last executing test programs: 2m44.078989841s ago: executing program 0 (id=622): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000001840), 0x0, 0x20, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x1c, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x6}, @ib={0x1b, 0x40, 0x7, {"4e31211a40e51c75adce5a1c234e4f87"}, 0x8, 0x2, 0x4}}}, 0x118) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2m36.296922065s ago: executing program 0 (id=632): shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsopen(&(0x7f0000000500)='exfat\x00', 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 2m33.677767195s ago: executing program 0 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080)=0x40, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000400)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 2m32.269092735s ago: executing program 0 (id=635): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x890b, &(0x7f0000000000)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 2m26.898469147s ago: executing program 0 (id=639): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000540), 0x6700, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r3) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) 2m20.982140847s ago: executing program 0 (id=653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x4, 0x2, 0x5, 0x4}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000) r5 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) ftruncate(r5, 0x2007ffb) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000030000000e0000008000000000800000", @ANYRES32=0x1, @ANYBLOB="0d0000c5902e89e6ba5590d57f9eda9175e50000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000010000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000500)=0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2m4.879370503s ago: executing program 32 (id=653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x4, 0x2, 0x5, 0x4}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000) r5 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) ftruncate(r5, 0x2007ffb) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000030000000e0000008000000000800000", @ANYRES32=0x1, @ANYBLOB="0d0000c5902e89e6ba5590d57f9eda9175e50000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000010000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000500)=0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1m42.246472441s ago: executing program 4 (id=731): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x44}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e50009040000000101"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 1m39.235224792s ago: executing program 4 (id=737): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0xc0001, 0x0, 0x0) 1m38.949039442s ago: executing program 4 (id=738): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2b, 0x801, 0x0) splice(r3, 0x0, r2, 0x0, 0x39000, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2ce}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000140)="f30f0926640f01cbb9090200000f3265360fc7717e660f3815e966b8da000f00d8c4e11f5d3bb9a40a00000f322e260ffbfcc4e259b803", 0x37}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m32.16513727s ago: executing program 3 (id=744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[], 0x0) 1m31.647187808s ago: executing program 3 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m31.455508011s ago: executing program 3 (id=746): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x44}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e50009040000000101"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 1m30.767900702s ago: executing program 4 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa00, 0x1c2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, 0x0) 1m27.707035519s ago: executing program 3 (id=750): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 1m24.322784421s ago: executing program 3 (id=754): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) msync(&(0x7f0000b25000/0x3000)=nil, 0x3000, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x20000, '\x00', 0x0, r2, 0x1, 0x3, 0x1}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000008c0)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='gid_map\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1m23.589761547s ago: executing program 4 (id=757): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0xc, &(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYRES64=r2, @ANYRESDEC, @ANYRESOCT=r1, @ANYBLOB="992f4904ca20848c2d142814bc7c4ea2de3e4e66a4c3d8dbaa2433825349aac703810c41b1617bf672898806f6143bcb9c73ad78d4f7d029e844128bbecaaa679413c2b00b612460974e89406dad2695fd9fc65317963432f6d0cc8361f9777880dc1a0b7e86941906e4d6539a58dd63adfe067622f94e45897e7a94da9efe7fea3a7d623b25aeab46e2299099ea1cfe9fe7c9d950bd749a46dc208d1b45", @ANYRESOCT, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x3000000000, 0xf}, &(0x7f0000000240)=0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001800040000003d00ee8008003900", @ANYRES32, @ANYBLOB="0800c0000000000004004f80f01254c8a325874b7a364f60eb18eb3e374838d32bfdcf08009e0064010102a5fa1bc096f7000000"], 0x1010}], 0x1, 0x0, 0x0, 0x10004800}, 0xc000) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10162) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={r5, 0x64}, &(0x7f0000000140)=0x8) 1m17.141717866s ago: executing program 4 (id=762): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x11}}], 0x18}, 0x2000c054) mount$fuseblk(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xffffffff}, 0x48) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 1m14.745482529s ago: executing program 3 (id=768): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) rt_sigtimedwait(&(0x7f00000001c0)={[0x5f5]}, &(0x7f0000000300), &(0x7f0000000380), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r4, r1, 0x0, 0x11, &(0x7f00000003c0)='security.selinux\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r9, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x56b6) 1m1.209134375s ago: executing program 33 (id=762): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x11}}], 0x18}, 0x2000c054) mount$fuseblk(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xffffffff}, 0x48) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 59.649548897s ago: executing program 34 (id=768): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) rt_sigtimedwait(&(0x7f00000001c0)={[0x5f5]}, &(0x7f0000000300), &(0x7f0000000380), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r4, r1, 0x0, 0x11, &(0x7f00000003c0)='security.selinux\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r9, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x56b6) 13.720368081s ago: executing program 2 (id=836): pipe2(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 13.573640209s ago: executing program 2 (id=837): socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1f}, 0x94) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) 12.275108725s ago: executing program 2 (id=838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x110) syz_emit_ethernet(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x2000) socket$inet6(0xa, 0x3, 0x1) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) r6 = syz_open_procfs(r1, &(0x7f0000000280)='io\x00') syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000aba000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000007c0)="f30fc7730066b90d0a00000f3236d0d5c176fe00660fc7b30300b838058ec83e65260f5edd66b8000800000f23d00f21f866351000000d0f23f80f0766b888bb00000f23d80f21f86635800000500f23f8", 0x51}], 0x1, 0x14, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007911b000000000008510000002000000850000000800000095000007000000009500a5050000000040cb71c9578349855e069047149c53825e039560e132c7179ff14b370405855787c57067e75bb407e4d289aa1208000000671e"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x7b}}, 0x18) 11.095456135s ago: executing program 2 (id=839): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0x4) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 9.784327341s ago: executing program 2 (id=840): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x54001, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0xc, 0x0, &(0x7f0000000040)) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) iopl(0x3) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020002000100030000000000020001005715aab3a0e7acd1350cf54ac53321b7acfcaf8e39f3f9b33f820833108f05347a98f0ad6032c5655ecf9eb2b3a7697616ddcd553d0dd246cccd0c939ffbb3c41f97db7fc5446e8b67e7a97149d757c0f2906039228a3d98910d6114b1118cd93e7955d9a165f94e26f23650fc6e4d4151b963f97afe3e2a0a", @ANYRES32=0x0, @ANYBLOB="040000000000000010000500000000002000000000000000"], 0x2c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {0x0}, {&(0x7f00000001c0)="ee641681c41fd678a13a3a40e2", 0xd}], 0x3) write$rfkill(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) 5.867033008s ago: executing program 1 (id=843): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x200, 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 5.349496419s ago: executing program 1 (id=844): pipe2(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 4.723400453s ago: executing program 1 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="00ffff000500"/18, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) 3.107777115s ago: executing program 1 (id=846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x110) syz_emit_ethernet(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x2000) socket$inet6(0xa, 0x3, 0x1) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) r6 = syz_open_procfs(r1, &(0x7f0000000280)='io\x00') syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000aba000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000007c0)="f30fc7730066b90d0a00000f3236d0d5c176fe00660fc7b30300b838058ec83e65260f5edd66b8000800000f23d00f21f866351000000d0f23f80f0766b888bb00000f23d80f21f86635800000500f23f8", 0x51}], 0x1, 0x14, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007911b000000000008510000002000000850000000800000095000007000000009500a5050000000040cb71c9578349855e069047149c53825e039560e132c7179ff14b370405855787c57067e75bb407e4d289aa1208000000671e"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x7b}}, 0x18) 1.520799345s ago: executing program 1 (id=847): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0x4) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 177.330785ms ago: executing program 2 (id=848): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2b, 0x801, 0x0) splice(r3, 0x0, r2, 0x0, 0x39000, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2ce}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000140)="f30f0926640f01cbb9090200000f3265360fc7717e660f3815e966b8da000f00d8c4e11f5d3bb9a40a00000f322e260ffbfcc4e259b803", 0x37}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 1 (id=849): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1a00, 0x9211, 0x0, 0x0}], 0x1}) kernel console output (not intermixed with test programs): batadv0: Adding interface: batadv_slave_0 [ 103.342658][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.342682][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.364225][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.485819][ T5850] team0: Port device team_slave_1 added [ 103.486801][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.486811][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.486827][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.581442][ T5855] team0: Port device team_slave_0 added [ 103.786975][ T5855] team0: Port device team_slave_1 added [ 104.146472][ T5858] team0: Port device team_slave_0 added [ 104.147961][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.147978][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.148012][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.344435][ T5858] team0: Port device team_slave_1 added [ 104.412296][ T5847] Bluetooth: hci0: command tx timeout [ 104.424603][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.424619][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.424644][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.437035][ T5843] hsr_slave_0: entered promiscuous mode [ 104.439010][ T5843] hsr_slave_1: entered promiscuous mode [ 104.444991][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.445007][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.445031][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.491649][ T5847] Bluetooth: hci1: command tx timeout [ 104.571960][ T5847] Bluetooth: hci2: command tx timeout [ 104.609563][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.609579][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.609595][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.651750][ T5847] Bluetooth: hci3: command tx timeout [ 104.704719][ T5846] hsr_slave_0: entered promiscuous mode [ 104.706675][ T5846] hsr_slave_1: entered promiscuous mode [ 104.707848][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 104.707922][ T5846] Cannot create hsr debugfs directory [ 104.731628][ T5847] Bluetooth: hci4: command tx timeout [ 104.733954][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.733969][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.733992][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.857172][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.857191][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.857219][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.372522][ T5850] hsr_slave_0: entered promiscuous mode [ 105.373388][ T5850] hsr_slave_1: entered promiscuous mode [ 105.373950][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 105.373972][ T5850] Cannot create hsr debugfs directory [ 105.536651][ T5855] hsr_slave_0: entered promiscuous mode [ 105.537975][ T5855] hsr_slave_1: entered promiscuous mode [ 105.538590][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 105.538608][ T5855] Cannot create hsr debugfs directory [ 105.830016][ T5858] hsr_slave_0: entered promiscuous mode [ 105.830994][ T5858] hsr_slave_1: entered promiscuous mode [ 105.843151][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 105.843209][ T5858] Cannot create hsr debugfs directory [ 106.492910][ T5847] Bluetooth: hci0: command tx timeout [ 106.571718][ T5847] Bluetooth: hci1: command tx timeout [ 106.652893][ T5847] Bluetooth: hci2: command tx timeout [ 106.731714][ T5847] Bluetooth: hci3: command tx timeout [ 106.811790][ T5847] Bluetooth: hci4: command tx timeout [ 