dw2102: i2c transfer failed. [ 235.986106][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 236.007285][ T5824] dw2102: i2c transfer failed. [ 236.012166][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 236.046474][ T5824] dw2102: i2c transfer failed. [ 236.052036][ T5824] dvb-usb: MAC address: 02:02:02:02:02:02 [ 236.080939][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.137764][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 236.143685][ T5824] dw2102: command 0x0e transfer failed. [ 236.163689][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 236.175357][ T5824] dw2102: command 0x0e transfer failed. [ 236.360389][ T7002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 236.367321][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 236.383485][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 236.507710][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 236.529943][ T5824] dw2102: command 0x0e transfer failed. [ 236.544135][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 236.551728][ T5824] dw2102: command 0x0e transfer failed. [ 236.557731][ T1191] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 236.567153][ T5824] dvb-usb: bulk message failed: -22 (1/0) [ 236.572990][ T5824] dw2102: command 0x51 transfer failed. [ 236.579484][ T5824] dvb-usb: bulk message failed: -22 (5/0) [ 236.585378][ T5824] dw2102: i2c probe for address 0x68 failed. [ 236.593651][ T5824] dvb-usb: bulk message failed: -22 (5/0) [ 236.602742][ T5824] dw2102: i2c probe for address 0x69 failed. [ 236.609252][ T5824] dvb-usb: bulk message failed: -22 (5/0) [ 236.615834][ T5824] dw2102: i2c probe for address 0x6a failed. [ 236.622103][ T5824] dw2102: probing for demodulator failed. Is the external power switched on? [ 236.632005][ T5824] dvb-usb: no frontend was attached by 'TeVii S662' [ 236.772005][ T788] usb 40-1: SetAddress Request (2) to port 0 [ 236.803635][ T1191] usb 1-1: Using ep0 maxpacket: 8 [ 236.849262][ T1191] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 236.858683][ T1191] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.867783][ T788] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 236.871071][ T1191] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.917131][ T1191] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.956200][ T1191] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.025553][ T1191] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 237.068256][ T1191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.230034][ T7003] vhci_hcd: connection reset by peer [ 237.240097][ T34] vhci_hcd: stop threads [ 237.245274][ T34] vhci_hcd: release socket [ 237.247795][ T5824] rc_core: IR keymap rc-tt-1500 not found [ 237.256465][ T5824] Registered IR keymap rc-empty [ 237.276243][ T34] vhci_hcd: disconnect device [ 237.292850][ T5824] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 237.319111][ T5824] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input14 [ 237.342625][ T1191] usb 1-1: GET_CAPABILITIES returned 0 [ 237.350742][ T5824] dvb-usb: schedule remote query interval to 250 msecs. [ 237.367424][ T1191] usbtmc 1-1:16.0: can't read capabilities [ 237.377243][ T5824] dw2102: su3000_power_ctrl: 0, initialized 1 [ 237.383721][ T5824] dvb-usb: TeVii S662 successfully initialized and connected. [ 237.418564][ T5824] usb 4-1: USB disconnect, device number 10 [ 237.523074][ T5824] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 237.557979][ T5857] usb 1-1: USB disconnect, device number 4 [ 241.249824][ T28] audit: type=1800 audit(1766323197.819:4): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.301" name="bus" dev="overlay" ino=442 res=0 errno=0 [ 242.186290][ T788] usb 40-1: device descriptor read/8, error -110 [ 242.538191][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.548579][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.557193][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.566965][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.574984][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 242.584359][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.659055][ T788] usb usb40-port1: attempt power cycle [ 243.416299][ T1191] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 243.518211][ T788] usb usb40-port1: unable to enumerate USB device [ 243.619187][ T1191] usb 1-1: config 0 has no interfaces? [ 243.630962][ T1191] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.640672][ T1191] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 243.652250][ T1191] usb 1-1: Product: syz [ 243.664320][ T1191] usb 1-1: Manufacturer: syz [ 243.673020][ T1191] usb 1-1: SerialNumber: syz [ 243.688969][ T1191] usb 1-1: config 0 descriptor?? [ 243.859927][ T7042] chnl_net:caif_netlink_parms(): no params data found [ 244.176982][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'. [ 244.728452][ T5781] Bluetooth: hci4: command tx timeout [ 245.092602][ T7042] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.100647][ T7042] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.108276][ T7042] bridge_slave_0: entered allmulticast mode [ 245.116760][ T7042] bridge_slave_0: entered promiscuous mode [ 245.139942][ T7042] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.149425][ T7042] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.161341][ T7042] bridge_slave_1: entered allmulticast mode [ 245.191111][ T7042] bridge_slave_1: entered promiscuous mode [ 245.274564][ T7042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.292479][ T7042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.381235][ T7042] team0: Port device team_slave_0 added [ 245.394486][ T7042] team0: Port device team_slave_1 added [ 245.470346][ T7042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.479467][ T7042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.506457][ T7042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.521884][ T7042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.545609][ T7042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.573155][ T7042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.675914][ T7042] hsr_slave_0: entered promiscuous mode [ 245.700868][ T7042] hsr_slave_1: entered promiscuous mode [ 245.711892][ T7042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.719714][ T7042] Cannot create hsr debugfs directory [ 246.050868][ T5824] usb 1-1: USB disconnect, device number 5 [ 246.303423][ T7042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.359158][ T7042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.579578][ T7042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.325960][ T5781] Bluetooth: hci4: command tx timeout [ 247.351347][ T7042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.764657][ T7042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.819072][ T7042] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.849667][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.856960][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.880385][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.887734][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.987236][ T6679] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 248.237483][ T6679] usb 1-1: Using ep0 maxpacket: 16 [ 248.253230][ T6679] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.279224][ T6679] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 248.324941][ T6679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.366299][ T6679] usb 1-1: Product: syz [ 248.386625][ T6679] usb 1-1: Manufacturer: syz [ 248.398228][ T6679] usb 1-1: SerialNumber: syz [ 248.433371][ T6679] usb 1-1: config 0 descriptor?? [ 248.444523][ T6679] cypress_m8 1-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 248.640750][ T6679] nokiaca42v2 ttyUSB0: required endpoint is missing [ 249.583676][ T5781] Bluetooth: hci4: command tx timeout [ 249.717975][ T7098] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.313'. [ 249.876227][ T7042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.048276][ T1191] usb 1-1: USB disconnect, device number 6 [ 250.270945][ T1191] cypress_m8 1-1:0.0: device disconnected [ 251.607308][ T5781] Bluetooth: hci4: command tx timeout [ 254.630335][ T7042] veth0_vlan: entered promiscuous mode [ 254.803469][ T7042] veth1_vlan: entered promiscuous mode [ 255.011889][ T7042] veth0_macvtap: entered promiscuous mode [ 255.066710][ T7042] veth1_macvtap: entered promiscuous mode [ 255.170118][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.207574][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.227789][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.270721][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.284388][ T6679] libceph: connect (1)[c::]:6789 error -101 [ 255.437512][ T6679] libceph: mon0 (1)[c::]:6789 connect error [ 255.484793][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.011561][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.230985][ T5757] libceph: connect (1)[c::]:6789 error -101 [ 256.237160][ T5757] libceph: mon0 (1)[c::]:6789 connect error [ 256.264890][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.276617][ T7218] ceph: No mds server is up or the cluster is laggy [ 256.297151][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.320520][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.354984][ T7042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.591903][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.787219][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.575013][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.617653][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.672447][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.701634][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.713627][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.744788][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.820228][ T7042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.833549][ T7042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.857863][ T7042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.894030][ T7042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.943444][ T7042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.316854][ T6024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.353871][ T6024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.522486][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.953324][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.991586][ T7244] bridge0: port 3(gretap0) entered blocking state [ 259.049688][ T7244] bridge0: port 3(gretap0) entered disabled state [ 259.086965][ T7244] gretap0: entered allmulticast mode [ 259.104835][ T7244] gretap0: entered promiscuous mode [ 259.166792][ T7244] bridge0: port 3(gretap0) entered blocking state [ 259.174002][ T7244] bridge0: port 3(gretap0) entered forwarding state [ 260.013946][ T7263] tc_dump_action: action bad kind [ 260.310864][ T7264] warning: `syz.1.332' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 263.110993][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'. [ 263.420236][ T7287] binder: BINDER_SET_CONTEXT_MGR already set [ 263.512361][ T7287] binder: 7286:7287 ioctl 4018620d 2000000002c0 returned -16 [ 263.727502][ T6679] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 263.797401][ T5757] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 263.959825][ T6679] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 263.999770][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.010456][ T5757] usb 5-1: Using ep0 maxpacket: 32 [ 264.033869][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.059552][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.069974][ T6679] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 264.094623][ T6679] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 264.115962][ T5757] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 264.135900][ T6679] usb 1-1: Manufacturer: syz [ 264.142502][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.158843][ T6679] usb 1-1: config 0 descriptor?? [ 264.175509][ T5757] usb 5-1: config 0 descriptor?? [ 264.568592][ T7306] bridge0: port 3(gretap0) entered blocking state [ 264.593546][ T7306] bridge0: port 3(gretap0) entered disabled state [ 264.627181][ T7306] gretap0: entered allmulticast mode [ 264.787204][ T6679] rc_core: IR keymap rc-hauppauge not found [ 264.794105][ T6679] Registered IR keymap rc-empty [ 264.805503][ T6679] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 264.828176][ T6679] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 264.851880][ T7306] gretap0: entered promiscuous mode [ 264.873358][ T7306] bridge0: port 3(gretap0) entered blocking state [ 264.880188][ T7306] bridge0: port 3(gretap0) entered forwarding state [ 264.905197][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 264.944989][ T9] usb 1-1: USB disconnect, device number 7 [ 264.959231][ T5757] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 264.995063][ T5757] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 265.154086][ T5757] ft260 0003:0403:6030.0005: failed to retrieve chip version [ 265.185059][ T5757] ft260: probe of 0003:0403:6030.0005 failed with error -71 [ 265.215912][ T5757] usb 5-1: USB disconnect, device number 2 [ 268.115695][ T7329] binder: 7327:7329 ioctl c0306201 200000000680 returned -14 [ 269.324075][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 269.595214][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.604040][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.185971][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.208463][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.775907][ T7323] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.793739][ T7323] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.803588][ T7323] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.820762][ T7323] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.600516][ T7390] wg1: entered promiscuous mode [ 277.606248][ T7390] wg1: entered allmulticast mode [ 280.028182][ T7399] 9pnet_virtio: no channels available for device 127.0.0.1 [ 