last executing test programs: 4m49.819240456s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m49.089010204s ago: executing program 1 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m34.037668353s ago: executing program 32 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m51.358263665s ago: executing program 4 (id=116): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x905, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x0, 0x65, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xd8f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xb, 0xa0}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0x5, 0x2}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x310, 0xc, 0x8, 0x4, 0x40, 0x3}, 0x8, &(0x7f0000000680)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x340a}}, {0x13, &(0x7f0000000740)=@string={0x13, 0x3, "57b54e51bd5b2dc6615f37a069c47ed3bd"}}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x423}}, {0x0, 0x0}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_type(r1, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') writev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0)="db1b", 0x2}], 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000b40)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x300, 0x2, 0x0, 0xfc, 0x40, 0x5}, 0x19, &(0x7f0000000ac0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "e583a38bbba2eb4a2ad6191acb9542db"}]}, 0x1, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x340a}}]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r3, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) r5 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x101000) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x7, 0x0, 0x0, &(0x7f0000000280)}], 0x1}) 3m46.984310225s ago: executing program 4 (id=125): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4048aecb, &(0x7f0000000680)={0x6, 0x0, [{0x40000000, 0x4, 0x1, 0x7, 0x81, 0x7, 0x5}, {0x0, 0x5, 0x1, 0x3ff, 0x7ffffdff, 0x8004, 0xffff}, {0x80000019, 0x2, 0x5, 0x7, 0xdf1, 0x7, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0xc}, {0x80000000, 0x100, 0x7, 0x6, 0x3, 0x2, 0x3}, {0x40000000, 0x1, 0xb, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) 3m46.698407782s ago: executing program 4 (id=126): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000001c0)=r0) 3m46.39153613s ago: executing program 4 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000001070104000000020000000002bdd8000c000244000000000000e4780800054000000002040007800c000240000000000000ffff0900010073797a310000000008000540000000030c0002400000000000000056"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000000080002400000000084000000060a010400000000000000000200000008000b40000000005c000480580001800a000100696e6e65720000004800028008000240000000810800034000000001080004400000003a080001400000000024000580090001006d6574610000000028000280080001400000000c08000240000000010900010073797a30"], 0x10c}}, 0x400c0d0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='/dev/nullb1', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) close(r5) close(0xffffffffffffffff) r6 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) 3m45.847547104s ago: executing program 4 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x57) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x3) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 3m44.923585477s ago: executing program 4 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x40000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 3m28.393144182s ago: executing program 33 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x40000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 15.953925179s ago: executing program 5 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000004c0)={r5, 0x7, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) socket(0x1f, 0x5, 0x8) syz_usb_control_io(r8, &(0x7f0000000b40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20110c0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4001, 0x8) write(r9, &(0x7f0000000100), 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 15.864384142s ago: executing program 0 (id=606): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)=ANY=[@ANYBLOB="20010400000002970000"], &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) 13.51271567s ago: executing program 6 (id=613): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 13.15781169s ago: executing program 6 (id=615): r0 = io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bff, 0x1, 0x0, 0xc}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x93bdb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 12.681365782s ago: executing program 0 (id=616): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 12.417375508s ago: executing program 6 (id=617): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) unshare(0xe040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x80000006}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xa, 0xfffffffffffffedc, 0x0, 0x41000, 0x4d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1009, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x94) eventfd(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) wait4(r1, &(0x7f0000000140), 0x2, &(0x7f0000000580)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) r3 = syz_open_dev$vcsa(&(0x7f0000000480), 0x1, 0x121000) tee(r3, r3, 0x180, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 12.3285101s ago: executing program 5 (id=618): syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) getsockname$inet(r2, 0x0, &(0x7f00000003c0)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0xe2e4e67761683fba}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x10000000) accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000200)=0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r5, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x281841d, 0x0) r6 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x1a1c03) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000240)=0x327) 12.239968413s ago: executing program 3 (id=619): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4607100701010000000000000003003e00f7ffffffdb01000000000000400000000000000003020000000000000200000001003800010074002f8b68aeed07000401030000000300000004000000110000000000000000000000050000000000000009000000000000002400000000000000010000"], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0xd3, 0x10, 0x58, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x8, 0x1, 0x1}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) close(0x3) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff1, 0xffe0}, {0x2, 0xfff3}, {0xfffc, 0x10}}, [@f_rsvp={{0x9}, {0x4}}, @f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @local}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 11.351032395s ago: executing program 6 (id=620): socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) 11.303737996s ago: executing program 0 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e24, 0x103, @empty}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000640)=""/156, 0x9c}], 0x1, 0x14, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, 0x0, 0x10000, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r8, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) read(r8, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffff2bbd7000fcdbdf2503000003"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 10.194848804s ago: executing program 3 (id=624): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 9.907091401s ago: executing program 6 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) 9.109223892s ago: executing program 0 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r3], 0x0, 0x0}, 0x94) 8.874731527s ago: executing program 5 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x17f) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) fallocate(r0, 0x10, 0xb, 0x6) 7.787438195s ago: executing program 5 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@ipv6_newrule={0x88, 0x20, 0x20, 0x70bd27, 0x25dfdbff, {0xa, 0x10, 0x0, 0x40, 0x7, 0x0, 0x0, 0x1, 0x1}, [@FRA_DST={0x14, 0x1, @private2}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x5}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @local}, @FRA_DST={0x14, 0x1, @private1}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f07ebbeef, 0x4010, 0xffffffffffffffff, 0xef757000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000580)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.726894056s ago: executing program 2 (id=630): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) unshare(0xe040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x80000006}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xa, 0xfffffffffffffedc, 0x0, 0x41000, 0x4d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1009, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x94) eventfd(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) wait4(r1, &(0x7f0000000140), 0x2, &(0x7f0000000580)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) r3 = syz_open_dev$vcsa(&(0x7f0000000480), 0x1, 0x121000) tee(r3, r3, 0x180, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 7.350870646s ago: executing program 3 (id=631): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 7.264688408s ago: executing program 2 (id=632): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000008440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x0) 6.884617247s ago: executing program 3 (id=633): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) unshare(0xe040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x80000006}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xa, 0xfffffffffffffedc, 0x0, 0x41000, 0x4d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1009, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x94) eventfd(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) wait4(r1, &(0x7f0000000140), 0x2, &(0x7f0000000580)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) r4 = syz_open_dev$vcsa(&(0x7f0000000480), 0x1, 0x121000) tee(r4, r4, 0x180, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 6.823370029s ago: executing program 6 (id=634): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4607100701010000000000000003003e00f7ffffffdb01000000000000400000000000000003020000000000000200000001003800010074002f8b68aeed07000401030000000300000004000000110000000000000000000000050000000000000009000000000000002400000000000000010000"], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) close(0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0xd3, 0x10, 0x58, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x8, 0x1, 0x1}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) close(0x3) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xffe0}, {0x2, 0xfff3}, {0xfffc, 0x10}}, [@f_rsvp={{0x9}, {0x4}}, @f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @local}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 6.823076829s ago: executing program 2 (id=635): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xd4}}, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @local}, 0x14) 5.761006466s ago: executing program 2 (id=636): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="ee6b5fd600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x8, 0x4}, 0x28) ioctl(r2, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x5422) syz_emit_ethernet(0x3d8, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x3a2, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x500, 0x26000000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x6, "0000000566994ff111397b4a8840491bae50dd6fc1f9dd74244c6faa519bda83168fc5186a3ff03c13a185e1a664d5e4"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a70507000000ddde250bff5b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) socket$l2tp(0x2, 0x2, 0x73) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6000, 0x0, &(0x7f0000ffa000/0x6000)=nil) 5.627759379s ago: executing program 3 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e24, 0x103, @empty}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000640)=""/156, 0x9c}], 0x1, 0x14, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, 0x0, 0x10000, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r8, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) read(r8, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffff2bbd7000fcdbdf2503000003"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 4.355448581s ago: executing program 0 (id=638): syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) getsockname$inet(r2, 0x0, &(0x7f00000003c0)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0xe2e4e67761683fba}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x10000000) connect(0xffffffffffffffff, &(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x800, @loopback, 0xc0}}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r5, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x281841d, 