107.372869][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.416052][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.451328][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.508798][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.681164][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.731052][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.771364][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.840561][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.004715][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.051859][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.100443][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.162372][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.360988][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.406447][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.450343][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.520729][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.729061][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.779121][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.834848][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.890211][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.896793][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.043284][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.090510][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.141083][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.141242][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.218352][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.218556][ T773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.304218][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.329248][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.366168][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.366417][ T773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.439487][ T2158] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.440087][ T2158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.503908][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.569036][ T817] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.569294][ T817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.580255][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.630211][ T817] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.630404][ T817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.787168][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.816484][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.871426][ T817] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.872823][ T817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.974728][ T2158] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.974913][ T2158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.125542][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.208320][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.208467][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.257789][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.257956][ T773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.317652][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.756464][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.922481][ T5843] veth0_vlan: entered promiscuous mode [ 110.960001][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.016148][ T5843] veth1_vlan: entered promiscuous mode [ 111.232751][ T5846] veth0_vlan: entered promiscuous mode [ 111.290893][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.300217][ T5846] veth1_vlan: entered promiscuous mode [ 111.359452][ T5843] veth0_macvtap: entered promiscuous mode [ 111.368533][ T5855] veth0_vlan: entered promiscuous mode [ 111.400094][ T5843] veth1_macvtap: entered promiscuous mode [ 111.440294][ T5855] veth1_vlan: entered promiscuous mode [ 111.466245][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.564313][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.598613][ T5846] veth0_macvtap: entered promiscuous mode [ 111.625432][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.648592][ T5846] veth1_macvtap: entered promiscuous mode [ 111.717911][ T1230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.743544][ T1230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.755869][ T5850] veth0_vlan: entered promiscuous mode [ 111.762637][ T1230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.793977][ T1230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.835602][ T5855] veth0_macvtap: entered promiscuous mode [ 111.930390][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.931250][ T5850] veth1_vlan: entered promiscuous mode [ 111.946201][ T5855] veth1_macvtap: entered promiscuous mode [ 112.038040][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.185986][ T2158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.200422][ T2158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.238160][ T2158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.279227][ T2158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.309692][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.352214][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.352237][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.397239][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.538236][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.588464][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.613862][ T5850] veth0_macvtap: entered promiscuous mode [ 112.621395][ T817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.621416][ T817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.637040][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.673963][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.712974][ T5850] veth1_macvtap: entered promiscuous mode [ 112.934603][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.934626][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.963805][ T5858] veth0_vlan: entered promiscuous mode [ 113.138669][ T5957] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.140690][ T5957] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1'. [ 113.148719][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.207737][ T5858] veth1_vlan: entered promiscuous mode [ 113.240206][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.254389][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.254412][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.399683][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.409050][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.411194][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.429234][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.498911][ T2158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.498935][ T2158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.537522][ T5960] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6'. [ 113.795808][ T817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.795828][ T817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.810278][ T5858] veth0_macvtap: entered promiscuous mode [ 113.988568][ T5858] veth1_macvtap: entered promiscuous mode [ 114.147962][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.147986][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.249923][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.383806][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.425337][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.425368][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.519713][ T1230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.549858][ T1230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.553776][ T1230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.560091][ T1230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.675846][ T5971] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.806280][ C1] sd 0:0:1:0: [sda] tag#6945 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 114.806349][ C1] sd 0:0:1:0: [sda] tag#6945 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 114.894447][ T5975] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.002753][ T5979] netlink: 592 bytes leftover after parsing attributes in process `syz.3.12'. [ 115.605970][ T5988] lo: entered allmulticast mode [ 115.611104][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.611128][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.921576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.363642][ T37] audit: type=1326 audit(1757299827.691:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8096debe9 code=0x7ffc0000 [ 116.363703][ T37] audit: type=1326 audit(1757299827.691:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa8096debe9 code=0x7ffc0000 [ 116.371739][ T37] audit: type=1326 audit(1757299827.691:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8096debe9 code=0x7ffc0000 [ 116.373840][ T37] audit: type=1326 audit(1757299827.691:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8096debe9 code=0x7ffc0000 [ 116.381681][ T37] audit: type=1326 audit(1757299827.721:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa8096debe9 code=0x7ffc0000 [ 116.381734][ T37] audit: type=1326 audit(1757299827.721:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8096debe9 code=0x7ffc0000 [ 116.381773][ T37] audit: type=1326 audit(1757299827.721:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8096debe9 code=0x7ffc0000 [ 116.381814][ T37] audit: type=1326 audit(1757299827.721:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8096debe9 code=0x7ffc0000 [ 116.381852][ T37] audit: type=1326 audit(1757299827.721:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8096debe9 code=0x7ffc0000 [ 116.400209][ T5991] process 'syz.3.13' launched '/dev/fd/8' with NULL argv: empty string added [ 116.541578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.116060][ T5982] lo: left allmulticast mode [ 117.118170][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.118190][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.301775][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 118.581915][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.823825][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 118.848109][ T45] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 118.848143][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.848165][ T45] usb 2-1: config 0 has no interfaces? [ 118.848201][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 118.848226][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.043164][ T45] usb 2-1: config 0 descriptor?? [ 119.305869][ C1] sd 0:0:1:0: [sda] tag#6950 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 119.305908][ C1] sd 0:0:1:0: [sda] tag#6950 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 119.315783][ T45] usb 2-1: string descriptor 0 read error: -71 [ 119.394606][ T6019] netlink: 592 bytes leftover after parsing attributes in process `syz.4.22'. [ 119.397160][ T45] usb 2-1: USB disconnect, device number 2 [ 120.223045][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 120.351596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.352849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.354014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.355172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.471856][ T6034] capability: warning: `syz.3.26' uses deprecated v2 capabilities in a way that may be insecure [ 120.731609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.991596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.081645][ T5928] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.311735][ T5928] usb 4-1: device descriptor read/64, error -71 [ 121.626821][ T5928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.851607][ T5928] usb 4-1: device descriptor read/64, error -71 [ 121.964138][ T5928] usb usb4-port1: attempt power cycle [ 121.975615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 122.058270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 122.412143][ T5928] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.441152][ T5928] usb 4-1: device descriptor read/8, error -71 [ 122.731835][ T5928] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.785107][ T5928] usb 4-1: device descriptor read/8, error -71 [ 122.933991][ T5928] usb usb4-port1: unable to enumerate USB device [ 126.841495][ T6074] lo: entered allmulticast mode [ 126.951641][ T5934] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.085802][ T5934] usb 5-1: device descriptor read/64, error -71 [ 127.469292][ T5934] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.422031][ T5934] usb 5-1: device descriptor read/64, error -71 [ 128.558710][ T5934] usb usb5-port1: attempt power cycle [ 128.993224][ T6066] lo: left allmulticast mode [ 129.021662][ T5934] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.048034][ T5934] usb 5-1: device descriptor read/8, error -71 [ 129.155021][ T6092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.39'. [ 129.302731][ T5934] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.322475][ T5934] usb 5-1: device descriptor read/8, error -71 [ 129.432439][ T5934] usb usb5-port1: unable to enumerate USB device [ 134.180520][ T6137] random: crng reseeded on system resumption [ 135.114860][ T5860] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.121980][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 135.267089][ T5860] usb 3-1: device descriptor read/64, error -32 [ 135.461213][ T6141] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.531921][ T5860] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.671690][ T5860] usb 3-1: device descriptor read/64, error -71 [ 135.789665][ T5860] usb usb3-port1: attempt power cycle [ 136.151622][ T5860] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.251448][ T6141] Zero length message leads to an empty skb [ 137.272844][ T5928] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.434409][ T5928] usb 4-1: no configurations [ 137.434424][ T5928] usb 4-1: can't read configurations, error -22 [ 137.601699][ T5928] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.764717][ T5928] usb 4-1: no configurations [ 137.764739][ T5928] usb 4-1: can't read configurations, error -22 [ 137.770464][ T5928] usb usb4-port1: attempt power cycle [ 138.282522][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.283483][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.331662][ T5928] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 138.353522][ T5928] usb 4-1: no configurations [ 138.353543][ T5928] usb 4-1: can't read configurations, error -22 [ 138.491740][ T5928] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.602000][ T5928] usb 4-1: no configurations [ 138.602025][ T5928] usb 4-1: can't read configurations, error -22 [ 138.603585][ T5928] usb usb4-port1: unable to enumerate USB device [ 139.881685][ T5860] usb 3-1: device descriptor read/8, error -71 [ 140.745688][ T6163] lo: entered allmulticast mode [ 141.074669][ T6171] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 141.706527][ T6157] lo: left allmulticast mode [ 142.806476][ T6185] program syz.3.