285.442678][ T28] audit: type=1326 audit(1766323243.011:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2b8f749 code=0x7ffc0000 [ 285.466604][ T28] audit: type=1326 audit(1766323243.011:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2b8f749 code=0x7ffc0000 [ 285.862131][ T28] audit: type=1326 audit(1766323243.011:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8d2b8f749 code=0x7ffc0000 [ 286.175941][ T28] audit: type=1326 audit(1766323243.011:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2b8f749 code=0x7ffc0000 [ 286.198585][ T28] audit: type=1326 audit(1766323243.011:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8d2b8f749 code=0x7ffc0000 [ 286.221380][ T28] audit: type=1326 audit(1766323243.011:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2b8f749 code=0x7ffc0000 [ 286.247133][ T28] audit: type=1326 audit(1766323243.011:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff8d2b8f749 code=0x7ffc0000 [ 286.269678][ T28] audit: type=1326 audit(1766323243.011:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2b8f749 code=0x7ffc0000 [ 286.295812][ T28] audit: type=1326 audit(1766323243.011:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d2b8f749 code=0x7ffc0000 [ 286.318900][ T28] audit: type=1326 audit(1766323243.011:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff8d2b8f749 code=0x7ffc0000 [ 290.367482][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 292.106509][ T7354] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 292.317989][ T7354] usb 2-1: Using ep0 maxpacket: 8 [ 292.340971][ T7354] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 292.357625][ T7354] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 292.371346][ T7354] usb 2-1: Product: syz [ 292.375760][ T7354] usb 2-1: Manufacturer: syz [ 292.384311][ T7354] usb 2-1: SerialNumber: syz [ 292.405233][ T7354] usb 2-1: config 0 descriptor?? [ 292.425955][ T7354] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 292.581416][ T7511] kAFS: unable to lookup cell 'Þ({^ú@' [ 292.897459][ T5831] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 293.044200][ T7354] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 293.097201][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 293.151437][ T5831] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 293.199563][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.217103][ T5831] usb 5-1: Product: syz [ 293.221348][ T5831] usb 5-1: Manufacturer: syz [ 293.226034][ T5831] usb 5-1: SerialNumber: syz [ 293.275233][ T5831] usb 5-1: config 0 descriptor?? [ 293.306993][ T9] usb 2-1: USB disconnect, device number 8 [ 293.318836][ T5831] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 293.331384][ T5831] dvb-usb: bulk message failed: -22 (2/0) [ 293.343161][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.354287][ T5831] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 293.363267][ T5831] usb 5-1: media controller created [ 293.417650][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.445529][ T5831] usb 5-1: selecting invalid altsetting 7 [ 293.454294][ T5831] cxusb: set interface failed [ 293.460203][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 293.538987][ T7513] dvb-usb: bulk message failed: -22 (3/0) [ 293.547784][ T5831] DVB: Unable to find symbol lgdt330x_attach() [ 293.554020][ T5831] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 293.697300][ T5831] rc_core: IR keymap rc-dvico-portable not found [ 293.703710][ T5831] Registered IR keymap rc-empty [ 293.720402][ T5831] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 293.737505][ T5831] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input18 [ 293.749718][ T5831] dvb-usb: schedule remote query interval to 100 msecs. [ 293.757208][ T5831] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 293.787213][ T5831] usb 5-1: USB disconnect, device number 3 [ 293.972310][ T5831] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 294.052821][ T5781] Bluetooth: hci1: unexpected cc 0x0c12 length: 1 < 3 [ 295.997165][ T788] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 296.006305][ T10] null_blk: rq ffff8880228c0000 timed out [ 296.013001][ T10] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 296.024640][ T10] null_blk: rq ffff8880228c0180 timed out [ 296.043996][ T10] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 296.055546][ T10] null_blk: rq ffff8880228c0300 timed out [ 296.061668][ T10] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 296.072414][ T10] null_blk: rq ffff8880228c0480 timed out [ 296.078294][ T10] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 296.088956][ T10] null_blk: rq ffff8880228c0600 timed out [ 296.094725][ T10] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 296.105307][ T10] null_blk: rq ffff8880228c0780 timed out [ 296.111143][ T10] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 296.121708][ T10] null_blk: rq ffff8880228c0900 timed out [ 296.127577][ T10] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 296.138665][ T10] null_blk: rq ffff8880228c0a80 timed out [ 296.144450][ T10] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 296.157767][ T10] null_blk: rq ffff8880228c0c00 timed out [ 296.163563][ T10] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 296.174410][ T10] null_blk: rq ffff8880228c0d80 timed out [ 296.180286][ T10] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 296.190978][ T10] null_blk: rq ffff8880228c0f00 timed out [ 296.196770][ T10] null_blk: rq ffff8880228c1080 timed out [ 296.202669][ T10] null_blk: rq ffff8880228c1200 timed out [ 296.209002][ T10] null_blk: rq ffff8880228c1380 timed out [ 296.214804][ T10] null_blk: rq ffff8880228c1500 timed out [ 296.220665][ T10] null_blk: rq ffff8880228c1680 timed out [ 296.227261][ T10] null_blk: rq ffff8880228c1800 timed out [ 296.233068][ T10] null_blk: rq ffff8880228c1980 timed out [ 296.239465][ T10] null_blk: rq ffff8880228c1b00 timed out [ 296.245263][ T10] null_blk: rq ffff8880228c1c80 timed out [ 296.251513][ T10] null_blk: rq ffff8880228c1e00 timed out [ 296.258742][ T10] null_blk: rq ffff8880228c1f80 timed out [ 296.264535][ T10] null_blk: rq ffff8880228c2100 timed out [ 296.270429][ T10] null_blk: rq ffff8880228c2280 timed out [ 296.278921][ T10] null_blk: rq ffff8880228c2400 timed out [ 296.284733][ T10] null_blk: rq ffff8880228c2580 timed out [ 296.291249][ T10] null_blk: rq ffff8880228c2700 timed out [ 296.297144][ T10] null_blk: rq ffff8880228c2880 timed out [ 296.302929][ T10] null_blk: rq ffff8880228c2a00 timed out [ 296.308906][ T10] null_blk: rq ffff8880228c2b80 timed out [ 296.419962][ T10] null_blk: rq ffff8880228c2d00 timed out [ 296.425945][ T10] null_blk: rq ffff8880228c2e80 timed out [ 296.434514][ T788] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.443185][ T10] null_blk: rq ffff8880228c3000 timed out [ 296.449354][ T10] null_blk: rq ffff8880228c3180 timed out [ 296.455298][ T10] null_blk: rq ffff8880228c3300 timed out [ 296.461202][ T10] null_blk: rq ffff8880228c3480 timed out [ 296.467430][ T10] null_blk: rq ffff8880228c3600 timed out [ 296.473242][ T10] null_blk: rq ffff8880228c3780 timed out [ 296.479384][ T10] null_blk: rq ffff8880228c3900 timed out [ 296.485195][ T10] null_blk: rq ffff8880228c3a80 timed out [ 296.491546][ T10] null_blk: rq ffff8880228c3c00 timed out [ 296.497451][ T10] null_blk: rq ffff8880228c3d80 timed out [ 296.503440][ T10] null_blk: rq ffff8880228c3f00 timed out [ 296.509341][ T10] null_blk: rq ffff8880228c4080 timed out [ 296.515385][ T10] null_blk: rq ffff8880228c4200 timed out [ 296.521399][ T10] null_blk: rq ffff8880228c4380 timed out [ 296.527429][ T10] null_blk: rq ffff8880228c4500 timed out [ 296.533212][ T10] null_blk: rq ffff8880228c4680 timed out [ 296.539350][ T10] null_blk: rq ffff8880228c4800 timed out [ 296.545788][ T10] null_blk: rq ffff8880228c4980 timed out [ 296.551704][ T10] null_blk: rq ffff8880228c4b00 timed out [ 296.557751][ T10] null_blk: rq ffff8880228c4c80 timed out [ 296.563622][ T10] null_blk: rq ffff8880228c4e00 timed out [ 296.569472][ T10] null_blk: rq ffff8880228c4f80 timed out [ 296.575342][ T10] null_blk: rq ffff8880228c5100 timed out [ 296.581217][ T10] null_blk: rq ffff8880228c5280 timed out [ 296.587926][ T10] null_blk: rq ffff8880228c5400 timed out [ 296.593723][ T10] null_blk: rq ffff8880228c5580 timed out [ 296.599616][ T10] null_blk: rq ffff8880228c5700 timed out [ 296.605382][ T10] null_blk: rq ffff8880228c5880 timed out [ 296.611307][ T10] null_blk: rq ffff8880228c5a00 timed out [ 296.617175][ T10] null_blk: rq ffff8880228c5b80 timed out [ 296.623045][ T10] null_blk: rq ffff8880228c5d00 timed out [ 296.628891][ T10] null_blk: rq ffff8880228c5e80 timed out [ 296.634904][ T788] usb 2-1: config 0 has no interface number 0 [ 296.641789][ T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.653441][ T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.663333][ T788] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 296.672533][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.689733][ T788] usb 2-1: config 0 descriptor?? [ 298.731273][ T7554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.404'. [ 298.749355][ T788] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0006/input/input19 [ 298.887437][ T7555] syz_tun: entered allmulticast mode [ 298.975386][ T788] holtek_kbd 0003:04D9:A055.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 299.037477][ T788] usb 2-1: USB disconnect, device number 9 [ 299.103435][ T7563] fido_id[7563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 301.947340][ T7579] netlink: 64 bytes leftover after parsing attributes in process `syz.3.412'. [ 302.287164][ T5831] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 302.479601][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.535790][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.559043][ T5831] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 302.569626][ T5781] Bluetooth: hci2: Malformed Event: 0x13 [ 302.587329][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.595545][ T5831] usb 5-1: Product: syz [ 302.599885][ T5831] usb 5-1: Manufacturer: syz [ 302.604861][ T5831] usb 5-1: SerialNumber: syz [ 302.617482][ T5831] usb 5-1: config 0 descriptor?? [ 302.626494][ T5831] usb 5-1: ucan: probing device on interface #0 [ 302.634277][ T5831] usb 5-1: ucan: invalid EP count (0) [ 302.639798][ T5831] usb 5-1: ucan: probe failed; try to update the device firmware [ 302.844380][ T7589] netlink: 'syz.4.413': attribute type 1 has an invalid length. [ 302.933411][ T7589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.013142][ T7601] bond1: (slave veth3): Enslaving as an active interface with a down link [ 303.066202][ T7589] vlan2: entered allmulticast mode [ 303.087408][ T7589] bond_slave_1: entered allmulticast mode [ 303.115514][ T7589] bond_slave_1: entered promiscuous mode [ 303.137225][ T7355] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 303.145388][ T7589] bond_slave_1: left promiscuous mode [ 303.158579][ T7589] bond1: (slave vlan2): making interface the new active one [ 303.168230][ T7589] bond_slave_1: entered promiscuous mode [ 303.178284][ T7589] vlan2: entered promiscuous mode [ 303.184440][ T7589] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 303.203723][ T7354] usb 5-1: USB disconnect, device number 4 [ 303.378825][ T7355] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 303.392488][ T7355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.432910][ T7355] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 303.456876][ T7355] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 303.481773][ T7355] usb 4-1: Manufacturer: syz [ 303.496625][ T7355] usb 4-1: config 0 descriptor?? [ 303.647702][ T7355] rc_core: IR keymap rc-hauppauge not found [ 303.653686][ T7355] Registered IR keymap rc-empty [ 303.667708][ T7355] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 303.690129][ T7606] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 303.691476][ T7355] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 303.724975][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 303.725623][ T7606] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 303.799536][ T5831] usb 4-1: USB disconnect, device number 11 [ 306.928381][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.259990][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.307641][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.376498][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.387958][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 307.396404][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.688637][ T7647] tipc: Started in network mode [ 307.693938][ T7647] tipc: Node identity ac14140f, cluster identity 4711 [ 307.731589][ T7647] tipc: New replicast peer: 255.255.255.255 [ 307.757201][ T7647] tipc: Enabled bearer , priority 10 [ 307.955471][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 307.964655][ T7647] tipc: Disabling bearer [ 309.447536][ T5781] Bluetooth: hci3: command tx timeout [ 309.471290][ T7660] tipc: Started in network mode [ 309.476286][ T7660] tipc: Node identity 84a, cluster identity 4711 [ 309.482805][ T7660] tipc: Node number set to 2122 [ 310.045040][ T7638] chnl_net:caif_netlink_parms(): no params data found [ 310.337745][ T5841] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 310.833061][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 311.527393][ T5781] Bluetooth: hci3: command tx timeout [ 312.075752][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.093759][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.124521][ T7638] bridge_slave_0: entered allmulticast mode [ 312.145476][ T7638] bridge_slave_0: entered promiscuous mode [ 312.277803][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.323350][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.356483][ T7638] bridge_slave_1: entered allmulticast mode [ 312.416046][ T7638] bridge_slave_1: entered promiscuous mode [ 313.601747][ T7638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.617298][ T5781] Bluetooth: hci3: command tx timeout [ 313.823891][ T7638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.310751][ T7638] team0: Port device team_slave_0 added [ 314.372386][ T7638] team0: Port device team_slave_1 added [ 314.677463][ T5841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 314.685274][ T5841] usb 4-1: no configurations [ 314.734831][ T5841] usb 4-1: can't read configurations, error -22 [ 314.757760][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.778506][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.811138][ T7638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.837800][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.852088][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.879033][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 314.890518][ T7638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.912087][ T1093] hsr_slave_0: left promiscuous mode [ 314.919297][ T1093] hsr_slave_1: left promiscuous mode [ 314.926403][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.935567][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.945150][ T1093] bridge_slave_1: left allmulticast mode [ 314.951702][ T1093] bridge_slave_1: left promiscuous mode [ 314.959485][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.971258][ T1093] bridge_slave_0: left allmulticast mode [ 314.977805][ T1093] bridge_slave_0: left promiscuous mode [ 314.984694][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.089573][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.099700][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 315.106420][ T9] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 315.118268][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.136227][ T9] usb 1-1: config 0 descriptor?? [ 315.197555][ T5841] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 315.423470][ T5841] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.439504][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.451376][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.460468][ T5841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.474087][ T5841] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 315.487085][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.505207][ T5841] usb 4-1: Product: syz [ 315.509629][ T5841] usb 4-1: Manufacturer: syz [ 315.522787][ T5841] cdc_wdm 4-1:1.0: skipping garbage [ 315.528517][ T5841] cdc_wdm 4-1:1.0: skipping garbage [ 315.554438][ T5841] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 315.561268][ T5841] cdc_wdm 4-1:1.0: Unknown control protocol [ 315.598217][ T9] aquacomputer_d5next 0003:0C70:F0B6.0007: item fetching failed at offset 5/7 [ 315.610461][ T9] aquacomputer_d5next: probe of 0003:0C70:F0B6.0007 failed with error -22 [ 315.690034][ T5781] Bluetooth: hci3: command tx timeout [ 315.732307][ T7721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.748591][ T7721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.782671][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 315.851200][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 316.044922][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.059277][ T9] usb 1-1: USB disconnect, device number 8 [ 316.401332][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.303412][ T1093] bond0 (unregistering): Released all slaves [ 317.435292][ T7721] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 317.454567][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.523389][ T7721] bond1: entered promiscuous mode [ 317.531415][ T7721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.541698][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.445'. [ 317.552003][ T7728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.446'. [ 317.572946][ T5841] usb 4-1: USB disconnect, device number 13 [ 317.634557][ T7638] hsr_slave_0: entered promiscuous mode [ 317.657964][ T7638] hsr_slave_1: entered promiscuous mode [ 317.673288][ T7638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.681955][ T7638] Cannot create hsr debugfs directory [ 317.988372][ T7352] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 318.009790][ T5781] Bluetooth: Frame is too long (len 24, expected len 4) [ 318.113731][ T7638] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.152620][ T7638] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.177521][ T7638] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.211843][ T7638] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.377213][ T7352] usb 1-1: Using ep0 maxpacket: 16 [ 318.388708][ T7352] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 319.051255][ T7352] usb 1-1: config 0 has no interface number 0 [ 319.058063][ T7352] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 319.080643][ T7352] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 319.097369][ T7352] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 319.105523][ T7352] usb 1-1: Product: syz [ 319.109935][ T7352] usb 1-1: SerialNumber: syz [ 319.118226][ T7352] usb 1-1: config 0 descriptor?? [ 319.130488][ T7352] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 319.337813][ T1093] vlan2: left promiscuous mode [ 319.345438][ T5831] usb 1-1: USB disconnect, device number 9 [ 319.491010][ T7638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.518113][ T7638] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.549263][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.556702][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.595508][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 319.615093][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.622382][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.327733][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 320.339315][ T9] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 320.366533][ T9] usb 5-1: config 0 has no interface number 0 [ 320.386845][ T9] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 320.405356][ T9] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 320.427757][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 320.447123][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.465282][ T9] usb 5-1: Product: syz [ 320.472050][ T9] usb 5-1: Manufacturer: syz [ 320.476829][ T9] usb 5-1: SerialNumber: syz [ 320.519106][ T9] usb 5-1: config 0 descriptor?? [ 320.558125][ T7754] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 320.591605][ T7754] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 320.792808][ T7638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.844184][ T7754] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 320.877428][ T7754] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 320.923173][ T7775] netlink: 'syz.3.458': attribute type 1 has an invalid length. [ 320.934180][ T7775] netlink: 'syz.3.458': attribute type 2 has an invalid length. [ 321.196780][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 321.260117][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 321.273946][ T9] asix: probe of 5-1:0.251 failed with error -5 [ 321.285229][ T9] usb 5-1: USB disconnect, device number 5 [ 322.365461][ T7638] veth0_vlan: entered promiscuous mode [ 322.432843][ T7638] veth1_vlan: entered promiscuous mode [ 322.596084][ T7638] veth0_macvtap: entered promiscuous mode [ 322.622928][ T7638] veth1_macvtap: entered promiscuous mode [ 322.668356][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.691854][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.713310][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.726820][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.748189][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.768265][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.785754][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.798121][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.823602][ T7638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.091215][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.233971][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.349743][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.461949][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.546323][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.597262][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.609292][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.619911][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.632459][ T7638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.645245][ T7638] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.654911][ T7638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.663747][ T7638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.672637][ T7638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.088960][ T6024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.133807][ T6024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.528521][ T7149] tipc: Left network mode [ 324.923118][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.974058][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.086665][ T7805] syz.3.465 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 325.184298][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.196942][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.205847][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.216448][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.225228][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 325.233984][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.533327][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 326.533342][ T28] audit: type=1326 audit(1766323283.941:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.3.469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1f738f749 code=0x0 [ 327.342586][ T5781] Bluetooth: hci1: command tx timeout [ 329.368152][ T5781] Bluetooth: hci1: command tx timeout [ 329.587397][ T7858] tipc: Started in network mode [ 329.606618][ T7858] tipc: Node identity ac14140f, cluster identity 4711 [ 329.637392][ T7858] tipc: New replicast peer: 255.255.255.255 [ 329.646636][ T7858] tipc: Enabled bearer , priority 10 [ 329.842848][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.477'. [ 329.867834][ T7860] tipc: Disabling bearer [ 330.344548][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 330.367395][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 330.426950][ T7804] chnl_net:caif_netlink_parms(): no params data found [ 330.452571][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 330.525093][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 330.696164][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 330.795439][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 330.897884][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 330.975130][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 331.019698][ T7149] hsr_slave_0: left promiscuous mode [ 331.066433][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 331.139713][ T7149] hsr_slave_1: left promiscuous mode [ 331.147618][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 331.180324][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 331.205661][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.252472][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 331.336902][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 331.348096][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.428974][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 331.440372][ T7149] bridge_slave_1: left allmulticast mode [ 331.461646][ T5781] Bluetooth: hci1: command tx timeout [ 331.466246][ T7149] bridge_slave_1: left promiscuous mode [ 331.468481][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 331.480734][ T5757] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 331.492678][ T5757] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 331.539411][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.622834][ T7149] bridge_slave_0: left allmulticast mode [ 331.640257][ T7149] bridge_slave_0: left promiscuous mode [ 331.667918][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.832089][ T28] audit: type=1326 audit(1766323289.401:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.5.481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41d498f749 code=0x0 [ 331.871461][ T7922] fido_id[7922]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 333.550719][ T5781] Bluetooth: hci1: command tx timeout [ 334.167468][ T49] wlan0: Trigger new scan to find an IBSS to join [ 334.795825][ T7149] team0 (unregistering): Port device team_slave_1 removed [ 334.869440][ T7149] team0 (unregistering): Port device team_slave_0 removed [ 334.942510][ T7149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.003443][ T7149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.645619][ T7149] bond0 (unregistering): Released all slaves [ 335.800145][ T7953] tipc: New replicast peer: 255.255.255.255 [ 335.816231][ T7953] tipc: Enabled bearer , priority 10 [ 335.984452][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 336.005956][ T7954] tipc: Disabling bearer [ 336.752642][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.760185][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.777727][ T7804] bridge_slave_0: entered allmulticast mode [ 336.789461][ T7804] bridge_slave_0: entered promiscuous mode [ 336.816531][ T28] audit: type=1326 audit(1766323294.381:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1f738f749 code=0x0 [ 336.838181][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.861410][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.874963][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.896862][ T7804] bridge_slave_1: entered allmulticast mode [ 336.907342][ T7804] bridge_slave_1: entered promiscuous mode [ 337.022264][ T7804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.065588][ T7804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.082633][ T7354] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 337.210901][ T7804] team0: Port device team_slave_0 added [ 337.218489][ T6020] wlan0: Trigger new scan to find an IBSS to join [ 337.234013][ T7804] team0: Port device team_slave_1 added [ 337.303696][ T7354] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 