0x0) r6 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x1a1c03) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000240)=0x327) 4.334583451s ago: executing program 5 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x17f) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) fallocate(r0, 0x10, 0xb, 0x6) 3.810755125s ago: executing program 2 (id=640): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24088000) r0 = io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bff, 0x1, 0x0, 0xc}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x93bdb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3.523263741s ago: executing program 5 (id=641): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 3.522807412s ago: executing program 3 (id=642): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) unshare(0xe040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x80000006}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xa, 0xfffffffffffffedc, 0x0, 0x41000, 0x4d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1009, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x94) eventfd(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) wait4(r1, &(0x7f0000000140), 0x2, &(0x7f0000000580)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) r4 = syz_open_dev$vcsa(&(0x7f0000000480), 0x1, 0x121000) tee(r4, r4, 0x180, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 2.647319044s ago: executing program 2 (id=643): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 0s ago: executing program 0 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.073010][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.089903][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.108991][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.117351][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.126679][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.134292][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.141877][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.151464][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.171254][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.180087][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.239908][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.251605][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.285623][ T4283] device veth0_vlan entered promiscuous mode [ 70.302564][ T4276] device veth0_macvtap entered promiscuous mode [ 70.309619][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.321239][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.336315][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.345528][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.354333][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.363145][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.378775][ T4274] device veth0_vlan entered promiscuous mode [ 70.388623][ T4272] device veth0_vlan entered promiscuous mode [ 70.403734][ T4276] device veth1_macvtap entered promiscuous mode [ 70.413534][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.422069][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.430725][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.445250][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.457375][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.468209][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.479341][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.491569][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.506930][ T4274] device veth1_vlan entered promiscuous mode [ 70.527039][ T4272] device veth1_vlan entered promiscuous mode [ 70.548010][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.557769][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.567897][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.576893][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.593862][ T4283] device veth1_vlan entered promiscuous mode [ 70.608050][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.624037][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.633817][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.641794][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.650286][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.659324][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.666860][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.675686][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.684615][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.693317][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.709202][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.723052][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.730346][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.743598][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.762871][ T4274] device veth0_macvtap entered promiscuous mode [ 70.774694][ T4274] device veth1_macvtap entered promiscuous mode [ 70.791597][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.803759][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.815777][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.828136][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.836879][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.846205][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.879600][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.890566][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.901846][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.911916][ T4272] device veth0_macvtap entered promiscuous mode [ 70.922471][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.930907][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.940047][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.949594][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.958626][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.980257][ T4281] device veth0_vlan entered promiscuous mode [ 70.992706][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.003711][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.015403][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.029284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.040332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.051512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.060498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.069775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.078887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.088653][ T4272] device veth1_macvtap entered promiscuous mode [ 71.103497][ T4283] device veth0_macvtap entered promiscuous mode [ 71.113019][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.121745][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.131573][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.146896][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.162868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.170817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.179433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.188287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.196450][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.202990][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.203438][ T4281] device veth1_vlan entered promiscuous mode [ 71.225744][ T4283] device veth1_macvtap entered promiscuous mode [ 71.281190][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.292807][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.303304][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.314823][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.325992][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.364575][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.373996][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.385341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.395030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.403345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.411197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.420030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.428280][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 71.436826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.448992][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.463926][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.475368][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.486137][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.499192][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.503254][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 71.506832][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 71.512482][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 71.518347][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 71.542265][ T4281] device veth0_macvtap entered promiscuous mode [ 71.552664][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.566525][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.577174][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.588950][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.599322][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.609797][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.620616][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.635953][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.645394][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.656348][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.665815][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.674889][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.683945][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.707216][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.716490][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.726476][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.735620][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.747831][ T4281] device veth1_macvtap entered promiscuous mode [ 71.759603][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.767941][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.787432][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.801354][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.811498][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.824005][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.834202][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.844669][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.856011][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.878622][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.889403][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.890613][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.903832][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.914535][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.914553][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.914562][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.914572][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.914580][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.966293][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.977267][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.006019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.015435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.024419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.032182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.040902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.052196][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.061339][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.071377][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.080598][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.104460][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.116204][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.127402][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.138572][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.151354][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.166886][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.177324][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.187925][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.199296][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.232812][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.249060][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.262647][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.270492][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.286078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.297509][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.309867][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.347294][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.357378][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.156566][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.166172][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.221266][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.233590][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.279589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.295422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.413231][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.421474][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.435376][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.458547][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.472881][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.483739][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.511333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.528109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.538458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.570791][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 