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.022871][ T5907] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.884345][ T5907] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 143.884380][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.891020][ T5907] usb 2-1: config 0 descriptor?? [ 144.009530][ T5907] pwc: Creative Labs Webcam Pro Ex detected. [ 144.120792][ T5907] pwc: Failed to set LED on/off time (-71) [ 144.122171][ T5907] pwc: send_video_command error -71 [ 144.122185][ T5907] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 144.122569][ T5907] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 144.174924][ T6180] sctp: failed to load transform for md5: -2 [ 144.337121][ T5907] usb 2-1: USB disconnect, device number 3 [ 144.420156][ T6183] syz.3.62 (6183) used greatest stack depth: 17576 bytes left [ 144.811710][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.941839][ T10] usb 1-1: device descriptor read/64, error -71 [ 145.112655][ T5907] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 145.211454][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.261765][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 145.281697][ T5907] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 145.281729][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.285995][ T5907] usb 5-1: Product: syz [ 145.286008][ T5907] usb 5-1: Manufacturer: syz [ 145.286016][ T5907] usb 5-1: SerialNumber: syz [ 145.341744][ T10] usb 1-1: device descriptor read/64, error -71 [ 145.454711][ T10] usb usb1-port1: attempt power cycle [ 145.727023][ T5907] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 145.801848][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.844895][ T1199] usb 5-1: USB disconnect, device number 6 [ 145.862917][ T5934] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.869850][ T10] usb 1-1: device descriptor read/8, error -71 [ 145.893511][ T1199] usblp0: removed [ 146.032365][ T5934] usb 2-1: no configurations [ 146.032381][ T5934] usb 2-1: can't read configurations, error -22 [ 146.104193][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.129649][ T10] usb 1-1: device descriptor read/8, error -71 [ 146.171766][ T5934] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.233937][ T10] usb usb1-port1: unable to enumerate USB device [ 146.334108][ T5934] usb 2-1: no configurations [ 146.334124][ T5934] usb 2-1: can't read configurations, error -22 [ 146.336120][ T5934] usb usb2-port1: attempt power cycle [ 146.671653][ T5934] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.693465][ T5934] usb 2-1: no configurations [ 146.693479][ T5934] usb 2-1: can't read configurations, error -22 [ 146.852446][ T5934] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.019631][ T5934] usb 2-1: no configurations [ 147.019653][ T5934] usb 2-1: can't read configurations, error -22 [ 148.153296][ T5934] usb usb2-port1: unable to enumerate USB device [ 152.431778][ T6240] lo: entered allmulticast mode [ 152.448335][ T6240] tunl0: entered allmulticast mode [ 152.500900][ T6240] gre0: entered allmulticast mode [ 152.654859][ T6240] gretap0: entered allmulticast mode [ 152.783690][ T6240] erspan0: entered allmulticast mode [ 152.826048][ T6240] ip_vti0: entered allmulticast mode [ 152.846203][ T6240] ip6_vti0: entered allmulticast mode [ 152.872356][ T6240] sit0: entered allmulticast mode [ 152.887557][ T6042] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.893890][ T6240] ip6tnl0: entered allmulticast mode [ 152.933297][ T6240] ip6gre0: entered allmulticast mode [ 153.003989][ T6240] syz_tun: entered allmulticast mode [ 153.043342][ T6042] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 153.043363][ T6042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.046359][ T6240] ip6gretap0: entered allmulticast mode [ 153.081414][ T6042] usb 1-1: config 0 descriptor?? [ 153.096991][ T6042] pwc: Creative Labs Webcam Pro Ex detected. [ 153.192346][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.193222][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.218780][ T6240] bridge0: entered allmulticast mode [ 153.252371][ T6240] vcan0: entered allmulticast mode [ 153.290867][ T6042] pwc: Failed to set LED on/off time (-71) [ 153.300350][ T6042] pwc: send_video_command error -71 [ 153.300362][ T6042] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 153.300458][ T6042] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 153.331326][ T6240] bond0: entered allmulticast mode [ 153.331351][ T6240] bond_slave_0: entered allmulticast mode [ 153.331374][ T6240] bond_slave_1: entered allmulticast mode [ 153.380160][ T6042] usb 1-1: USB disconnect, device number 6 [ 153.471203][ T6240] team0: entered allmulticast mode [ 153.471222][ T6240] team_slave_0: entered allmulticast mode [ 153.471236][ T6240] team_slave_1: entered allmulticast mode [ 153.500957][ T6240] dummy0: entered allmulticast mode [ 153.551899][ T6240] nlmon0: entered allmulticast mode [ 153.589349][ T6240] caif0: entered allmulticast mode [ 153.599552][ T6240] batadv0: entered allmulticast mode [ 153.642002][ T6240] vxcan0: entered allmulticast mode [ 153.652628][ T6240] vxcan1: entered allmulticast mode [ 153.654273][ T6240] veth0: entered allmulticast mode [ 153.698057][ T6240] veth1: entered allmulticast mode [ 153.873304][ T6240] wg0: entered allmulticast mode [ 155.373059][ T6240] wg1: entered allmulticast mode [ 155.405069][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.82'. [ 155.405096][ T6254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.82'. [ 155.937700][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.83'. [ 155.961965][ T6258] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 155.961994][ T6258] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 155.968808][ T6240] wg2: entered allmulticast mode [ 156.012147][ T6240] veth0_to_bridge: entered allmulticast mode [ 156.043390][ T6240] veth1_to_bridge: entered allmulticast mode [ 156.071069][ T6240] veth0_to_bond: entered allmulticast mode [ 156.093441][ T6240] veth1_to_bond: entered allmulticast mode [ 156.114670][ T6240] veth0_to_team: entered allmulticast mode [ 156.145382][ T6240] veth1_to_team: entered allmulticast mode [ 156.165523][ T6240] veth0_to_batadv: entered allmulticast mode [ 156.181159][ T6240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.193534][ T6240] batadv_slave_0: entered allmulticast mode [ 156.201454][ T6240] veth1_to_batadv: entered allmulticast mode [ 156.221665][ T6240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.222252][ T6240] batadv_slave_1: entered allmulticast mode [ 156.250253][ T6240] xfrm0: entered allmulticast mode [ 156.276502][ T6266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.84'. [ 156.276541][ T6266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.84'. [ 156.300630][ T6258] vhci_hcd vhci_hcd.0: Device attached [ 156.525655][ T6016] vhci_hcd: vhci_device speed not set [ 156.852428][ T6016] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 156.867820][ T6240] veth0_to_hsr: entered allmulticast mode [ 157.366199][ T6263] vhci_hcd: connection reset by peer [ 157.375131][ T2158] vhci_hcd: stop threads [ 157.375793][ T2158] vhci_hcd: release socket [ 157.377490][ T2158] vhci_hcd: disconnect device [ 157.384421][ T6240] hsr_slave_0: entered allmulticast mode [ 157.390056][ T6240] veth1_to_hsr: entered allmulticast mode [ 157.533816][ T6240] hsr_slave_1: entered allmulticast mode [ 157.540889][ T6240] hsr0: entered allmulticast mode [ 157.601896][ T6240] veth1_virt_wifi: entered allmulticast mode [ 157.609440][ T6240] veth0_virt_wifi: entered allmulticast mode [ 157.635518][ T6240] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 157.636144][ T6240] veth1_vlan: entered allmulticast mode [ 157.654741][ T6240] veth0_vlan: entered allmulticast mode [ 157.674753][ T6264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.784537][ T6240] vlan0: entered allmulticast mode [ 157.784807][ T6240] vlan1: entered allmulticast mode [ 157.834225][ T6240] macvlan0: entered allmulticast mode [ 157.928981][ T6240] macvlan1: entered allmulticast mode [ 157.949983][ T6240] ipvlan0: entered allmulticast mode [ 157.950241][ T6240] ipvlan1: entered allmulticast mode [ 157.955113][ T6240] veth1_macvtap: entered allmulticast mode [ 157.990371][ T6240] veth0_macvtap: entered allmulticast mode [ 158.014875][ T6042] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.072634][ T6240] macvtap0: entered allmulticast mode [ 158.095413][ T6240] macsec0: entered allmulticast mode [ 158.156421][ T6042] usb 4-1: device descriptor read/64, error -71 [ 158.223861][ T6240] geneve0: entered allmulticast mode [ 159.030697][ T6240] geneve1: entered allmulticast mode [ 159.361753][ T6042] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.437095][ T6240] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 159.744642][ T6240] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 159.905929][ T6240] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 160.092816][ T6240] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 160.536111][ T6240] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 160.671307][ T6283] loop8: detected capacity change from 0 to 8 [ 160.723689][ T6283] Dev loop8: unable to read RDB block 8 [ 160.723751][ T6283] loop8: unable to read partition table [ 160.724027][ T6283] loop8: partition table beyond EOD, truncated [ 160.724062][ T6283] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 160.825083][ T6240] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 160.841249][ T6240] gre1: entered allmulticast mode [ 161.482142][ T6266] team0: entered promiscuous mode [ 161.482167][ T6266] team_slave_0: entered promiscuous mode [ 161.486765][ T6266] team_slave_1: entered promiscuous mode [ 161.498351][ T6266] dummy0: entered promiscuous mode [ 161.570016][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.610974][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.667056][ T817] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.669521][ T817] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.761404][ T6016] vhci_hcd: vhci_device speed not set [ 164.673560][ T6042] usb 4-1: device descriptor read/64, error -110 [ 165.491714][ T6042] usb usb4-port1: attempt power cycle [ 165.831646][ T6042] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 165.852409][ T6042] usb 4-1: device descriptor read/8, error -32 [ 167.140529][ T6042] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 167.167785][ T6042] usb 4-1: device descriptor read/8, error -32 [ 167.279054][ T6042] usb usb4-port1: unable to enumerate USB device [ 169.451772][ T6042] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 169.607170][ T6042] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.607200][ T6042] usb 4-1: config 0 has no interfaces? [ 169.616336][ T6042] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 169.616366][ T6042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.616385][ T6042] usb 4-1: Product: syz [ 169.616398][ T6042] usb 4-1: Manufacturer: syz [ 169.616411][ T6042] usb 4-1: SerialNumber: syz [ 169.758409][ T6042] usb 4-1: config 0 descriptor?? [ 170.698462][ T6348] binder: 6338:6348 ioctl c0306201 0 returned -14 [ 171.424547][ T5220] usb 4-1: USB disconnect, device number 14 [ 172.147695][ T6355] capability: warning: `syz.4.108' uses 32-bit capabilities (legacy support in use) [ 183.035592][ T6429] lo: entered allmulticast mode [ 183.961934][ T6422] lo: left allmulticast mode [ 194.982523][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.324203][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.147733][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.147208][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.795312][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.499254][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.700987][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.701079][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.121634][ T6016] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 201.548512][ T6016] usb 4-1: Using ep0 maxpacket: 16 [ 201.555317][ T6016] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.555352][ T6016] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.555376][ T6016] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.555414][ T6016] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 201.555439][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.563067][ T6016] usb 4-1: config 0 descriptor?? [ 203.368038][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.167'. [ 203.368067][ T6573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.167'. [ 206.909871][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 207.376032][ T6016] usbhid 4-1:0.0: can't add hid device: -32 [ 207.376126][ T6016] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 207.925853][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.165797][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.837285][ T5220] usb 4-1: USB disconnect, device number 15 [ 209.207525][ T6605] netlink: 'syz.1.178': attribute type 10 has an invalid length. [ 209.267485][ T6607] netlink: 'syz.1.178': attribute type 10 has an invalid length. [ 209.270869][ T6605] team0: Port device dummy0 added [ 209.286346][ T6607] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 209.393635][ T6607] team0: Failed to send options change via netlink (err -105) [ 209.393950][ T6607] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 209.394680][ T6607] team0: Port device dummy0 removed [ 209.535700][ T6607] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 210.787873][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 210.971819][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 210.978223][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 210.987094][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 210.987118][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 210.987130][ T9] usb 5-1: Product: syz [ 210.987139][ T9] usb 5-1: Manufacturer: syz [ 210.987148][ T9] usb 5-1: SerialNumber: syz [ 211.005773][ T9] usb 5-1: config 0 descriptor?? [ 211.012552][ T6609] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.464432][ T6016] usb 5-1: USB disconnect, device number 7 [ 