337.319550][ T7354] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.347427][ T7354] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 337.393439][ T7354] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.429583][ T7354] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.436176][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.449939][ T7354] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.460342][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.499208][ T7354] usb 5-1: Product: syz [ 337.503447][ T7354] usb 5-1: Manufacturer: syz [ 337.543238][ T7354] cdc_wdm 5-1:1.0: skipping garbage [ 337.556535][ T7354] cdc_wdm 5-1:1.0: skipping garbage [ 337.562838][ T7804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.585166][ T7354] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 337.615703][ T7354] cdc_wdm 5-1:1.0: Unknown control protocol [ 337.626404][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.654102][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.813704][ T7804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.950736][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.993557][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.332581][ T7971] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 338.677338][ T59] wlan0: Creating new IBSS network, BSSID ea:91:94:43:bf:b0 [ 338.812809][ T7971] bond2: entered promiscuous mode [ 338.821554][ T7971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.213366][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.491'. [ 339.493522][ T7804] hsr_slave_0: entered promiscuous mode [ 339.557948][ T7804] hsr_slave_1: entered promiscuous mode [ 339.584847][ T7804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.812169][ T7804] Cannot create hsr debugfs directory [ 341.729013][ T9] usb 5-1: USB disconnect, device number 6 [ 342.391466][ T28] audit: type=1326 audit(1766323299.961:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.3.501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1f738f749 code=0x0 [ 344.262704][ T7804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.285353][ T7804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.310056][ T7804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.348193][ T7804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.417256][ T7804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.442567][ T7804] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.499388][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.506662][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.553447][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.560733][ T7135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.927985][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 347.827667][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.844388][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.885754][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.915939][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.957103][ T28] audit: type=1326 audit(1766323305.521:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.4.510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f814398f749 code=0x0 [ 348.003825][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 348.013964][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 348.042472][ T9] usb 6-1: Product: syz [ 348.060876][ T9] usb 6-1: Manufacturer: syz [ 348.107877][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 348.131931][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 348.176966][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 348.196288][ T7804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.224689][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 348.395394][ T8065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.415110][ T8065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.477333][ T8065] netlink: 'syz.5.506': attribute type 1 has an invalid length. [ 348.500880][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.5.506'. [ 349.110121][ T8] usb 6-1: USB disconnect, device number 2 [ 350.869069][ T8112] program syz.5.514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.914912][ T8118] team_slave_0: entered promiscuous mode [ 351.921154][ T8118] team_slave_1: entered promiscuous mode [ 351.955855][ T8118] vlan2: entered promiscuous mode [ 351.962439][ T8118] team0: entered promiscuous mode [ 352.083059][ T7804] veth0_vlan: entered promiscuous mode [ 352.154528][ T7804] veth1_vlan: entered promiscuous mode [ 352.383100][ T7804] veth0_macvtap: entered promiscuous mode [ 352.431034][ T7804] veth1_macvtap: entered promiscuous mode [ 352.525123][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.552754][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.610364][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.680862][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.726647][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.784063][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.822567][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.676394][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.700314][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.711387][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.734119][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.885218][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.938826][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.016984][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.050662][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.079238][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.284354][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.325036][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.440107][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.516778][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.584666][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.663310][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.755023][ T7804] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.825368][ T7804] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.883707][ T7804] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.964760][ T7804] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.478256][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.486139][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.554908][ T7149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.607409][ T7149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.745106][ T8171] tipc: Started in network mode [ 356.750463][ T8171] tipc: Node identity ac14140f, cluster identity 4711 [ 356.776911][ T8171] tipc: New replicast peer: 255.255.255.255 [ 357.000729][ T8171] tipc: Enabled bearer , priority 10 [ 357.012523][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 357.022515][ T8173] tipc: Disabling bearer [ 360.000456][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.529'. [ 360.009521][ T8194] netlink: 24 bytes leftover after parsing attributes