73.582699][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 73.589478][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 73.597065][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 73.597654][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 73.610110][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.640359][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.765058][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.283952][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.294462][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.349706][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.954050][ T4385] capability: warning: `syz.0.7' uses 32-bit capabilities (legacy support in use) [ 74.992354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.022344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.042349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.052344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.193116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.212350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.252371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.262366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.272364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.282366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 76.065639][ T4388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.151959][ T4390] batman_adv: batadv0: Adding interface: syzkaller0 [ 76.173632][ T4390] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.484700][ T4390] batman_adv: batadv0: Interface activated: syzkaller0 [ 76.640062][ T4389] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 76.870218][ T4389] batman_adv: batadv0: Removing interface: syzkaller0 [ 78.738789][ T14] hid-generic 0008:046D:C082.0001: hidraw0: HID v0.04 Device [syz0] on syz0 [ 81.512468][ T1172] cfg80211: failed to load regulatory.db [ 81.597788][ T4416] fido_id[4416]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.555784][ T4442] ip_tables: iptables: counters copy to user failed while replacing table [ 83.575948][ T4442] tipc: Started in network mode [ 83.582525][ T4442] tipc: Node identity ac1414aa, cluster identity 4711 [ 83.593330][ T4442] tipc: New replicast peer: 172.20.20.187 [ 83.603147][ T4442] tipc: Enabled bearer , priority 10 [ 83.675051][ T4440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.270800][ T4442] syz.0.16: attempt to access beyond end of device [ 84.270800][ T4442] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 84.688204][ T14] tipc: Node number set to 2886997162 [ 85.627304][ T4467] overlayfs: missing 'lowerdir' [ 89.423281][ T4484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 89.503801][ T4484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 89.557037][ T4484] device ip6gretap0 entered promiscuous mode [ 89.612512][ T4484] device syz_tun entered promiscuous mode [ 89.655192][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 89.762621][ T4318] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.252220][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 90.259933][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 90.280159][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 90.288123][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 90.296535][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 90.304544][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 90.312997][ T4501] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 90.357521][ T4500] netlink: 64 bytes leftover after parsing attributes in process `syz.3.35'. [ 90.366601][ T4500] netlink: 64 bytes leftover after parsing attributes in process `syz.3.35'. [ 90.375503][ T4500] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 91.340674][ T4318] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 91.363545][ T4318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.374480][ T4318] usb 5-1: config 0 has no interfaces? [ 91.383693][ T4318] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 91.402492][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.420738][ T4318] usb 5-1: Product: syz [ 91.425240][ T4318] usb 5-1: Manufacturer: syz [ 91.429839][ T4318] usb 5-1: SerialNumber: syz [ 91.439045][ T4318] usb 5-1: config 0 descriptor?? [ 93.620380][ T4318] usb 5-1: USB disconnect, device number 2 [ 93.702753][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.723393][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.731381][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.739372][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.747568][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.754976][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.881993][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.902120][ T4512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.939069][ T4514] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.955233][ T4321] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.142598][ T4321] usb 4-1: Using ep0 maxpacket: 32 [ 94.159783][ T4321] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 94.256280][ T4321] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 94.320503][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 94.366922][ T4321] usb 4-1: Product: syz [ 94.390787][ T4321] usb 4-1: Manufacturer: syz [ 94.404208][ T4321] usb 4-1: SerialNumber: syz [ 94.603681][ T4321] usb 4-1: config 0 descriptor?? [ 94.844000][ T4510] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.875484][ T4321] hub 4-1:0.0: bad descriptor, ignoring hub [ 94.881581][ T4321] hub: probe of 4-1:0.0 failed with error -5 [ 95.025365][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.145315][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.266334][ T4319] usb 4-1: USB disconnect, device number 2 [ 95.327035][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.354451][ T4321] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.584366][ T4321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.625962][ T4321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.676836][ T4319] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.685366][ T4321] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.722542][ T4321] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.744296][ T4507] chnl_net:caif_netlink_parms(): no params data found [ 96.434889][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 96.490691][ T4321] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 96.510347][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.552482][ T4319] usb 4-1: Using ep0 maxpacket: 32 [ 96.581993][ T4319] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 96.607978][ T4319] usb 4-1: string descriptor 0 read error: -22 [ 96.624513][ T4319] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 96.652532][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 96.691358][ T4319] usb 4-1: config 0 descriptor?? [ 96.703992][ T4319] usb 4-1: can't set config #0, error -71 [ 96.730385][ T4319] usb 4-1: USB disconnect, device number 3 [ 98.187088][ T4321] gud: probe of 3-1:1.0 failed with error -71 [ 98.258515][ T4321] usb 3-1: USB disconnect, device number 2 [ 98.283502][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.290618][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.321621][ T4507] device bridge_slave_0 entered promiscuous mode [ 98.462580][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 98.468681][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.495089][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.594085][ T4507] device bridge_slave_1 entered promiscuous mode [ 98.700437][ T4556] UDC core: g1: couldn't find an available UDC or it's busy [ 99.049129][ T4507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.062205][ T4507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.219811][ T4507] team0: Port device team_slave_0 added [ 99.239659][ T4559] block device autoloading is deprecated and will be removed. [ 99.249630][ T4559] syz.4.49: attempt to access beyond end of device [ 99.249630][ T4559] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 99.284442][ T4507] team0: Port device team_slave_1 added [ 99.302664][ T4316] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.834897][ T4316] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 99.848915][ T4316] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 99.872734][ T4316] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 99.882782][ T4316] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 99.892608][ T4316] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 99.902571][ T4316] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 99.910741][ T4507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.914298][ T4316] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 99.928429][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 99.937527][ T4316] usb 1-1: Product: syz [ 99.941743][ T4316] usb 1-1: Manufacturer: syz [ 99.956841][ T4560] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.966544][ T4560] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.973871][ T4560] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.980698][ T4507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.981107][ T4560] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.018189][ T4560] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.025587][ T4560] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.034932][ T4316] usb 1-1: USB2VGA dongle found at address 2 [ 100.051842][ T4316] usb 1-1: Allocated 8 output buffers [ 100.075358][ T4316] usb 1-1: Failed to early initialize device [ 100.102416][ T4507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.193062][ T4507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.200054][ T4507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.302638][ T4507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.330296][ T4560] usb 1-1: Failed to initialize device [ 100.337393][ T4322] usb 1-1: USB disconnect, device number 2 [ 100.542512][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 100.627778][ T4322] libceph: connect (1)[c::]:6789 error -101 [ 100.705726][ T4322] libceph: mon0 (1)[c::]:6789 connect error [ 101.027594][ T4322] libceph: connect (1)[c::]:6789 error -101 [ 101.057681][ T4507] device hsr_slave_0 entered promiscuous mode [ 101.076170][ T4322] libceph: mon0 (1)[c::]:6789 connect error [ 101.178887][ T4507] device hsr_slave_1 entered promiscuous mode [ 101.299069][ T4507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.405383][ T4507] Cannot create hsr debugfs directory [ 101.471165][ T4573] ceph: No mds server is up or the cluster is laggy [ 101.663581][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 101.677764][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 101.717779][ T4588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.008623][ T4507] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.239706][ T4507] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.265936][ T4507] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.360744][ T33] device hsr_slave_0 left promiscuous mode [ 102.388425][ T33] device hsr_slave_1 left promiscuous mode [ 102.402636][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.430490][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.548804][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.582396][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.610703][ T33] device bridge_slave_1 left promiscuous mode [ 102.618395][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.627841][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 102.637737][ T33] device bridge_slave_0 left promiscuous mode [ 102.644891][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.721056][ T33] device veth1_macvtap left promiscuous mode [ 102.739848][ T33] device veth0_macvtap left promiscuous mode [ 102.905838][ T4608] syz.3.59: attempt to access beyond end of device [ 102.905838][ T4608] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 102.930294][ T33] device veth1_vlan left