213.922047][ T6640] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 213.922118][ T6640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.186'. [ 216.577331][ T6212] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 216.811209][ T6212] usb 2-1: device descriptor read/64, error -71 [ 217.041650][ T6212] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 217.186145][ T6212] usb 2-1: device descriptor read/64, error -71 [ 217.295866][ T6212] usb usb2-port1: attempt power cycle [ 217.741769][ T6212] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.768873][ T6212] usb 2-1: device descriptor read/8, error -71 [ 218.434044][ T6668] lo: entered allmulticast mode [ 218.461640][ T6212] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 218.492707][ T6212] usb 2-1: device descriptor read/8, error -71 [ 218.602120][ T6212] usb usb2-port1: unable to enumerate USB device [ 218.753174][ T6662] lo: left allmulticast mode [ 220.660029][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.201'. [ 220.660057][ T6692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.201'. [ 222.718438][ T6685] Bluetooth: hci0: command 0x0406 tx timeout [ 222.718489][ T6685] Bluetooth: hci1: command 0x0406 tx timeout [ 222.718515][ T6685] Bluetooth: hci2: command 0x0406 tx timeout [ 222.718579][ T6685] Bluetooth: hci3: command 0x0406 tx timeout [ 222.718606][ T6685] Bluetooth: hci4: command 0x0406 tx timeout [ 224.786411][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.004156][ T6738] netlink: 'syz.3.217': attribute type 1 has an invalid length. [ 225.170444][ T6746] fuse: Bad value for 'fd' [ 225.210160][ T6738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.923662][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.935271][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 226.272968][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.221'. [ 226.284682][ T10] usb 1-1: device descriptor read/64, error -71 [ 226.555222][ T6757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.575421][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 226.814461][ T6741] bond1: (slave veth3): Enslaving as an active interface with a down link [ 226.847284][ T6744] vlan2: entered allmulticast mode [ 226.847379][ T6744] veth1: entered allmulticast mode [ 226.848905][ T6744] veth1: entered promiscuous mode [ 226.849586][ T6744] veth1: left promiscuous mode [ 226.861819][ T10] usb 1-1: device descriptor read/64, error -71 [ 226.862380][ T6744] bond1: (slave vlan2): making interface the new active one [ 226.901007][ T6744] veth1: entered promiscuous mode [ 226.907206][ T6744] vlan2: entered promiscuous mode [ 226.916969][ T6744] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 226.980758][ T10] usb usb1-port1: attempt power cycle [ 227.059703][ T6042] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 227.318584][ T6042] usb 3-1: device descriptor read/64, error -71 [ 227.372302][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 227.410087][ T10] usb 1-1: device descriptor read/8, error -71 [ 227.551800][ T6042] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 227.661876][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.691145][ T10] usb 1-1: device descriptor read/8, error -71 [ 227.703378][ T6042] usb 3-1: device descriptor read/64, error -71 [ 227.807078][ T10] usb usb1-port1: unable to enumerate USB device [ 227.818325][ T6042] usb usb3-port1: attempt power cycle [ 228.174534][ T6042] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.204401][ T6042] usb 3-1: device descriptor read/8, error -71 [ 228.441632][ T6042] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 228.473643][ T6042] usb 3-1: device descriptor read/8, error -71 [ 228.582385][ T6042] usb usb3-port1: unable to enumerate USB device [ 230.023707][ T6768] syz.3.225 (6768) used greatest stack depth: 16760 bytes left [ 235.821760][ T5934] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 237.241696][ T5934] usb 1-1: device descriptor read/64, error -71 [ 237.491741][ T5934] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 237.632899][ T5934] usb 1-1: device descriptor read/64, error -71 [ 237.747971][ T5934] usb usb1-port1: attempt power cycle [ 238.254382][ T5934] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 238.441179][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 240.382376][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.243'. [ 240.543375][ T6835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.821629][ T6042] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 240.961627][ T6042] usb 3-1: device descriptor read/64, error -71 [ 241.201679][ T6042] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 241.491650][ T6042] usb 3-1: device descriptor read/64, error -71 [ 241.608757][ T6042] usb usb3-port1: attempt power cycle [ 241.971761][ T6042] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 243.293469][ T5934] usb 1-1: device descriptor read/8, error -110 [ 243.622139][ T817] vlan2: left promiscuous mode [ 243.695660][ T5934] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 243.711994][ T5934] usb 1-1: device descriptor read/8, error -32 [ 243.822166][ T5934] usb usb1-port1: unable to enumerate USB device [ 247.053275][ T6042] usb 3-1: device descriptor read/8, error -110 [ 247.312798][ T6042] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 247.331975][ T6042] usb 3-1: device descriptor read/8, error -32 [ 247.442118][ T6042] usb usb3-port1: unable to enumerate USB device [ 247.715299][ T6873] netlink: 132 bytes leftover after parsing attributes in process `syz.0.257'. [ 251.861704][ T5860] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 252.286020][ T6921] binder: 6918:6921 ioctl c0306201 0 returned -14 [ 252.309347][ T5860] usb 2-1: device descriptor read/64, error -71 [ 253.231671][ T5860] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 253.381741][ T5860] usb 2-1: device descriptor read/64, error -71 [ 253.516459][ T5860] usb usb2-port1: attempt power cycle [ 253.861950][ T5860] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 256.846454][ T1199] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 257.179535][ T1199] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 257.179570][ T1199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.449692][ T1199] usb 4-1: config 0 descriptor?? [ 257.688430][ T1199] pwc: Creative Labs Webcam Pro Ex detected. [ 257.689445][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 257.781358][ T1199] pwc: Failed to set LED on/off time (-32) [ 257.799391][ T1199] pwc: send_video_command error -71 [ 257.799411][ T1199] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 257.799547][ T1199] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 257.923778][ T1199] usb 4-1: USB disconnect, device number 16 [ 258.070417][ T5860] usb 2-1: device descriptor read/8, error -71 [ 261.248526][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.248617][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.440810][ T6989] input: syz0 as /devices/virtual/input/input7 [ 264.255380][ T5934] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 264.548491][ T5934] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 264.548535][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.604542][ T5934] usb 4-1: config 0 descriptor?? [ 264.646992][ T5934] pwc: Creative Labs Webcam Pro Ex detected. [ 264.950661][ T5934] pwc: Failed to set LED on/off time (-71) [ 264.972694][ T5934] pwc: send_video_command error -71 [ 264.972715][ T5934] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 264.972849][ T5934] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 265.324893][ T5934] usb 4-1: USB disconnect, device number 17 [ 269.144324][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.302'. [ 269.144351][ T7023] netlink: 32 bytes leftover after parsing attributes in process `syz.1.302'. [ 269.885688][ T7031] fuse: Bad value for 'fd' [ 271.687486][ T5934] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 271.852749][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 271.855571][ T5934] usb 3-1: config 0 has no interfaces? [ 271.855597][ T5934] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 271.855613][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.932105][ T5934] usb 3-1: config 0 descriptor?? [ 272.163753][ C1] sd 0:0:1:0: [sda] tag#6912 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 272.163820][ C1] sd 0:0:1:0: [sda] tag#6912 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 272.244910][ T5934] usb 3-1: string descriptor 0 read error: -71 [ 272.431843][ T5934] usb 3-1: USB disconnect, device number 14 [ 275.163425][ T7067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.315'. [ 275.163444][ T7067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.315'. [ 276.285009][ T7081] fuse: Bad value for 'fd' [ 277.170721][ T5220] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 277.323967][ T5220] usb 4-1: Using ep0 maxpacket: 32 [ 277.347839][ T5220] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 277.347873][ T5220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.357758][ T5220] usb 4-1: config 0 descriptor?? [ 277.624416][ T5220] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 277.663061][ T5220] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.663936][ T5220] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 277.663991][ T5220] usb 4-1: media controller created [ 277.757288][ T5220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.813929][ T7087] dib0700: tx buffer length is larger than 4. Not supported. [ 278.123671][ T5220] DVB: Unable to find symbol dib7000p_attach() [ 278.128226][ T5220] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 278.271583][ T5220] rc_core: IR keymap rc-dib0700-rc5 not found [ 278.271607][ T5220] Registered IR keymap rc-empty [ 278.272229][ T5220] dvb-usb: could not initialize remote control. [ 278.272240][ T5220] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 278.352105][ T5220] usb 4-1: USB disconnect, device number 18 [ 278.503882][ T7098] pimreg: tun_chr_ioctl cmd 1074025677 [ 278.504187][ T7098] pimreg: linktype set to 769 [ 278.619482][ T5220] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 280.113583][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.329'. [ 280.113607][ T7115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.329'. [ 281.661557][ T5860] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 281.816317][ T5860] usb 1-1: device descriptor read/64, error -71 [ 282.071622][ T5860] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 282.222577][ T5860] usb 1-1: device descriptor read/64, error -71 [ 282.333301][ T5860] usb usb1-port1: attempt power cycle [ 282.822552][ T5860] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 282.844148][ T5860] usb 1-1: device descriptor read/8, error -71 [ 283.091761][ T5860] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 283.131501][ T5860] usb 1-1: device descriptor read/8, error -71 [ 283.256963][ T5860] usb usb1-port1: unable to enumerate USB device [ 286.421888][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.342'. [ 286.421906][ T7158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.342'. [ 287.221675][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 287.341667][ T6212] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 287.362677][ T10] usb 4-1: device descriptor read/64, error -71 [ 287.518551][ T6212] usb 5-1: Using ep0 maxpacket: 16 [ 287.603897][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 287.616292][ T7176] ptrace attach of "./syz-executor exec"[5858] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   8  þÿÿÿÿÿÿÿ ÿÿÿÿ wlan1"[7176] [ 287.741756][ T10] usb 4-1: device descriptor read/64, error -71 [ 287.857070][ T10] usb usb4-port1: attempt power cycle [ 289.633762][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 292.661898][ T6212] usb 5-1: unable to get BOS descriptor or descriptor too short [ 292.771322][ T6212] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 292.771354][ T6212] usb 5-1: chopping to 0 config(s) [ 292.771383][ T6212] usb 5-1: can't read configurations, error -32 [ 292.931664][ T6212] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 293.071616][ T6212] usb 5-1: device descriptor read/64, error -32 [ 293.181930][ T6212] usb usb5-port1: attempt power cycle [ 293.521646][ T6212] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 293.543884][ T6212] usb 5-1: device descriptor read/8, error -32 [ 293.791644][ T6212] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 293.822225][ T6212] usb 5-1: device descriptor read/8, error -32 [ 293.942126][ T6212] usb usb5-port1: unable to enumerate USB device [ 294.731964][ T10] usb 4-1: device descriptor read/8, error -110 [ 294.971666][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 295.001958][ T10] usb 4-1: device descriptor read/8, error -32 [ 295.141772][ T10] usb usb4-port1: unable to enumerate USB device [ 298.231702][ T6016] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 298.795504][ T6016] usb 2-1: device descriptor read/64, error -71 [ 299.041655][ T6016] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 299.233628][ T6016] usb 2-1: device descriptor read/64, error -71 [ 299.344021][ T6016] usb usb2-port1: attempt power cycle [ 299.681779][ T6016] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 301.156625][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.853475][ T7244] netlink: 'syz.3.365': attribute type 28 has an invalid length. [ 304.213456][ T7244] netlink: 52 bytes leftover after parsing attributes in process `syz.3.365'. [ 304.741971][ T6016] usb 2-1: device descriptor read/8, error -110 [ 305.021622][ T6016] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 305.041942][ T6016] usb 2-1: device descriptor read/8, error -32 [ 305.164789][ T6016] usb usb2-port1: unable to enumerate USB device [ 307.424930][ T7265] binder: 7259:7265 ioctl c0306201 0 returned -14 [ 309.688533][ T7284] loop8: detected capacity change from 0 to 7 [ 309.747344][ T7284] Dev loop8: unable to read RDB block 7 [ 309.747393][ T7284] loop8: unable to read partition table [ 309.747623][ T7284] loop8: partition table beyond EOD, truncated [ 309.747648][ T7284] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 311.391677][ T6016] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 311.531934][ T6016] usb 5-1: device descriptor read/64, error -71 [ 311.781977][ T6016] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 311.912392][ T6016] usb 5-1: device descriptor read/64, error -71 [ 312.027763][ T6016] usb usb5-port1: attempt power cycle [ 312.391723][ T6016] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 312.461305][ T6016] usb 5-1: device descriptor read/8, error -71 [ 312.705311][ T6016] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 312.724040][ T6016] usb 5-1: device descriptor read/8, error -71 [ 312.842009][ T6016] usb usb5-port1: unable to enumerate USB device [ 313.221646][ T6016] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 313.541569][ T6016] usb 4-1: Using ep0 maxpacket: 16 [ 313.545277][ T6016] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 313.545296][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 313.545309][ T6016] usb 4-1: Product: syz [ 313.545318][ T6016] usb 4-1: Manufacturer: syz [ 313.545326][ T6016] usb 4-1: SerialNumber: syz [ 313.549090][ T6016] usb 4-1: config 0 descriptor?? [ 315.345202][ T6016] usb 4-1: USB disconnect, device number 23 [ 315.596735][ T6945] udevd[6945]: setting mode of /dev/bus/usb/004/023 to 020664 failed: No such file or directory [ 315.596979][ T6945] udevd[6945]: setting owner of /dev/bus/usb/004/023 to uid=0, gid=0 failed: No such file or directory [ 315.734691][ T6057] udevd[6057]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.691682][ T5220] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 316.931636][ T5220] usb 2-1: Using ep0 maxpacket: 8 [ 316.938685][ T5220] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 316.938718][ T5220] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.938739][ T5220] usb 2-1: config 0 has no interfaces? [ 316.938773][ T5220] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 316.938799][ T5220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.100331][ T5220] usb 2-1: config 0 descriptor?? [ 317.460826][ C1] sd 0:0:1:0: [sda] tag#6956 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 317.460895][ C1] sd 0:0:1:0: [sda] tag#6956 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 317.486168][ T5220] usb 2-1: string descriptor 0 read error: -71 [ 317.492237][ T5220] usb 2-1: USB disconnect, device number 20 [ 318.722860][ T7360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.396'. [ 318.722877][ T7360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.396'. [ 322.595263][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.595353][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.844495][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.931899][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.371820][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.056698][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.931703][ T6016] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 340.101586][ T6016] usb 2-1: Using ep0 maxpacket: 8 [ 340.104843][ T6016] usb 2-1: unable to get BOS descriptor or descriptor too short [ 340.110102][ T6016] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 340.110133][ T6016] usb 2-1: config 4 has no interface number 0 [ 340.110168][ T6016] usb 2-1: config 4 interface 30 has no altsetting 0 [ 340.175926][ T6016] usb 2-1: string descriptor 0 read error: -22 [ 340.176048][ T6016] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 340.176063][ T6016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.267982][ T6016] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 340.268039][ T6016] dw2102: su3000_power_ctrl: 1, initialized 0 [ 340.268588][ T6016] dvb-usb: bulk message failed: -22 (2/0) [ 340.347191][ T6016] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.348992][ T6016] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 340.349059][ T6016] usb 2-1: media controller created [ 340.349554][ T6016] dvb-usb: bulk message failed: -22 (6/0) [ 340.349623][ T6016] dw2102: i2c transfer failed. [ 340.349653][ T6016] dvb-usb: bulk message failed: -22 (6/0) [ 340.349670][ T6016] dw2102: i2c transfer failed. [ 340.349688][ T6016] dvb-usb: bulk message failed: -22 (6/0) [ 340.349701][ T6016] dw2102: i2c transfer failed. [ 340.349718][ T6016] dvb-usb: bulk message failed: -22 (6/0) [ 340.349731][ T6016] dw2102: i2c transfer failed. [ 340.349747][ T6016] dvb-usb: bulk message failed: -22 (6/0) [ 340.349758][ T6016] dw2102: i2c transfer failed. [ 340.349773][ T6016] dvb-usb: bulk message failed: -22 (6/0) [ 340.349784][ T6016] dw2102: i2c transfer failed. [ 340.349792][ T6016] dvb-usb: MAC address: 02:02:02:02:02:02 [ 340.488729][ T7523] dvb-usb: bulk message failed: -22 (1/0) [ 340.488753][ T7523] dw2102: i2c transfer failed. [ 340.507372][ T6016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.573544][ T6016] dvb-usb: bulk message failed: -22 (3/0) [ 340.573571][ T6016] dw2102: command 0x0e transfer failed. [ 340.573581][ T6016] dvb-usb: bulk message failed: -22 (3/0) [ 340.573596][ T6016] dw2102: command 0x0e transfer failed. [ 340.882217][ T6016] dvb-usb: bulk message failed: -22 (3/0) [ 340.882242][ T6016] dw2102: command 0x0e transfer failed. [ 340.882252][ T6016] dvb-usb: bulk message failed: -22 (3/0) [ 340.882267][ T6016] dw2102: command 0x0e transfer failed. [ 340.882276][ T6016] dvb-usb: bulk message failed: -22 (1/0) [ 340.882290][ T6016] dw2102: command 0x51 transfer failed. [ 340.882300][ T6016] dvb-usb: bulk message failed: -22 (5/0) [ 340.882314][ T6016] dw2102: i2c probe for address 0x68 failed. [ 340.882327][ T6016] dvb-usb: bulk message failed: -22 (5/0) [ 340.882341][ T6016] dw2102: i2c probe for address 0x69 failed. [ 340.882353][ T6016] dvb-usb: bulk message failed: -22 (5/0) [ 340.882367][ T6016] dw2102: i2c probe for address 0x6a failed. [ 340.882377][ T6016] dw2102: probing for demodulator failed. Is the external power switched on? [ 340.882388][ T6016] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 341.101552][ T6016] rc_core: IR keymap rc-tt-1500 not found [ 341.101577][ T6016] Registered IR keymap rc-empty [ 341.128798][ T6016] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 341.155022][ T6016] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9 [ 341.197472][ T6016] dvb-usb: schedule remote query interval to 250 msecs. [ 341.197500][ T6016] dw2102: su3000_power_ctrl: 0, initialized 1 [ 341.197514][ T6016] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 341.231910][ T6016] usb 2-1: USB disconnect, device number 21 [ 341.714771][ T6016] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 342.708466][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.291581][ T5934] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 345.444815][ T5934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.444845][ T5934] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.446480][ T5934] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 345.446508][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 345.446529][ T5934] usb 5-1: SerialNumber: syz [ 345.756500][ T5934] usb 5-1: cannot find UAC_HEADER [ 345.983121][ T5934] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 346.015829][ T5934] usb 5-1: USB disconnect, device number 16 [ 346.134366][ T6945] udevd[6945]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.153979][ T7610] lo: entered allmulticast mode [ 349.884386][ T7607] lo: left allmulticast mode [ 351.641656][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 351.795432][ T45] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 351.795462][ T45] usb 4-1: config 0 has no interface number 0 [ 351.798250][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 351.798281][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.798302][ T45] usb 4-1: Product: syz [ 351.798317][ T45] usb 4-1: Manufacturer: syz [ 351.798332][ T45] usb 4-1: SerialNumber: syz [ 351.875452][ T45] usb 4-1: config 0 descriptor?? [ 351.911637][ T45] usb 4-1: Found UVC 0.00 device syz (05ac:8501) [ 351.911676][ T45] usb 4-1: No valid video chain found. [ 352.166534][ T5921] usb 4-1: USB disconnect, device number 24 [ 356.410538][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.491'. [ 356.410556][ T7662] netlink: 32 bytes leftover after parsing attributes in process `syz.1.491'. [ 357.009700][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 357.391648][ T5860] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 357.551706][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 357.563706][ T5860] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 357.563733][ T5860] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.563749][ T5860] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.638290][ T5860] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.638313][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.638325][ T5860] usb 3-1: Product: syz [ 357.638334][ T5860] usb 3-1: Manufacturer: syz [ 357.638343][ T5860] usb 3-1: SerialNumber: syz [ 358.313008][ T7675] macvtap1: entered promiscuous mode [ 358.313036][ T7675] vlan0: entered promiscuous mode [ 358.316482][ T7675] macvtap1: entered allmulticast mode [ 362.842100][ T5860] usb 3-1: 0:2 : does not exist [ 364.687148][ T9] usb 3-1: USB disconnect, device number 15 [ 370.121815][ T7742] netlink: 'syz.4.511': attribute type 2 has an invalid length. [ 371.662272][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.520'. [ 371.662291][ T7762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.520'. [ 372.558756][ T7758] syz.2.518 uses obsolete (PF_INET,SOCK_PACKET) [ 373.701510][ T7784] netlink: 72 bytes leftover after parsing attributes in process `syz.4.525'. [ 373.841859][ T7781] netlink: 104 bytes leftover after parsing attributes in process `syz.1.524'. [ 375.422398][ T7802] lo: entered allmulticast mode [ 376.735583][ T7799] lo: left allmulticast mode [ 379.991585][ T5934] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 380.161691][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 380.165089][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 380.166756][ T5934] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 380.166783][ T5934] usb 3-1: config 4 has no interface number 0 [ 380.166820][ T5934] usb 3-1: config 4 interface 30 has no altsetting 0 [ 380.215546][ T5934] usb 3-1: string descriptor 0 read error: -22 [ 380.215659][ T5934] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 380.215673][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.287917][ T5934] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 380.287980][ T5934] dw2102: su3000_power_ctrl: 1, initialized 0 [ 380.288001][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 380.329152][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.362164][ T5934] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 380.362239][ T5934] usb 3-1: media controller created [ 380.362269][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 380.362286][ T5934] dw2102: i2c transfer failed. [ 380.362306][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 380.362320][ T5934] dw2102: i2c transfer failed. [ 380.362339][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 380.362353][ T5934] dw2102: i2c transfer failed. [ 380.362372][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 380.362387][ T5934] dw2102: i2c transfer failed. [ 380.362406][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 380.362420][ T5934] dw2102: i2c transfer failed. [ 380.362438][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 380.362453][ T5934] dw2102: i2c transfer failed. [ 380.362463][ T5934] dvb-usb: MAC address: 02:02:02:02:02:02 [ 380.468072][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'. [ 380.487695][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.524173][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 380.524195][ T5934] dw2102: command 0x0e transfer failed. [ 380.524205][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 380.524218][ T5934] dw2102: command 0x0e transfer failed. [ 380.865194][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 380.865221][ T5934] dw2102: command 0x0e transfer failed. [ 380.865231][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 380.865245][ T5934] dw2102: command 0x0e transfer failed. [ 380.865254][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 380.865268][ T5934] dw2102: command 0x51 transfer failed. [ 380.865278][ T5934] dvb-usb: bulk message failed: -22 (5/0) [ 380.865292][ T5934] dw2102: i2c probe for address 0x68 failed. [ 380.865304][ T5934] dvb-usb: bulk message failed: -22 (5/0) [ 380.865319][ T5934] dw2102: i2c probe for address 0x69 failed. [ 380.865331][ T5934] dvb-usb: bulk message failed: -22 (5/0) [ 380.865344][ T5934] dw2102: i2c probe for address 0x6a failed. [ 380.865355][ T5934] dw2102: probing for demodulator failed. Is the external power switched on? [ 380.865366][ T5934] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 381.123468][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 381.250702][ T5934] rc_core: IR keymap rc-tt-1500 not found [ 381.250725][ T5934] Registered IR keymap rc-empty [ 381.252923][ T5934] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 381.342917][ T5934] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 381.599165][ T5934] dvb-usb: schedule remote query interval to 250 msecs. [ 381.599193][ T5934] dw2102: su3000_power_ctrl: 0, initialized 1 [ 381.599208][ T5934] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 381.853331][ T6016] dvb-usb: bulk message failed: -22 (1/0) [ 381.853357][ T6016] dw2102: i2c transfer failed. [ 381.924379][ T5934] usb 3-1: USB disconnect, device number 16 [ 382.589776][ T5934] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 383.824949][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.554'. [ 383.824976][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.554'. [ 384.047445][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.047531][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.075073][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.559'. [ 385.075102][ T7911] netlink: 32 bytes leftover after parsing attributes in process `syz.2.559'. [ 386.508362][ T7926] cgroup: fork rejected by pids controller in /syz0 [ 391.642710][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.575'. [ 391.642730][ T8003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.575'. [ 393.391608][ T5860] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 393.581725][ T5220] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 393.599606][ T5921] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 393.781966][ T5860] usb 4-1: device descriptor read/64, error -71 [ 394.641987][ T5921] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 394.642019][ T5921] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 394.642178][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 394.642238][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 394.642266][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 