in process `syz.5.529'. [ 360.380127][ T8207] vlan0: entered promiscuous mode [ 360.518098][ T8195] syz.3.528 (8195) used greatest stack depth: 17672 bytes left [ 361.401880][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 361.682572][ T8216] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.534' sets config #31 [ 362.683776][ T7354] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 362.917202][ T7354] usb 6-1: Using ep0 maxpacket: 8 [ 362.961777][ T7354] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 363.022331][ T7354] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 363.031984][ T7354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.040274][ T7354] usb 6-1: Product: syz [ 363.044832][ T7354] usb 6-1: Manufacturer: syz [ 363.055429][ T7354] usb 6-1: SerialNumber: syz [ 363.091123][ T7354] usb 6-1: config 0 descriptor?? [ 363.116281][ T7354] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 363.128231][ T7354] usb 6-1: setting power ON [ 363.134399][ T7354] dvb-usb: bulk message failed: -22 (2/0) [ 363.152474][ T7354] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 363.205003][ T7354] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 363.223915][ T7354] usb 6-1: media controller created [ 363.280256][ T7354] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.303992][ T7354] usb 6-1: selecting invalid altsetting 6 [ 363.312554][ T7354] usb 6-1: digital interface selection failed (-22) [ 363.326854][ T7354] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 363.395001][ T7354] usb 6-1: setting power OFF [ 363.401811][ T7354] dvb-usb: bulk message failed: -22 (2/0) [ 363.410068][ T7354] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 363.415967][ T8224] dvb-usb: bulk message failed: -22 (3/0) [ 363.424975][ T7354] (NULL device *): no alternate interface [ 363.627254][ T6930] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 363.654130][ T7354] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 363.684635][ T7354] usb 6-1: USB disconnect, device number 3 [ 363.687850][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 363.943284][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.989608][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 365.061765][ T8242] syz_tun (unregistering): left allmulticast mode [ 365.156766][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.192544][ T8] usb 4-1: string descriptor 0 read error: -71 [ 365.206219][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.258231][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.324094][ T8] usb 4-1: can't set config #1, error -71 [ 365.351329][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.432612][ T8] usb 4-1: USB disconnect, device number 14 [ 365.474185][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.558688][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.015620][ T59] hsr_slave_0: left promiscuous mode [ 367.029294][ T59] hsr_slave_1: left promiscuous mode [ 367.035712][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.058478][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.067885][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.075361][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.083576][ T59] bridge_slave_1: left allmulticast mode [ 367.089457][ T59] bridge_slave_1: left promiscuous mode [ 367.095302][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.109475][ T59] bridge_slave_0: left allmulticast mode [ 367.115199][ T59] bridge_slave_0: left promiscuous mode [ 367.121857][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.173386][ T59] veth1_macvtap: left promiscuous mode [ 367.179833][ T59] veth0_macvtap: left promiscuous mode [ 367.185635][ T59] veth1_vlan: left promiscuous mode [ 367.915777][ T59] team0 (unregistering): Port device team_slave_1 removed [ 367.972923][ T59] team0 (unregistering): Port device team_slave_0 removed [ 368.038672][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.100216][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.437679][ T7135] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 368.783467][ T59] bond0 (unregistering): Released all slaves [ 369.392771][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.492896][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.594534][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.679925][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.938707][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.042748][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.170352][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.264713][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.543128][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.631174][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.714377][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.807831][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.036721][ T59] tipc: Left network mode [ 371.060037][ T59] tipc: Left network mode [ 371.078074][ T59] tipc: Left network mode [ 372.195140][ T59] bridge0: port 3(gretap0) entered disabled state [ 372.262973][ T59] gretap0 (unregistering): left allmulticast mode [ 372.273622][ T59] gretap0 (unregistering): left promiscuous mode [ 372.280633][ T59] bridge0: port 3(gretap0) entered disabled state [ 373.321677][ T59] hsr_slave_0: left promiscuous mode [ 373.331486][ T59] hsr_slave_1: left promiscuous mode [ 373.346950][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.355683][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.369979][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.381114][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.392120][ T59] bridge_slave_1: left allmulticast mode [ 373.401700][ T59] bridge_slave_1: left promiscuous mode [ 373.411072][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.424542][ T59] bridge_slave_0: left allmulticast mode [ 373.433881][ T59] bridge_slave_0: left promiscuous mode [ 373.444711][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.473148][ T59] hsr_slave_0: left promiscuous mode [ 373.482765][ T59] hsr_slave_1: left promiscuous mode [ 373.492390][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.503885][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.515212][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.530005][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.542123][ T59] bridge_slave_1: left allmulticast mode [ 373.549495][ T59] bridge_slave_1: left promiscuous mode [ 373.555987][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.579344][ T59] bridge_slave_0: left allmulticast mode [ 373.585085][ T59] bridge_slave_0: left promiscuous mode [ 373.592510][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.616437][ T59] hsr_slave_0: left promiscuous mode [ 373.628568][ T59] hsr_slave_1: left promiscuous mode [ 373.635929][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.648935][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.659607][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.667429][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1