promiscuous mode [ 103.017944][ T33] device veth0_vlan left promiscuous mode [ 103.401669][ T4613] netlink: 'syz.3.59': attribute type 19 has an invalid length. [ 104.002566][ T4368] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.208846][ T4368] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 104.261138][ T4368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.960763][ T4368] usbhid 1-1:1.0: can't add hid device: -71 [ 105.012119][ T4368] usbhid: probe of 1-1:1.0 failed with error -71 [ 105.197329][ T4368] usb 1-1: USB disconnect, device number 3 [ 106.200770][ T4368] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 106.625157][ T4646] Zero length message leads to an empty skb [ 107.173185][ T4322] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 107.205813][ T33] team0 (unregistering): Port device team_slave_1 removed [ 107.266678][ T4629] ceph: No mds server is up or the cluster is laggy [ 107.292245][ T33] team0 (unregistering): Port device team_slave_0 removed [ 107.333687][ T4659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.351841][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.384724][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.542563][ T4319] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.599288][ T33] bond0 (unregistering): Released all slaves [ 107.638490][ T4507] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.762443][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 107.769216][ T4319] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.780105][ T4319] usb 3-1: config 0 has no interface number 0 [ 107.786404][ T4319] usb 3-1: config 0 interface 184 has no altsetting 0 [ 107.818574][ T4319] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 107.832195][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.840421][ T4319] usb 3-1: Product: syz [ 107.844946][ T4319] usb 3-1: Manufacturer: syz [ 107.849716][ T4319] usb 3-1: SerialNumber: syz [ 107.863677][ T4319] usb 3-1: config 0 descriptor?? [ 107.874902][ T4319] smsc75xx v1.0.0 [ 107.952174][ T4507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.969700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.983867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.996769][ T4507] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.029080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.033192][ T4321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.047121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.056769][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.063932][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.100739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.109699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.118916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.129759][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.137012][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.155761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.191997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.203948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.217667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.226758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.235767][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 108.242484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.251769][ T4321] usb 5-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.265663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.279260][ T4321] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.288545][ T4321] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 108.304421][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.326361][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.341685][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.366904][ T4321] usb 5-1: config 0 descriptor?? [ 108.372003][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.410353][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.438600][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.774001][ T4321] elecom 0003:056E:00E6.0002: unknown main item tag 0xd [ 109.813262][ T4321] elecom 0003:056E:00E6.0002: hidraw0: USB HID v80.06 Device [HID 056e:00e6] on usb-dummy_hcd.4-1/input0 [ 109.991324][ T4319] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 110.017533][ T4320] usb 5-1: USB disconnect, device number 3 [ 110.191775][ T4319] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 110.232684][ T4319] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 110.243097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.251023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.253133][ T4319] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 110.307159][ T4507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.309278][ T4319] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 110.325843][ T4319] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 110.366563][ T4319] usb 3-1: USB disconnect, device number 3 [ 110.662768][ T4321] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.868549][ T4321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.899884][ T4321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.925151][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 111.096181][ T4321] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 111.106657][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.990732][ T4725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.76'. [ 112.272332][ C0] sched: RT throttling activated [ 112.322571][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.347403][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.391483][ T4725] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 112.400927][ T4725] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 112.410526][ T4725] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 112.481854][ T4725] syz.2.76 (4725) used greatest stack depth: 18480 bytes left [ 112.489722][ T27] audit: type=1800 audit(1791065829.217:2): pid=4725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.76" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 112.552003][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.561937][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.718800][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.852304][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.872408][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.880113][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.902425][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.903174][ T4507] device veth0_vlan entered promiscuous mode [ 112.910114][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.943230][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.951838][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.959575][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.967337][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.975067][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.982855][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 112.990544][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.151774][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.168324][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.185515][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.189973][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.208301][ T4507] device veth1_vlan entered promiscuous mode [ 114.244968][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.272531][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.281371][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.282702][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.289464][ T1172] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 114.311129][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.337401][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.359063][ T4507] device veth0_macvtap entered promiscuous mode [ 114.371031][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.387827][ T4507] device veth1_macvtap entered promiscuous mode [ 114.397831][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.419311][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.430883][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.446851][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.456810][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.473900][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.497223][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.507892][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.524614][ T1172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.526078][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.540687][ T1172] usb 3-1: not running at top speed; connect to a high speed hub [ 114.545897][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.560004][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.570286][ T1172] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.577925][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.591128][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.608303][ T1172] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 114.632394][ T1172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 114.736011][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.738494][ T1172] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 114.752915][ T1172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.760929][ T1172] usb 3-1: Product: syz [ 114.772367][ T1172] usb 3-1: Manufacturer: syz [ 114.777107][ T1172] usb 3-1: SerialNumber: syz [ 114.782980][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 114.795483][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.405275][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 115.421949][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.432470][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 115.449282][ T4507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.459971][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.467619][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 115.476023][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.502469][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 115.510916][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.531183][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 115.552185][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.575796][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 115.591962][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.648812][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 115.733570][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.791878][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 115.863926][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.899399][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 115.997882][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 116.015943][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.109137][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 116.153078][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.216735][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 116.284446][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.325882][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 116.412818][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.434809][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 116.519074][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 116.553589][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.620747][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 116.699190][ T4507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.709316][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 116.789969][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 116.844255][ T4507] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.888010][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 116.958975][ T4507] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.111186][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.120099][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.129138][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.139548][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.148145][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.156987][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.164952][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.172812][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.180474][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.188443][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.196336][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.221559][ T4507] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.229253][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.238039][ T4507] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.255754][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.263899][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.313922][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.353308][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.361013][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.612408][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.672248][ T4771] loop8: detected capacity change from 0 to 16384 [ 117.692777][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.700575][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 117.709305][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 119.540859][ T4772] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 119.551139][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 119.559128][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 119.567466][ T4321] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 119.575460][ T4321] hid-sensor-hub 0003:8086:0000.0003: unbalanced collection at end of report description [ 119.586063][ T4321] hid-sensor-hub 0003:8086:0000.0003: parse failed [ 119.592961][ T4321] hid-sensor-hub: probe of 0003:8086:0000.0003 failed with error -22 [ 119.606885][ T4321] usb 4-1: USB disconnect, device number 4 [ 119.669545][ T1172] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 119.721215][ T1172] usb 3-1: 1:1 : format type 5 is not supported yet [ 119.784139][ T1172] usb 3-1: 0:2 : does not exist [ 119.841178][ T4776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.859353][ T4776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.892177][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.952964][ T1172] usb 3-1: USB disconnect, device number 4 [ 119.983515][ T4776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.043705][ T4776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.090378][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.152668][ T4321] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.362413][ T4321] usb 4-1: Using ep0 maxpacket: 32 [ 120.390074][ T4321] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 120.459568][ T1172] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.550594][ T4321] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.561290][ T4321] usb 4-1: config 0 has no interface number 0 [ 120.595474][ T4321] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 121.207072][ T1172] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.216761][ T1172] usb 3-1: config 0 has no interface number 0 [ 121.234924][ T1172] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 121.245315][ T1172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.253472][ T1172] usb 3-1: Product: syz [ 121.257638][ T1172] usb 3-1: Manufacturer: syz [ 121.262258][ T1172] usb 3-1: SerialNumber: syz [ 121.269372][ T1172] usb 3-1: config 0 descriptor?? [ 121.342559][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.392503][ T4321] usb 4-1: Product: syz [ 121.396717][ T4321] usb 4-1: Manufacturer: syz [ 121.414156][ T4321] usb 4-1: SerialNumber: syz [ 121.432524][ T4321] usb 4-1: config 0 descriptor?? [ 121.464197][ T4321] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 121.566871][ T1172] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 121.604816][ T1172] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.615908][ T4806] Bluetooth: MGMT ver 1.22 [ 121.641529][ T4806] Bluetooth: hci0: service_discovery: too big uuid_count value 8192 [ 121.654957][ T1172] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 121.712434][ T1172] usb 3-1: media controller created [ 121.719194][ T4321] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 121.736619][ T4321] quatech2: probe of 4-1:0.51 failed with error -8 [ 121.762069][ T1172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.932531][ T4316] usb 4-1: USB disconnect, device number 5 [ 122.074872][ T4321] usb 3-1: USB disconnect, device number 5 [ 122.652589][ T4321] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 122.842474][ T4321] usb 6-1: Using ep0 maxpacket: 8 [ 122.908794][ T4321] usb 6-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.122141][ T4321] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.231338][ T4321] usb 6-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 123.411897][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.660117][ T4321] usb 6-1: config 0 descriptor?? [ 123.811296][ T4830] netlink: 'syz.2.101': attribute type 3 has an invalid length. [ 123.860118][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 123.947097][ T4830] loop3: detected capacity change from 0 to 7 [ 123.982005][ T4545] Dev loop3: unable to read RDB block 7 [ 123.991553][ T4545] loop3: AHDI p1 p2 [ 124.019698][ T4545] loop3: partition table partially beyond EOD, truncated [ 124.128267][ T4321] usbhid 6-1:0.0: can't add hid device: -71 [ 124.135272][ T4321] usbhid: probe of 6-1:0.0 failed with error -71 [ 124.165589][ T4321] usb 6-1: USB disconnect, device number 2 [ 125.272451][ T4316] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.332599][ T4545] loop3: p1 start 1702000233 is beyond EOD, truncated [ 125.380868][ T4830] Dev loop3: unable to read RDB block 7 [ 125.400606][ T4830] loop3: AHDI p1 p2 [ 125.492458][ T4316] usb 3-1: Using ep0 maxpacket: 8 [ 125.699850][ T4830] loop3: partition table partially beyond EOD, truncated [ 126.662392][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.665752][ T4279] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 126.740754][ T4830] loop3: p1 start 1702000233 is beyond EOD, truncated [ 127.024637][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.065512][ T4316] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 127.649285][ T4316] usb 3-1: can't read configurations, error -71 [ 128.152447][ T4316] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.432545][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 128.595431][ T4316] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.666898][ T4316] usb 3-1: config 0 has no interface number 0 [ 128.731405][ T4316] usb 3-1: config 0 interface 184 has no altsetting 0 [ 128.750273][ T4316] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 128.770028][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.855550][ T4316] usb 3-1: Product: syz [ 128.860511][ T4316] usb 3-1: Manufacturer: syz [ 128.865444][ T4316] usb 3-1: SerialNumber: syz [ 128.927702][ T4872] IPVS: set_ctl: invalid protocol: 33 10.1.1.0:20002 [ 128.987782][ T4872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'. [ 129.234035][ T4316] usb 3-1: config 0 descriptor?? [ 129.243760][ T4316] smsc75xx v1.0.0 [ 131.683421][ T4316] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 131.779975][ T4316] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 131.843302][ T4316] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 131.880003][ T4316] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 131.956609][ T4316] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 132.028640][ T4316] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 132.061706][ T4316] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 132.111837][ T4316] usb 3-1: USB disconnect, device number 7 [ 132.389783][ T4924] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 132.396534][ T4924] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 132.408126][ T4320] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.455017][ T4924] vhci_hcd vhci_hcd.0: Device attached [ 132.492630][ T4368] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.594844][ T4320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.625356][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.632514][ T4316] vhci_hcd: vhci_device speed not set [ 132.638238][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.658482][ T4320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.688843][ T4320] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 132.698204][ T4368] usb 5-1: Using ep0 maxpacket: 16 [ 132.708437][ T4368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 132.718399][ T4316] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 132.726073][ T1172] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 132.749096][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 132.757967][ T4320] usb 4-1: Product: syz [ 132.768005][ T4320] usb 4-1: Manufacturer: syz [ 132.774875][ T4368] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.789976][ T4368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.802981][ T4320] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 132.822408][ T4368] usb 5-1: Product: syz [ 132.826909][ T4368] usb 5-1: Manufacturer: syz [ 132.831666][ T4368] usb 5-1: SerialNumber: syz [ 132.888453][ T4368] usb 5-1: config 0 descriptor?? [ 132.933353][ T4368] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 132.944739][ T1172] usb 3-1: config 0 has no interfaces? [ 132.950285][ T1172] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 132.970634][ T4368] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 132.979851][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.018358][ T1172] usb 3-1: config 0 descriptor?? [ 133.290336][ T4925] vhci_hcd: unknown pdu 2 [ 133.301293][ T46] vhci_hcd: stop threads [ 133.310378][ T2182] usb 3-1: USB disconnect, device number 8 [ 133.339911][ T46] vhci_hcd: release socket [ 133.357086][ T46] vhci_hcd: disconnect device [ 133.392616][ T4316] vhci_hcd: vhci_device speed not set [ 133.555248][ T4368] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 133.899029][ T4790] Set syz1 is full, maxelem 65536 reached [ 133.972106][ T4922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.999285][ T4922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.030116][ T4320] mos7840: probe of ttyUSB0 failed with error -71 [ 134.092812][ T4320] usb 4-1: USB disconnect, device number 6 [ 134.538234][ T4320] mos7840 4-1:1.0: device disconnected [ 135.023370][ T4368] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 135.088674][ T4368] em28xx 5-1:0.0: board has no eeprom [ 135.214442][ T4368] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 135.230541][ T4368] em28xx 5-1:0.0: dvb set to bulk mode. [ 135.248950][ T7] em28xx 5-1:0.0: Binding DVB extension [ 135.273455][ T4505] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.287504][ T4368] usb 5-1: USB disconnect, device number 4 [ 135.318222][ T4368] em28xx 5-1:0.0: Disconnecting em28xx [ 135.437067][ T7] em28xx 5-1:0.0: Registering input extension [ 135.450018][ T4368] em28xx 5-1:0.0: Closing input extension [ 135.502713][ T4505] usb 3-1: Using ep0 maxpacket: 8 [ 135.549346][ T4505] usb 3-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.574725][ T4969] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 135.962613][ T4317] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 136.262867][ T4317] usb 6-1: Using ep0 maxpacket: 32 [ 136.278075][ T4317] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 136.369311][ T4317] usb 6-1: config 0 has no interface number 0 [ 136.405132][ T4317] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 136.469068][ T4317] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 136.527180][ T4317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.583283][ T4317] usb 6-1: Product: syz [ 136.606434][ T4317] usb 6-1: Manufacturer: syz [ 136.630082][ T4317] usb 6-1: SerialNumber: syz [ 136.714423][ T4317] usb 6-1: config 0 descriptor?? [ 136.729472][ T4958] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 136.845349][ T4505] usb 3-1: config 0 interface 0 has no altsetting 0 [ 136.857898][ T4505] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 136.868609][ T4368] em28xx 5-1:0.0: Freeing device [ 136.874614][ T4505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.895784][ T4505] usb 3-1: config 0 descriptor?? [ 136.960935][ T4958] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 137.152437][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 137.277750][ T4994] nvmet: adding nsid 1 to subsystem testsubsys [ 137.310769][ T4505] usbhid 3-1:0.0: can't add hid device: -71 [ 137.314593][ T4992] null_blk: disk nullb1 created [ 137.323833][ T4505] usbhid: probe of 3-1:0.0 failed with error -71 [ 137.346774][ T7] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.360487][ T4505] usb 3-1: USB disconnect, device number 9 [ 137.380481][ T7] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.398335][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 137.422270][ T7] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 137.441423][ T7] usb 1-1: Product: syz [ 137.450207][ T7] usb 1-1: Manufacturer: syz [ 137.470321][ T7] hub 1-1:4.0: USB hub found [ 138.432827][ T7] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 138.650082][ T4317] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 138.662530][ T4317] asix: probe of 6-1:0.188 failed with error -71 [ 138.687065][ T4317] usb 6-1: USB disconnect, device number 3 [ 139.962653][ T7] usb 1-1: USB disconnect, device number 4 [ 140.270256][ T5034] syz.5.135: attempt to access beyond end