394.642754][ T5220] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.642777][ T5220] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.662083][ T5921] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 394.662114][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 394.662133][ T5921] usb 1-1: Product: syz [ 394.662146][ T5921] usb 1-1: Manufacturer: syz [ 394.705798][ T5220] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 394.705828][ T5220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 394.705847][ T5220] usb 3-1: SerialNumber: syz [ 394.761619][ T5860] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 394.848887][ T5921] cdc_wdm 1-1:1.0: skipping garbage [ 394.848909][ T5921] cdc_wdm 1-1:1.0: skipping garbage [ 394.891776][ T5860] usb 4-1: device descriptor read/64, error -71 [ 394.912157][ T5921] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 394.912180][ T5921] cdc_wdm 1-1:1.0: Unknown control protocol [ 395.002136][ T5860] usb usb4-port1: attempt power cycle [ 395.112344][ T5921] usb 1-1: USB disconnect, device number 19 [ 395.222099][ T5220] usb 3-1: cannot find UAC_HEADER [ 395.361569][ T5860] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 395.394352][ T5860] usb 4-1: device descriptor read/8, error -71 [ 395.508700][ T5220] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 395.524484][ T5220] usb 3-1: USB disconnect, device number 17 [ 395.668806][ T6945] udevd[6945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.671671][ T5860] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 395.704177][ T5860] usb 4-1: device descriptor read/8, error -71 [ 395.823157][ T5860] usb usb4-port1: unable to enumerate USB device [ 397.732137][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.588'. [ 397.732154][ T8045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.588'. [ 398.061550][ T5220] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 398.500155][ T5220] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.500247][ T5220] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.551981][ T5220] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 398.552015][ T5220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 398.552037][ T5220] usb 1-1: SerialNumber: syz [ 399.551206][ T5220] usb 1-1: can't set config #1, error -71 [ 399.571680][ T5220] usb 1-1: USB disconnect, device number 20 [ 401.071593][ T5860] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 401.181840][ T8075] pimreg: entered allmulticast mode [ 401.271699][ T5860] usb 4-1: device descriptor read/64, error -71 [ 401.343030][ T8077] pimreg: left allmulticast mode [ 401.561654][ T5860] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 401.711706][ T5860] usb 4-1: device descriptor read/64, error -71 [ 401.901776][ T5860] usb usb4-port1: attempt power cycle [ 401.979665][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.735624][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.172739][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.191572][ T5860] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 403.214106][ T5860] usb 4-1: device descriptor read/8, error -71 [ 403.451589][ T5860] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 403.452775][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.601'. [ 403.452811][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.1.601'. [ 403.502176][ T5860] usb 4-1: device descriptor read/8, error -71 [ 403.619253][ T5860] usb usb4-port1: unable to enumerate USB device [ 403.759837][ T37] audit: type=1326 audit(1757300115.161:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 403.769495][ T37] audit: type=1326 audit(1757300115.181:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 403.769556][ T37] audit: type=1326 audit(1757300115.181:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 403.769606][ T37] audit: type=1326 audit(1757300115.181:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 404.079743][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.298089][ T37] audit: type=1326 audit(1757300119.701:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb55eebe9 code=0x7ffc0000 [ 408.304768][ T37] audit: type=1326 audit(1757300119.711:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb55eebe9 code=0x7ffc0000 [ 408.308052][ T37] audit: type=1326 audit(1757300119.721:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfb55eebe9 code=0x7ffc0000 [ 408.310167][ T37] audit: type=1326 audit(1757300119.721:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb55eebe9 code=0x7ffc0000 [ 408.310844][ T37] audit: type=1326 audit(1757300119.721:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb55eebe9 code=0x7ffc0000 [ 408.358764][ T37] audit: type=1326 audit(1757300119.721:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfb55eebe9 code=0x7ffc0000 [ 409.395431][ T8132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.615'. [ 409.395469][ T8132] netlink: 36 bytes leftover after parsing attributes in process `syz.2.615'. [ 409.900548][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 409.900568][ T37] audit: type=1326 audit(1757300121.311:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 409.900619][ T37] audit: type=1326 audit(1757300121.311:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 409.910151][ T37] audit: type=1326 audit(1757300121.321:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 409.910858][ T37] audit: type=1326 audit(1757300121.321:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 409.911102][ T37] audit: type=1326 audit(1757300121.321:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 409.921140][ T37] audit: type=1326 audit(1757300121.331:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 409.921192][ T37] audit: type=1326 audit(1757300121.331:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 409.921233][ T37] audit: type=1326 audit(1757300121.331:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 409.924230][ T37] audit: type=1326 audit(1757300121.341:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 409.924279][ T37] audit: type=1326 audit(1757300121.341:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 411.026681][ T8152] netlink: 'syz.4.621': attribute type 4 has an invalid length. [ 411.026706][ T8152] netlink: 17 bytes leftover after parsing attributes in process `syz.4.621'. [ 420.884526][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.074170][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.267250][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.770597][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.284791][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.635'. [ 429.091262][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 429.091277][ T37] audit: type=1326 audit(1757300139.731:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 429.091309][ T37] audit: type=1326 audit(1757300139.731:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 429.091335][ T37] audit: type=1326 audit(1757300139.741:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 429.091531][ T37] audit: type=1326 audit(1757300139.741:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 429.091586][ T37] audit: type=1326 audit(1757300139.741:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 429.091627][ T37] audit: type=1326 audit(1757300139.741:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 429.091667][ T37] audit: type=1326 audit(1757300139.741:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 429.091709][ T37] audit: type=1326 audit(1757300139.741:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 429.091750][ T37] audit: type=1326 audit(1757300139.751:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 429.091790][ T37] audit: type=1326 audit(1757300139.761:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.3.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 433.639186][ T8272] netlink: 'syz.0.653': attribute type 27 has an invalid length. [ 434.517226][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.517722][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.915165][ T8289] netlink: 220 bytes leftover after parsing attributes in process `syz.4.655'. [ 439.012128][ T8309] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 440.433886][ T8272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.502188][ T8272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.007602][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.007686][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.725864][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.728264][ T8273] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.741811][ T8273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.823462][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 450.823533][ T37] audit: type=1326 audit(1757300161.721:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 450.824113][ T37] audit: type=1326 audit(1757300161.721:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 450.824609][ T37] audit: type=1326 audit(1757300161.721:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 450.825102][ T37] audit: type=1326 audit(1757300161.721:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 450.825597][ T37] audit: type=1326 audit(1757300161.731:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 450.826178][ T37] audit: type=1326 audit(1757300161.731:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 450.826757][ T37] audit: type=1326 audit(1757300161.751:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 450.839019][ T37] audit: type=1326 audit(1757300161.751:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 450.839620][ T37] audit: type=1326 audit(1757300161.751:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 450.840303][ T37] audit: type=1326 audit(1757300161.761:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 451.314588][ T1230] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.368254][ T1230] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.530697][ T1230] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.531031][ T1230] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.591486][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.609716][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.620208][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.653297][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.657907][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.661542][ T8274] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 454.731897][ T5849] Bluetooth: hci5: command tx timeout [ 456.083452][ T8274] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.083483][ T8274] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.114619][ T8274] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 456.114653][ T8274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 456.114675][ T8274] usb 3-1: SerialNumber: syz [ 456.474245][ T8274] usb 3-1: cannot find UAC_HEADER [ 456.577565][ T8274] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 456.622694][ T8274] usb 3-1: USB disconnect, device number 18 [ 456.811679][ T5849] Bluetooth: hci5: command tx timeout [ 456.917473][ T8235] udevd[8235]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.089127][ T8412] chnl_net:caif_netlink_parms(): no params data found [ 458.547123][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 458.893349][ T5849] Bluetooth: hci5: command tx timeout [ 458.970214][ T8412] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.970369][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.970618][ T8412] bridge_slave_0: entered allmulticast mode [ 459.009121][ T8412] bridge_slave_0: entered promiscuous mode [ 459.043922][ T8412] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.071707][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.071983][ T8412] bridge_slave_1: entered allmulticast mode [ 459.085051][ T8412] bridge_slave_1: entered promiscuous mode [ 459.511657][ T8283] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 459.647698][ T8412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.674283][ T8283] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.674313][ T8283] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.675933][ T8283] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 459.675960][ T8283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 459.675983][ T8283] usb 4-1: SerialNumber: syz [ 459.785248][ T8412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.959286][ T8283] usb 4-1: cannot find UAC_HEADER [ 460.227752][ T8283] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 460.286674][ T8283] usb 4-1: USB disconnect, device number 33 [ 460.377831][ T8235] udevd[8235]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.487674][ T8412] team0: Port device team_slave_0 added [ 460.495254][ T8412] team0: Port device team_slave_1 added [ 460.981855][ T5849] Bluetooth: hci5: command tx timeout [ 461.241092][ T8493] netlink: 'syz.1.710': attribute type 13 has an invalid length. [ 461.508297][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.508310][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.508326][ T8412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.241129][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.244969][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.550378][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.605301][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.935966][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.717'. [ 465.381734][ T8320] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 465.541981][ T8320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.542020][ T8320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.543669][ T8320] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 465.543698][ T8320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 465.543719][ T8320] usb 4-1: SerialNumber: syz [ 465.826605][ T8320] usb 4-1: cannot find UAC_HEADER [ 465.887518][ T8320] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 465.903771][ T8320] usb 4-1: USB disconnect, device number 34 [ 465.965986][ T8235] udevd[8235]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.032845][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.032864][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.032895][ T8412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.094695][ T2158] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.184925][ T2158] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.197050][ T2158] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.197117][ T2158] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.073148][ T8412] hsr_slave_0: entered promiscuous mode [ 467.074990][ T8412] hsr_slave_1: entered promiscuous mode [ 467.114977][ T8412] debugfs: 'hsr0' already exists in 'hsr' [ 467.115012][ T8412] Cannot create hsr debugfs directory [ 469.439047][ T8412] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 469.997605][ T8557] netlink: 64 bytes leftover after parsing attributes in process `syz.2.727'. [ 470.752341][ T8412] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 470.980820][ T8412] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 471.277066][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 471.363959][ T8412] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 471.646529][ T8561] ip6tnl1: entered allmulticast mode [ 471.661879][ T8561] bridge1: entered allmulticast mode [ 471.692367][ T8561] bridge2: entered allmulticast mode [ 471.692733][ T8561] bridge3: entered allmulticast mode [ 471.726636][ T8561] vlan0: left promiscuous mode [ 471.741605][ T8561] macvtap1: left promiscuous mode [ 471.744142][ T8561] bridge4: entered allmulticast mode [ 472.287940][ T8567] 9pnet_fd: p9_fd_create_unix (8567): problem connecting socket: ./file0: -2 [ 473.581518][ T8320] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 473.734369][ T8320] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.734400][ T8320] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.736269][ T8320] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 473.736298][ T8320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 473.736320][ T8320] usb 5-1: SerialNumber: syz [ 474.497318][ T8320] usb 5-1: cannot find UAC_HEADER [ 474.814657][ T8320] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 474.852338][ T8320] usb 5-1: USB disconnect, device number 17 [ 475.118512][ T8235] udevd[8235]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.447617][ T8412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.260247][ T8412] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.444766][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.444923][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.593862][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.594045][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.794564][ T2158] bridge_slave_1: left allmulticast mode [ 482.794766][ T2158] bridge_slave_1: left promiscuous mode [ 482.802251][ T2158] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.913508][ T2158] bridge_slave_0: left allmulticast mode [ 482.913548][ T2158] bridge_slave_0: left promiscuous mode [ 482.913909][ T2158] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.521526][ T5914] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 483.710059][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.710090][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.713033][ T5914] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 483.713065][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 483.713087][ T5914] usb 4-1: SerialNumber: syz [ 484.094232][ T5914] usb 4-1: cannot find UAC_HEADER [ 485.419299][ T5914] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 485.439471][ T5914] usb 4-1: USB disconnect, device number 35 [ 486.357403][ T8430] udevd[8430]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.138191][ T2158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.182379][ T2158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.206813][ T2158] bond0 (unregistering): Released all slaves [ 492.984818][ T8274] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 493.160197][ T8274] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.160225][ T8274] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.185373][ T8274] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 493.185393][ T8274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 493.185405][ T8274] usb 3-1: SerialNumber: syz [ 493.667563][ T8274] usb 3-1: cannot find UAC_HEADER [ 493.789798][ T8274] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 493.823290][ T8274] usb 3-1: USB disconnect, device number 19 [ 494.044379][ T8235] udevd[8235]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.556919][ T8412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.161498][ T2158] hsr_slave_0: left promiscuous mode [ 497.244694][ T2158] hsr_slave_1: left promiscuous mode [ 497.245959][ T2158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.315419][ T2158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.851729][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 499.851751][ T37] audit: type=1326 audit(1757300211.251:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 499.851859][ T37] audit: type=1326 audit(1757300211.251:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 499.851897][ T37] audit: type=1326 audit(1757300211.251:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 499.851924][ T37] audit: type=1326 audit(1757300211.251:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 499.851953][ T37] audit: type=1326 audit(1757300211.261:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 499.851995][ T37] audit: type=1326 audit(1757300211.261:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 499.852042][ T37] audit: type=1326 audit(1757300211.261:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 499.852109][ T37] audit: type=1326 audit(1757300211.261:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 499.854963][ T37] audit: type=1326 audit(1757300211.261:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 499.855021][ T37] audit: type=1326 audit(1757300211.261:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04191debe9 code=0x7ffc0000 [ 500.751538][ T8274] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 500.903428][ T8274] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.903447][ T8274] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.904515][ T8274] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.904532][ T8274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 500.904544][ T8274] usb 2-1: SerialNumber: syz [ 501.190008][ T8274] usb 2-1: cannot find UAC_HEADER [ 501.397545][ T8274] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 501.408598][ T8274] usb 2-1: USB disconnect, device number 22 [ 501.473265][ T8235] udevd[8235]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.989615][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.405544][ T8747] ======================================================= [ 505.405544][ T8747] WARNING: The mand mount option has been deprecated and [ 505.405544][ T8747] and is ignored by this kernel. Remove the mand [ 505.405544][ T8747] option from the mount to silence this warning. [ 505.405544][ T8747] ======================================================= [ 505.406096][ T8747] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 505.406145][ T8747] CIFS mount error: No usable UNC path provided in device string! [ 505.406145][ T8747] [ 505.406433][ T8747] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 506.912422][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.912515][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.352918][ T2158] team0 (unregistering): Port device team_slave_1 removed [ 508.795329][ T2158] team0 (unregistering): Port device team_slave_0 removed [ 508.819446][ T5849] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 509.396321][ T8767] loop8: detected capacity change from 0 to 7 [ 509.420637][ T8767] Dev loop8: unable to read RDB block 7 [ 509.420705][ T8767] loop8: unable to read partition table [ 509.420976][ T8767] loop8: partition table beyond EOD, truncated [ 509.420996][ T8767] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 510.211407][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 510.211462][ T37] audit: type=1326 audit(1757300221.451:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 510.212010][ T37] audit: type=1326 audit(1757300221.461:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 510.212344][ T37] audit: type=1326 audit(1757300221.461:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 510.215350][ T37] audit: type=1326 audit(1757300221.471:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 510.215941][ T37] audit: type=1326 audit(1757300221.471:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 510.216242][ T37] audit: type=1326 audit(1757300221.471:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 510.216623][ T37] audit: type=1326 audit(1757300221.491:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 510.217059][ T37] audit: type=1326 audit(1757300221.491:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 510.218644][ T37] audit: type=1326 audit(1757300221.501:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 510.218980][ T37] audit: type=1326 audit(1757300221.501:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 511.066462][ T8775] netlink: 312 bytes leftover after parsing attributes in process `syz.2.783'. [ 511.812110][ T8781] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 513.380670][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 513.399296][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.402535][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 513.404582][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 513.405960][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.991088][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 514.033282][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 514.037383][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 514.040169][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 514.065512][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 515.469106][ T5849] Bluetooth: hci0: command tx timeout [ 516.093325][ T5849] Bluetooth: hci6: command tx timeout [ 516.165930][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 516.170557][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 516.190635][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 516.210739][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 516.220489][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 516.988842][ T8816] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 517.601665][ T59] Bluetooth: hci0: command tx timeout [ 518.256161][ T59] Bluetooth: hci6: command tx timeout [ 518.334078][ T59] Bluetooth: hci7: command tx timeout [ 519.611491][ T59] Bluetooth: hci0: command tx timeout [ 520.337368][ T59] Bluetooth: hci6: command tx timeout [ 520.421479][ T59] Bluetooth: hci7: command tx timeout [ 520.526294][ T8718] bridge0: entered promiscuous mode [ 520.528017][ T8718] bridge0: port 3(macsec1) entered blocking state [ 520.528112][ T8718] bridge0: port 3(macsec1) entered disabled state [ 520.528237][ T8718] macsec1: entered allmulticast mode [ 520.528248][ T8718] bridge0: entered allmulticast mode [ 520.674254][ T8718] macsec1: left allmulticast mode [ 520.674280][ T8718] bridge0: left allmulticast mode [ 520.752244][ T8718] bridge0: left promiscuous mode [ 523.299672][ T59] Bluetooth: hci0: command tx timeout [ 523.299714][ T59] Bluetooth: hci6: command tx timeout [ 523.299738][ T59] Bluetooth: hci7: command tx timeout [ 525.171671][ T37] kauditd_printk_skb: 70 callbacks suppressed [ 525.171696][ T37] audit: type=1326 audit(1757300236.351:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8841 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 525.171751][ T37] audit: type=1326 audit(1757300236.351:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8841 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 526.183134][ T5849] Bluetooth: hci7: command tx timeout [ 526.183737][ T37] audit: type=1326 audit(1757300236.711:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8841 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 526.183814][ T37] audit: type=1326 audit(1757300236.711:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8841 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 526.183871][ T37] audit: type=1326 audit(1757300236.711:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8841 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 526.183926][ T37] audit: type=1326 audit(1757300236.811:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8841 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 526.184015][ T37] audit: type=1326 audit(1757300236.811:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8841 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 526.184070][ T37] audit: type=1326 audit(1757300236.811:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8841 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 526.184126][ T37] audit: type=1326 audit(1757300236.911:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8841 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 526.184189][ T37] audit: type=1326 audit(1757300236.911:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8841 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2cb4ebe9 code=0x7ffc0000 [ 531.591502][ T8319] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 531.721400][ T8319] usb 3-1: device descriptor read/64, error -71 [ 531.961492][ T8319] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 532.101426][ T8319] usb 3-1: device descriptor read/64, error -71 [ 532.212112][ T8319] usb usb3-port1: attempt power cycle [ 532.459823][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 532.571465][ T8319] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 532.594625][ T8890] macsec1: entered allmulticast mode [ 532.594650][ T8890] syz_tun: entered allmulticast mode [ 532.645160][ T8319] usb 3-1: device descriptor read/8, error -71 [ 534.675341][ T8904] random: crng reseeded on system resumption [ 534.901143][ T2158] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.022460][ T8784] chnl_net:caif_netlink_parms(): no params data found [ 536.817167][ T2158] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.577295][ T8810] chnl_net:caif_netlink_parms(): no params data found [ 539.590157][ T8791] chnl_net:caif_netlink_parms(): no params data found [ 539.812413][ T2158] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.041304][ T5220] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 540.171853][ T5220] usb 2-1: device descriptor read/64, error -71 [ 540.208767][ T2158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.411638][ T5220] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 540.542870][ T5220] usb 2-1: device descriptor read/64, error -71 [ 540.653857][ T5220] usb usb2-port1: attempt power cycle [ 