of device [ 140.270256][ T5034] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 141.560726][ T5044] loop0: detected capacity change from 0 to 64 [ 141.789008][ T5053] syz.5.138: attempt to access beyond end of device [ 141.789008][ T5053] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 144.002567][ T126] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 144.202545][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 144.213341][ T126] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.323226][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.466352][ T126] usb 3-1: config 0 has no interface number 0 [ 144.543461][ T126] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 144.632744][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.699132][ T126] usb 3-1: Product: syz [ 144.736229][ T126] usb 3-1: Manufacturer: syz [ 144.771909][ T126] usb 3-1: SerialNumber: syz [ 144.886438][ T126] usb 3-1: config 0 descriptor?? [ 145.080552][ T126] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 145.223793][ T126] usb 3-1: qt2_attach - failed to power on unit: -71 [ 145.230835][ T126] quatech2: probe of 3-1:0.51 failed with error -71 [ 145.287504][ T126] usb 3-1: USB disconnect, device number 10 [ 147.611500][ T5102] kAFS: No cell specified [ 153.151043][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.159412][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.386482][ T5155] syz.5.155: attempt to access beyond end of device [ 153.386482][ T5155] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 155.500462][ T5137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.543323][ T5137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.582427][ T4318] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 155.772444][ T4318] usb 6-1: Using ep0 maxpacket: 32 [ 155.779879][ T4318] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 155.789654][ T4318] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.800445][ T4318] usb 6-1: config 0 has no interface number 0 [ 155.807022][ T4318] usb 6-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 155.833748][ T4318] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 155.851815][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.860362][ T4318] usb 6-1: Product: syz [ 155.865281][ T4318] usb 6-1: Manufacturer: syz [ 155.869900][ T4318] usb 6-1: SerialNumber: syz [ 155.876587][ T4318] usb 6-1: config 0 descriptor?? [ 155.898894][ T4318] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input6 [ 155.909158][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.922765][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.932886][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.940862][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.951520][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.958917][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.395000][ T7] usb 6-1: USB disconnect, device number 4 [ 156.560505][ T5137] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.569811][ T5137] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.579115][ T5137] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.588058][ T5137] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.588813][ T5052] Set syz1 is full, maxelem 65536 reached [ 157.982796][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 158.118482][ T5207] syz.5.174: attempt to access beyond end of device [ 158.118482][ T5207] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 158.179928][ T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.273210][ T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.147544][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 160.691507][ T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.909007][ T5174] chnl_net:caif_netlink_parms(): no params data found [ 161.330344][ T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.661090][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.680402][ T5174] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.702096][ T5174] device bridge_slave_0 entered promiscuous mode [ 161.730364][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.742503][ T5174] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.754872][ T5174] device bridge_slave_1 entered promiscuous mode [ 161.778579][ T5174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.791035][ T5174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.880480][ T5174] team0: Port device team_slave_0 added [ 162.042307][ T5174] team0: Port device team_slave_1 added [ 162.222455][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 163.667803][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.690861][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.218626][ T5174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.302475][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 164.788502][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.834406][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.919356][ T5277] syz.5.193: attempt to access beyond end of device [ 164.919356][ T5277] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 165.357248][ T5174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.110576][ T5174] device hsr_slave_0 entered promiscuous mode [ 166.186825][ T5174] device hsr_slave_1 entered promiscuous mode [ 166.219557][ T5174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.241165][ T5174] Cannot create hsr debugfs directory [ 168.332616][ T4954] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 168.387453][ T5312] syz.0.201: attempt to access beyond end of device [ 168.387453][ T5312] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 168.552445][ T4954] usb 4-1: Using ep0 maxpacket: 32 [ 168.567175][ T4954] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 169.243716][ T5174] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 169.250916][ T4954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.282387][ T4954] usb 4-1: config 0 has no interface number 0 [ 169.294193][ T5174] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 169.304167][ T4954] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 169.340868][ T4954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.398241][ T4954] usb 4-1: Product: syz [ 169.409440][ T4954] usb 4-1: Manufacturer: syz [ 169.438311][ T4954] usb 4-1: SerialNumber: syz [ 169.761069][ T4954] usb 4-1: config 0 descriptor?? [ 169.779217][ T4954] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 169.911675][ T5174] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 169.945415][ T5174] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 169.978199][ T4954] usb 4-1: qt2_attach - failed to power on unit: -71 [ 170.696656][ T4954] quatech2: probe of 4-1:0.51 failed with error -71 [ 170.705573][ T4954] usb 4-1: USB disconnect, device number 7 [ 173.924135][ T5356] FAULT_INJECTION: forcing a failure. [ 173.924135][ T5356] name fail_futex, interval 1, probability 0, space 0, times 1 [ 174.012572][ T5356] CPU: 0 PID: 5356 Comm: syz.0.212 Not tainted syzkaller #0 [ 174.019924][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.030005][ T5356] Call Trace: [ 174.033297][ T5356] [ 174.036233][ T5356] dump_stack_lvl+0x188/0x24e [ 174.040948][ T5356] ? show_regs_print_info+0x12/0x12 [ 174.046170][ T5356] ? load_image+0x410/0x410 [ 174.050699][ T5356] ? cgroup_rstat_updated+0xce/0x350 [ 174.055998][ T5356] ? rcu_read_lock_sched_held+0x86/0x110 [ 174.061659][ T5356] should_fail_ex+0x390/0x4c0 [ 174.066370][ T5356] get_futex_key+0x1b1/0x1000 [ 174.071071][ T5356] ? futex_setup_timer+0xc0/0xc0 [ 174.076022][ T5356] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 174.082025][ T5356] ? __lock_acquire+0x7ea0/0x7ea0 [ 174.087078][ T5356] ? lock_chain_count+0x20/0x20 [ 174.091951][ T5356] futex_wait_setup+0xb8/0x270 [ 174.096734][ T5356] ? futex_wait_multiple+0x920/0x920 [ 174.102037][ T5356] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 174.107953][ T5356] ? _raw_spin_unlock+0x40/0x40 [ 174.112826][ T5356] futex_wait+0x1b8/0x5c0 [ 174.117179][ T5356] ? futex_wait_setup+0x270/0x270 [ 174.122203][ T5356] ? __fget_files+0x28/0x460 [ 174.126798][ T5356] ? fput+0x150/0x1a0 [ 174.130774][ T5356] do_futex+0x310/0x320 [ 174.134920][ T5356] ? security_bpf+0x7a/0xa0 [ 174.139420][ T5356] ? __ia32_sys_get_robust_list+0x100/0x100 [ 174.145320][ T5356] ? bpf_link_show_fdinfo+0x380/0x380 [ 174.150702][ T5356] __se_sys_futex+0x381/0x410 [ 174.155379][ T5356] ? __x64_sys_futex+0xf0/0xf0 [ 174.160141][ T5356] ? __x64_sys_futex+0x1d/0xf0 [ 174.164901][ T5356] do_syscall_64+0x4c/0xa0 [ 174.169315][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 174.173989][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 174.178663][ T5356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.184566][ T5356] RIP: 0033:0x7f112b19e159 [ 174.188980][ T5356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.208581][ T5356] RSP: 002b:00007f112c1310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 174.216994][ T5356] RAX: ffffffffffffffda RBX: 00007f112b425fa8 RCX: 00007f112b19e159 [ 174.224956][ T5356] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f112b425fa8 [ 174.232917][ T5356] RBP: 00007f112b425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 174.240877][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.248849][ T5356] R13: 00007f112b426038 R14: 00007fffe5603cb0 R15: 00007fffe5603d98 [ 174.256834][ T5356] [ 174.388058][ T5359] syz.2.213: attempt to access beyond end of device [ 174.388058][ T5359] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 174.722452][ T33] device hsr_slave_0 left promiscuous mode [ 174.925149][ T33] device hsr_slave_1 left promiscuous mode [ 174.953216][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.063400][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.098708][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.120890][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.156393][ T33] device bridge_slave_1 left promiscuous mode [ 175.229819][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.635437][ T33] device bridge_slave_0 left promiscuous mode [ 176.725835][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.840155][ T33] device veth1_macvtap left promiscuous mode [ 176.893076][ T33] device veth0_macvtap left promiscuous mode [ 176.905922][ T33] device veth1_vlan left promiscuous mode [ 178.212475][ T33] device veth0_vlan left promiscuous mode [ 180.923873][ T5406] FAULT_INJECTION: forcing a failure. [ 180.923873][ T5406] name fail_futex, interval 1, probability 0, space 0, times 0 [ 180.938015][ T5406] CPU: 0 PID: 5406 Comm: syz.3.223 Not tainted syzkaller #0 [ 180.945350][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.955429][ T5406] Call Trace: [ 180.958780][ T5406] [ 180.961711][ T5406] dump_stack_lvl+0x188/0x24e [ 180.966391][ T5406] ? show_regs_print_info+0x12/0x12 [ 180.971620][ T5406] ? load_image+0x410/0x410 [ 180.976121][ T5406] ? cgroup_rstat_updated+0xce/0x350 [ 180.981407][ T5406] ? rcu_read_lock_sched_held+0x86/0x110 [ 180.987042][ T5406] ? sched_slice+0x430/0x430 [ 180.991634][ T5406] should_fail_ex+0x390/0x4c0 [ 180.996352][ T5406] get_futex_key+0x1b1/0x1000 [ 181.001032][ T5406] ? futex_setup_timer+0xc0/0xc0 [ 181.005967][ T5406] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 181.011956][ T5406] ? __lock_acquire+0x7ea0/0x7ea0 [ 181.016979][ T5406] ? lock_chain_count+0x20/0x20 [ 181.021826][ T5406] futex_wait_setup+0xb8/0x270 [ 181.026646][ T5406] ? futex_wait_multiple+0x920/0x920 [ 181.032523][ T5406] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 181.038511][ T5406] ? _raw_spin_unlock+0x40/0x40 [ 181.043459][ T5406] futex_wait+0x1b8/0x5c0 [ 181.047877][ T5406] ? futex_wait_setup+0x270/0x270 [ 181.052992][ T5406] ? __fget_files+0x28/0x460 [ 181.057665][ T5406] ? fput+0x150/0x1a0 [ 181.061649][ T5406] do_futex+0x310/0x320 [ 181.065830][ T5406] ? security_bpf+0x7a/0xa0 [ 181.070411][ T5406] ? __ia32_sys_get_robust_list+0x100/0x100 [ 181.076373][ T5406] ? bpf_link_show_fdinfo+0x380/0x380 [ 181.081854][ T5406] __se_sys_futex+0x381/0x410 [ 181.086560][ T5406] ? __x64_sys_futex+0xf0/0xf0 [ 181.091325][ T5406] ? __x64_sys_futex+0x1d/0xf0 [ 181.096095][ T5406] do_syscall_64+0x4c/0xa0 [ 181.100513][ T5406] ? clear_bhb_loop+0x60/0xb0 [ 181.105191][ T5406] ? clear_bhb_loop+0x60/0xb0 [ 181.109894][ T5406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.115797][ T5406] RIP: 0033:0x7fbdffd9e159 [ 181.120234][ T5406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.139856][ T5406] RSP: 002b:00007fbe00c7f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.148342][ T5406] RAX: ffffffffffffffda RBX: 00007fbe00025fa8 RCX: 00007fbdffd9e159 [ 181.156421][ T5406] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbe00025fa8 [ 181.164482][ T5406] RBP: 00007fbe00025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 181.172783][ T5406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.180806][ T5406] R13: 00007fbe00026038 