540.951627][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.951796][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.952073][ T8784] bridge_slave_0: entered allmulticast mode [ 540.955295][ T8784] bridge_slave_0: entered promiscuous mode [ 540.991456][ T5220] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 541.012295][ T5220] usb 2-1: device descriptor read/8, error -71 [ 541.031611][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.031775][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.032041][ T8784] bridge_slave_1: entered allmulticast mode [ 541.035400][ T8784] bridge_slave_1: entered promiscuous mode [ 541.251599][ T5220] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 541.272507][ T5220] usb 2-1: device descriptor read/8, error -71 [ 541.402670][ T5220] usb usb2-port1: unable to enumerate USB device [ 541.741394][ T5220] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 541.886953][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.887218][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.887460][ T8810] bridge_slave_0: entered allmulticast mode [ 541.891416][ T5220] usb 3-1: Using ep0 maxpacket: 16 [ 541.894241][ T5220] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.894271][ T5220] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.900485][ T5220] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.900511][ T5220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.900530][ T5220] usb 3-1: Product: syz [ 541.900543][ T5220] usb 3-1: Manufacturer: syz [ 541.900557][ T5220] usb 3-1: SerialNumber: syz [ 541.971585][ T8810] bridge_slave_0: entered promiscuous mode [ 542.157133][ T5220] usb 3-1: 0:2 : does not exist [ 542.174607][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.174771][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.175026][ T8791] bridge_slave_0: entered allmulticast mode [ 542.186249][ T5220] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 542.187014][ T8791] bridge_slave_0: entered promiscuous mode [ 542.203922][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.212898][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.213047][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.213311][ T8810] bridge_slave_1: entered allmulticast mode [ 542.229799][ T8810] bridge_slave_1: entered promiscuous mode [ 542.265459][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.266027][ T5220] usb 3-1: USB disconnect, device number 24 [ 542.269518][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.269680][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.269912][ T8791] bridge_slave_1: entered allmulticast mode [ 542.285534][ T8791] bridge_slave_1: entered promiscuous mode [ 542.384736][ T8852] udevd[8852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.235535][ T8810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.498562][ T8784] team0: Port device team_slave_0 added [ 545.328219][ T8791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.520182][ T8810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.555490][ T8784] team0: Port device team_slave_1 added [ 545.576641][ T8791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.171550][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.171569][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.171601][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.174609][ T8810] team0: Port device team_slave_0 added [ 549.178835][ T8791] team0: Port device team_slave_0 added [ 549.593497][ T8810] team0: Port device team_slave_1 added [ 549.621877][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.621891][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.621909][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.651730][ T8791] team0: Port device team_slave_1 added [ 550.458277][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.458297][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.458327][ T8810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.466616][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.466635][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.466662][ T8791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.469391][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.469405][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.469432][ T8810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.774608][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.774626][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.774658][ T8791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.230052][ T8784] hsr_slave_0: entered promiscuous mode [ 551.243390][ T8784] hsr_slave_1: entered promiscuous mode [ 551.601356][ T5914] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 551.731362][ T5914] usb 2-1: device descriptor read/64, error -71 [ 551.926265][ T8810] hsr_slave_0: entered promiscuous mode [ 551.927353][ T8810] hsr_slave_1: entered promiscuous mode [ 551.928797][ T8810] debugfs: 'hsr0' already exists in 'hsr' [ 551.928815][ T8810] Cannot create hsr debugfs directory [ 551.971556][ T5914] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 552.085494][ T8791] hsr_slave_0: entered promiscuous mode [ 552.087216][ T8791] hsr_slave_1: entered promiscuous mode [ 552.088420][ T8791] debugfs: 'hsr0' already exists in 'hsr' [ 552.088448][ T8791] Cannot create hsr debugfs directory [ 552.111390][ T5914] usb 2-1: device descriptor read/64, error -71 [ 552.222058][ T5914] usb usb2-port1: attempt power cycle [ 552.351451][ T8981] Bluetooth: hci7: command 0x0405 tx timeout [ 552.571446][ T5914] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 552.702869][ T5914] usb 2-1: device descriptor read/8, error -71 [ 552.961636][ T5914] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 553.092301][ T5914] usb 2-1: device descriptor read/8, error -71 [ 553.212133][ T5914] usb usb2-port1: unable to enumerate USB device [ 555.406334][ T2158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.076316][ T2158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.020134][ T2158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.161593][ T5220] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 565.357685][ T5220] usb 3-1: device descriptor read/64, error -71 [ 565.591333][ T5220] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 565.744256][ T5220] usb 3-1: device descriptor read/64, error -71 [ 565.858039][ T5220] usb usb3-port1: attempt power cycle [ 566.598884][ T2158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.851538][ T5220] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 568.339256][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.339463][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.868932][ T2158] bridge_slave_1: left allmulticast mode [ 569.869106][ T2158] bridge_slave_1: left promiscuous mode [ 569.885883][ T2158] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.044711][ T2158] bridge_slave_0: left allmulticast mode [ 570.044738][ T2158] bridge_slave_0: left promiscuous mode [ 570.047706][ T2158] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.582234][ T2158] bridge_slave_1: left allmulticast mode [ 571.582262][ T2158] bridge_slave_1: left promiscuous mode [ 571.582568][ T2158] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.972584][ T2158] bridge_slave_0: left allmulticast mode [ 571.972861][ T2158] bridge_slave_0: left promiscuous mode [ 571.977179][ T2158] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.891654][ T5220] usb 3-1: device descriptor read/8, error -110 [ 573.012906][ T2158] bridge_slave_1: left allmulticast mode [ 573.012944][ T2158] bridge_slave_1: left promiscuous mode [ 573.013269][ T2158] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.162674][ T8981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 573.187178][ T8981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 573.188595][ T8981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 573.190526][ T8981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 573.201723][ T8981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.127255][ T5220] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 574.143144][ T2158] bridge_slave_0: left allmulticast mode [ 574.143184][ T2158] bridge_slave_0: left promiscuous mode [ 574.143508][ T2158] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.151934][ T5220] usb 3-1: device descriptor read/8, error -32 [ 574.264840][ T5220] usb usb3-port1: unable to enumerate USB device [ 574.723793][ T8320] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 574.882357][ T8320] usb 2-1: Using ep0 maxpacket: 8 [ 574.885994][ T8320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 574.887720][ T8320] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 574.887749][ T8320] usb 2-1: config 4 has no interface number 0 [ 574.887783][ T8320] usb 2-1: config 4 interface 30 has no altsetting 0 [ 574.892759][ T8320] usb 2-1: string descriptor 0 read error: -22 [ 574.892919][ T8320] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 574.892942][ T8320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.999862][ T8320] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 574.999926][ T8320] dw2102: su3000_power_ctrl: 1, initialized 0 [ 574.999949][ T8320] dvb-usb: bulk message failed: -22 (2/0) [ 575.090197][ T8320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 575.115938][ T8320] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 575.116006][ T8320] usb 2-1: media controller created [ 575.116044][ T8320] dvb-usb: bulk message failed: -22 (6/0) [ 575.116059][ T8320] dw2102: i2c transfer failed. [ 575.116079][ T8320] dvb-usb: bulk message failed: -22 (6/0) [ 575.116094][ T8320] dw2102: i2c transfer failed. [ 575.116113][ T8320] dvb-usb: bulk message failed: -22 (6/0) [ 575.116128][ T8320] dw2102: i2c transfer failed. [ 575.116147][ T8320] dvb-usb: bulk message failed: -22 (6/0) [ 575.116161][ T8320] dw2102: i2c transfer failed. [ 575.116180][ T8320] dvb-usb: bulk message failed: -22 (6/0) [ 575.116194][ T8320] dw2102: i2c transfer failed. [ 575.116214][ T8320] dvb-usb: bulk message failed: -22 (6/0) [ 575.116228][ T8320] dw2102: i2c transfer failed. [ 575.116239][ T8320] dvb-usb: MAC address: 02:02:02:02:02:02 [ 575.226483][ T9087] dvb-usb: bulk message failed: -22 (1/0) [ 575.226507][ T9087] dw2102: i2c transfer failed. [ 575.226539][ T9087] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 575.226560][ T9087] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 575.226582][ T9087] CPU: 1 UID: 0 PID: 9087 Comm: syz.1.849 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 575.226608][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.226622][ T9087] RIP: 0010:su3000_i2c_transfer+0x2e3/0x1040 [ 575.226652][ T9087] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ea 7b b9 fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 e6 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 575.226671][ T9087] RSP: 0018:ffffc900040c7aa8 EFLAGS: 00010202 [ 575.226694][ T9087] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0a6fe25aef253800 [ 575.226710][ T9087] RDX: ffffc9000d869000 RSI: 000000000000063f RDI: 0000000000000640 [ 575.226725][ T9087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.226738][ T9087] R10: dffffc0000000000 R11: ffffed1017124863 R12: 0000000000000001 [ 575.226755][ T9087] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff888031720de8 [ 575.226769][ T9087] FS: 00007fa80793e6c0(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 575.226789][ T9087] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.226805][ T9087] CR2: 0000001b31d23ffc CR3: 000000005ab92000 CR4: 00000000003526f0 [ 575.226827][ T9087] Call Trace: [ 575.226835][ T9087] [ 575.226852][ T9087] __i2c_transfer+0x871/0x2170 [ 575.226888][ T9087] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.226925][ T9087] ? __pfx___i2c_transfer+0x10/0x10 [ 575.226959][ T9087] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 575.226982][ T9087] ? i2c_transfer+0x120/0x3a0 [ 575.227025][ T9087] i2c_transfer+0x25b/0x3a0 [ 575.227058][ T9087] ? __pfx_i2c_transfer+0x10/0x10 [ 575.227091][ T9087] ? _copy_from_user+0x94/0xb0 [ 575.227120][ T9087] i2cdev_ioctl_rdwr+0x460/0x740 [ 575.227159][ T9087] i2cdev_ioctl+0x64e/0x800 [ 575.227191][ T9087] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 575.227222][ T9087] ? __fget_files+0x3a6/0x420 [ 575.227252][ T9087] ? __fget_files+0x2a/0x420 [ 575.227284][ T9087] ? bpf_lsm_file_ioctl+0x9/0x20 [ 575.227309][ T9087] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 575.227340][ T9087] __se_sys_ioctl+0xfc/0x170 [ 575.227365][ T9087] do_syscall_64+0xfa/0x3b0 [ 575.227384][ T9087] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.227415][ T9087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.227437][ T9087] ? clear_bhb_loop+0x60/0xb0 [ 575.227462][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.227483][ T9087] RIP: 0033:0x7fa8096debe9 [ 575.227501][ T9087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.227521][ T9087] RSP: 002b:00007fa80793e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.227543][ T9087] RAX: ffffffffffffffda RBX: 00007fa809915fa0 RCX: 00007fa8096debe9 [ 575.227559][ T9087] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 575.227574][ T9087] RBP: 00007fa809761e19 R08: 0000000000000000 R09: 0000000000000000 [ 575.227588][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.227601][ T9087] R13: 00007fa809916038 R14: 00007fa809915fa0 R15: 00007ffe2138c348 [ 575.227626][ T9087] [ 575.227633][ T9087] Modules linked in: [ 575.227648][ T9087] ---[ end trace 0000000000000000 ]--- [ 575.227658][ T9087] RIP: 0010:su3000_i2c_transfer+0x2e3/0x1040 [ 575.227681][ T9087] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ea 7b b9 fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 e6 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 575.227699][ T9087] RSP: 0018:ffffc900040c7aa8 EFLAGS: 00010202 [ 575.227717][ T9087] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0a6fe25aef253800 [ 575.227732][ T9087] RDX: ffffc9000d869000 RSI: 000000000000063f RDI: 0000000000000640 [ 575.227747][ T9087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.227760][ T9087] R10: dffffc0000000000 R11: ffffed1017124863 R12: 0000000000000001 [ 575.227775][ T9087] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff888031720de8 [ 575.227792][ T9087] FS: 00007fa80793e6c0(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 575.227812][ T9087] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.227828][ T9087] CR2: 0000001b31d23ffc CR3: 000000005ab92000 CR4: 00000000003526f0 [ 575.227850][ T9087] Kernel panic - not syncing: Fatal exception [ 575.228203][ T9087] Kernel Offset: disabled