R14: 00007ffef1722fd0 R15: 00007ffef17230b8 [ 181.188814][ T5406] [ 181.707862][ T5415] syz.0.220: attempt to access beyond end of device [ 181.707862][ T5415] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 184.113129][ T33] team0 (unregistering): Port device team_slave_1 removed [ 184.224478][ T33] team0 (unregistering): Port device team_slave_0 removed [ 184.363522][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.355110][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.816704][ T33] bond0 (unregistering): Released all slaves [ 187.899195][ T5174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.137154][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.153318][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.235027][ T5174] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.363063][ T5174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.426370][ T5174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.488042][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.546028][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.658581][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.665790][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.812762][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.130282][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.146045][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.153225][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.319738][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.337530][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.391528][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.430023][ T5477] syz.2.246: attempt to access beyond end of device [ 190.430023][ T5477] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 190.463821][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.687166][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.946673][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.141823][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.182983][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 191.182983][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 191.183982][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 191.290231][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.306689][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.315814][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.324437][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.332753][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.340846][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.894644][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.901004][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.588336][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.634015][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.653069][ T5174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.507688][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.546825][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.978156][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.993894][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.023454][ T5174] device veth0_vlan entered promiscuous mode [ 202.034389][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.061384][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.104684][ T5174] device veth1_vlan entered promiscuous mode [ 202.229581][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.283126][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.311168][ T5174] device veth0_macvtap entered promiscuous mode [ 202.342026][ T5174] device veth1_macvtap entered promiscuous mode [ 202.761917][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.061011][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.202415][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.223111][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.246697][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.313914][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.519088][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.988503][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.059237][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.138044][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.148583][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.172645][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.244603][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.253545][ T5595] syz.5.269: attempt to access beyond end of device [ 204.253545][ T5595] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 204.255140][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.278231][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.931069][ T5598] loop7: detected capacity change from 0 to 7 [ 205.382596][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 205.391982][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.399915][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.441646][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 205.450908][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.473160][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.481426][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 205.492234][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.513052][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 205.522216][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.559366][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.608553][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 205.617780][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.669559][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.744115][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.875117][ T5174] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.888686][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 205.897903][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.906084][ T5598] ldm_validate_partition_table(): Disk read failed. [ 207.016835][ T5174] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.034517][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.043771][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 207.073122][ T5174] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.081883][ T5174] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.082981][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.099787][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 207.121892][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.131130][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 207.187262][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.196516][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 207.204522][ T5598] Dev loop7: unable to read RDB block 0 [ 207.286892][ T5598] loop7: unable to read partition table [ 207.292836][ T5598] loop7: partition table beyond EOD, truncated [ 207.299026][ T5598] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 207.380187][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.420505][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.452491][ T4321] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 207.462095][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.524237][ T5474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.542862][ T5474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.550611][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.654143][ T4321] usb 3-1: config 0 has no interfaces? [ 207.663536][ T4321] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 207.713420][ T4321] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 207.721475][ T4321] usb 3-1: Manufacturer: syz [ 207.765285][ T4321] usb 3-1: config 0 descriptor?? [ 209.772897][ T4954] usb 3-1: USB disconnect, device number 11 [ 212.832631][ T5652] syz.2.281: attempt to access beyond end of device [ 212.832631][ T5652] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 214.296446][ T5661] loop3: detected capacity change from 0 to 64 [ 215.703778][ T5675] syz.2.286: attempt to access beyond end of device [ 215.703778][ T5675] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 217.269091][ T5693] syz.0.289: attempt to access beyond end of device [ 217.269091][ T5693] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 217.566937][ T4322] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 217.662599][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 217.802578][ T4322] usb 6-1: Using ep0 maxpacket: 8 [ 217.817058][ T4322] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 217.947628][ T4322] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.115469][ T4322] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.187176][ T4322] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.240723][ T4322] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.317296][ T4322] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 218.358058][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.567137][ T14] usb 6-1: USB disconnect, device number 5 [ 220.672512][ T5724] syz.0.296: attempt to access beyond end of device [ 220.672512][ T5724] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 222.925215][ T5743] syz.6.301: attempt to access beyond end of device [ 222.925215][ T5743] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 223.816386][ T5748] loop2: detected capacity change from 0 to 64 [ 224.858280][ T5763] SET target dimension over the limit! [ 230.092680][ T4321] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 230.308779][ T4321] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.403532][ T4321] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.572132][ T4321] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 230.714089][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 230.820846][ T4321] usb 6-1: Product: syz [ 231.973918][ T4321] usb 6-1: Manufacturer: syz [ 231.997413][ T4321] mos7840 6-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 232.107813][ T5817] SET target dimension over the limit! [ 232.282587][ T4322] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 232.497545][ T5818] loop6: detected capacity change from 0 to 64 [ 233.046650][ T4321] mos7840: probe of ttyUSB0 failed with error -71 [ 233.215809][ T4321] usb 6-1: USB disconnect, device number 6 [ 233.601710][ T4321] mos7840 6-1:1.0: device disconnected [ 234.482513][ T4322] usb 1-1: Using ep0 maxpacket: 16 [ 235.105014][ T4322] usb 1-1: device descriptor read/all, error -71 [ 239.007678][ T4366] libceph: connect (1)[c::]:6789 error -101 [ 239.019525][ T4366] libceph: mon0 (1)[c::]:6789 connect error [ 239.785595][ T5857] ceph: No mds server is up or the cluster is laggy [ 241.167904][ T5880] loop2: detected capacity change from 0 to 64 [ 241.274576][ T5889] SET target dimension over the limit! [ 248.894532][ T5943] loop6: detected capacity change from 0 to 64 [ 249.086643][ T4322] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 249.327456][ T4322] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 250.100862][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.172549][ T4322] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 250.188699][ T4322] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 250.196793][ T4322] usb 1-1: Manufacturer: syz [ 250.204922][ T4322] usb 1-1: config 0 descriptor?? [ 250.213220][ T4322] igorplugusb 1-1:0.0: incorrect number of endpoints [ 250.419216][ T4368] usb 1-1: USB disconnect, device number 7 [ 251.103758][ T5970] syz.0.355: attempt to access beyond end of device [ 251.103758][ T5970] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 252.398997][ T5976] kAFS: No cell specified [ 253.854425][ T4368] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 254.227934][ T4368] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.247379][ T4368] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.266994][ T4368] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 254.285583][ T4368] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 254.296658][ T4368] usb 3-1: Product: syz [ 254.300844][ T4368] usb 3-1: Manufacturer: syz [ 254.324515][ T4368] hub 3-1:4.0: USB hub found [ 254.569495][ T4368] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 255.504670][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.511650][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.029690][ T6007] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 256.282834][ T4368] usb 3-1: USB disconnect, device number 12 [ 259.532856][ T14] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 259.733904][ T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.754436][ T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.785441][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.931958][ T14] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.957807][ T14] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 259.977619][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.225236][ T6045] syz.0.367: attempt to access beyond end of device [ 260.225236][ T6045] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 262.129881][ T14] [drm] Initialized gud 1.0.0 20200422 for 7-1:1.0 on minor 2 [ 262.167515][ T6062] syz.0.374: attempt to access beyond end of device [ 262.167515][ T6062] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 262.923247][ T14] gud 7-1:1.0: USB-1: Invalid EDID size (ret=79) [ 263.143560][ T14] gud 7-1:1.0: [drm] Cannot find any crtc or sizes [ 264.037050][ T14] usb 7-1: USB disconnect, device number 2 [ 267.030604][ T6100] ip_tables: iptables: counters copy to user failed while replacing table [ 267.059368][ T6105] syz.6.384: attempt to access beyond end of device [ 267.059368][ T6105] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 270.892424][ T4322] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 270.955937][ T6152] SET target dimension over the limit! [ 270.996708][ T6154] ip_tables: iptables: counters copy to user failed while replacing table [ 271.082516][ T4322] usb 4-1: Using ep0 maxpacket: 8 [ 271.093147][ T4322] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 271.102225][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.111636][ T6156] syz.2.397: attempt to access beyond end of device [ 271.111636][ T6156] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 271.122437][ T4322] usb 4-1: Product: syz [ 271.128748][ T4322] usb 4-1: Manufacturer: syz [ 271.145685][ T4322] usb 4-1: SerialNumber: syz [ 271.168632][ T4322] usb 4-1: config 0 descriptor?? [ 271.461762][ T4322] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 273.779756][ T4322] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 273.794234][ T4322] usb 4-1: USB disconnect, device number 8 [ 275.537560][ T6197] syz.5.405: attempt to access beyond end of device [ 275.537560][ T6197] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 277.801889][ T6212] ip_tables: iptables: counters copy to user failed while replacing table [ 278.352485][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 278.823277][ T6220] SET target dimension over the limit! [ 278.882420][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 279.774750][ T14] usb 4-1: device descriptor read/64, error -71 [ 279.940574][ T6235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.042408][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 280.192435][ T14] usb 4-1: device descriptor read/64, error -71 [ 280.272759][ T6244] kAFS: No cell specified [ 280.333125][ T14] usb usb4-port1: attempt power cycle [ 280.742718][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 281.360704][ T14] usb 4-1: device descriptor read/8, error -71 [ 281.632495][ T6256] syz.3.419: attempt to access beyond end of device [ 281.632495][ T6256] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 283.339101][ T6274] ip_tables: iptables: counters copy to user failed while replacing table [ 283.983043][ T6288] kAFS: No cell specified [ 285.643470][ T6285] SET target dimension over the limit! [ 286.857388][ T6307] syz.2.432: attempt to access beyond end of device [ 286.857388][ T6307] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 286.988251][ T6310] kAFS: No cell specified [ 287.033058][ T14] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 287.887144][ T14] usb 6-1: device descriptor read/64, error -71 [ 288.947800][ T14] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 289.642632][ T6327] ip_tables: iptables: counters copy to user failed while replacing table [ 289.861621][ T6337] SET target dimension over the limit! [ 290.422481][ T4368] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 291.092571][ T4368] usb 3-1: Using ep0 maxpacket: 8 [ 291.100960][ T4368] usb 3-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.124445][ T4368] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.144799][ T4368] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 291.163072][ T4368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.194650][ T4368] usb 3-1: config 0 descriptor?? [ 291.233083][ T6370] kAFS: No cell specified [ 293.856810][ T4368] usbhid 3-1:0.0: can't add hid device: -71 [ 293.866709][ T4368] usbhid: probe of 3-1:0.0 failed with error -71 [ 293.903209][ T4368] usb 3-1: USB disconnect, device number 13 [ 294.018199][ T6381] ip_tables: iptables: counters copy to user failed while replacing table [ 294.122541][ T4321] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 294.222609][ T22] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 294.362430][ T4321] usb 7-1: Using ep0 maxpacket: 32 [ 295.032090][ T4321] usb 7-1: no configurations [ 295.040664][ T4321] usb 7-1: can't read configurations, error -22 [ 295.202577][ T4321] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 295.275019][ T22] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 295.447295][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.482554][ T4321] usb 7-1: Using ep0 maxpacket: 32 [ 295.489574][ T6402] syz.5.456: attempt to access beyond end of device [ 295.489574][ T6402] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 295.513584][ T6400] SET target dimension over the limit! [ 295.531879][ T4321] usb 7-1: no configurations [ 295.539450][ T22] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 295.558859][ T4321] usb 7-1: can't read configurations, error -22 [ 295.592841][ T22] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 295.611293][ T4321] usb usb7-port1: attempt power cycle [ 295.632235][ T22] usb 4-1: Manufacturer: syz [ 296.373713][ T22] usb 4-1: config 0 descriptor?? [ 296.396589][ T22] igorplugusb 4-1:0.0: incorrect number of endpoints [ 296.591433][ T4323] usb 4-1: USB disconnect, device number 13 [ 296.722548][ T4321] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 296.736016][ T6415] kAFS: No cell specified [ 297.601635][ T4321] usb 7-1: device descriptor read/8, error -71 [ 297.693345][ T6423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.805372][ T6432] kAFS: No cell specified [ 298.584960][ T6435] ip_tables: iptables: counters copy to user failed while replacing table [ 299.525373][ T6442] autofs4:pid:6442:autofs_fill_super: called with bogus options [ 299.589572][ T6447] syz.2.467: attempt to access beyond end of device [ 299.589572][ T6447] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 299.603006][ T6445] syz.6.466: attempt to access beyond end of device [ 299.603006][ T6445] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 299.735486][ T6452] netlink: 'syz.2.467': attribute type 19 has an invalid length. [ 301.402521][ T6453] SET target dimension over the limit! [ 301.785726][ T4368] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 301.947769][ T6475] ip_tables: iptables: counters copy to user failed while replacing table [ 301.994130][ T4368] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 302.028733][ T4368] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.054027][ T4505] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 302.062806][ T4368] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 302.139359][ T4368] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 302.148055][ T4322] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 302.156337][ T6481] kAFS: No cell specified [ 302.215444][ T4368] usb 3-1: Manufacturer: syz [ 302.266150][ T4505] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.338424][ T4368] usb 3-1: config 0 descriptor?? [ 302.362908][ T4322] usb 6-1: Using ep0 maxpacket: 32 [ 302.374658][ T4322] usb 6-1: no configurations [ 302.394365][ T4505] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.423967][ T4322] usb 6-1: can't read configurations, error -22 [ 303.750090][ T4368] igorplugusb 3-1:0.0: incorrect number of endpoints [ 303.771265][ T4505] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 303.885105][ T4505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 303.885232][ T4368] usb 3-1: USB disconnect, device number 14 [ 303.902613][ T4322] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 303.964660][ T4505] usb 1-1: Product: syz [ 303.980286][ T4505] usb 1-1: Manufacturer: syz [ 304.013332][ T4505] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 304.132502][ T4322] usb 6-1: Using ep0 maxpacket: 32 [ 304.138459][ T4322] usb 6-1: no configurations [ 304.159573][ T6485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.188053][ T4322] usb 6-1: can't read configurations, error -22 [ 304.198130][ T4322] usb usb6-port1: attempt power cycle [ 304.411631][ T4505] mos7840: probe of ttyUSB0 failed with error -32 [ 304.612686][ T4322] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 304.675599][ T4322] usb 6-1: Using ep0 maxpacket: 32 [ 304.726806][ T4322] usb 6-1: no configurations [ 304.823938][ T4322] usb 6-1: can't read configurations, error -22 [ 305.122465][ T4322] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 305.258087][ T6505] autofs4:pid:6505:autofs_fill_super: called with bogus options [ 305.362682][ T4322] usb 6-1: device not accepting address 12, error -71 [ 305.392871][ T4322] usb usb6-port1: unable to enumerate USB device [ 305.456512][ T6510] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 305.463076][ T6510] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.470884][ T6510] vhci_hcd vhci_hcd.0: Device attached [ 305.642529][ T4323] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 306.048706][ T4323] usb 3-1: Using ep0 maxpacket: 8 [ 306.054034][ T6511] vhci_hcd: connection closed [ 306.056086][ T4860] vhci_hcd: stop threads [ 306.082222][ T4505] usb 1-1: USB disconnect, device number 8 [ 306.088600][ T4323] usb 3-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.091652][ T4505] mos7840 1-1:1.0: device disconnected [ 306.162433][ T4323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 306.189991][ T4860] vhci_hcd: release socket [ 306.210318][ T4323] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 306.230206][ T4860] vhci_hcd: disconnect device [ 306.243657][ T6521] ip_tables: iptables: counters copy to user failed while replacing table [ 306.263903][ T4368] vhci_hcd: vhci_device speed not set [ 306.266137][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.301098][ T4323] usb 3-1: config 0 descriptor?? [ 306.773138][ T6532] kAFS: No cell specified [ 306.984475][ T4323] usbhid 3-1:0.0: can't add hid device: -71 [ 307.568724][ T4323] usbhid: probe of 3-1:0.0 failed with error -71 [ 307.677704][ T6527] SET target dimension over the limit! [ 307.735337][ T4323] usb 3-1: USB disconnect, device number 15 [ 307.864015][ T6539] kAFS: No cell specified [ 310.464464][ T6544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.484228][ T6554] autofs4:pid:6554:autofs_fill_super: called with bogus options [ 310.499327][ T6556] syz.0.496: attempt to access beyond end of device [ 310.499327][ T6556] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 310.721374][ T6566] ip_tables: iptables: counters copy to user failed while replacing table [ 310.739534][ T6565] syz.5.499: attempt to access beyond end of device [ 310.739534][ T6565] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 310.742443][ T4505] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 310.893396][ T6573] netlink: 'syz.5.499': attribute type 19 has an invalid length. [ 310.962582][ T4505] usb 4-1: Using ep0 maxpacket: 32 [ 310.978802][ T4505] usb 4-1: no configurations [ 310.986982][ T4505] usb 4-1: can't read configurations, error -22 [ 311.192762][ T4505] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 311.403581][ T4505] usb 4-1: Using ep0 maxpacket: 32 [ 311.409497][ T4505] usb 4-1: no configurations [ 311.439111][ T4505] usb 4-1: can't read configurations, error -22 [ 311.474775][ T4505] usb usb4-port1: attempt power cycle [ 311.662550][ T4319] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 311.832123][ T6588] SET target dimension over the limit! [ 311.922451][ T4505] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 311.972465][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 312.593647][ T4319] usb 3-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.633097][ T4505] usb 4-1: Using ep0 maxpacket: 32 [ 312.638534][ T4319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 312.638840][ T4505] usb 4-1: no configurations [ 312.652415][ T4319] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 312.662490][ T4505] usb 4-1: can't read configurations, error -22 [ 312.682070][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.728645][ T4319] usb 3-1: config 0 descriptor?? [ 312.862745][ T4505] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 312.921860][ T4505] usb 4-1: Using ep0 maxpacket: 32 [ 312.930861][ T4505] usb 4-1: no configurations [ 312.954443][ T4505] usb 4-1: can't read configurations, error -22 [ 312.988951][ T4505] usb usb4-port1: unable to enumerate USB device [ 313.392875][ T4319] usbhid 3-1:0.0: can't add hid device: -71 [ 313.399030][ T4319] usbhid: probe of 3-1:0.0 failed with error -71 [ 314.698121][ T4319] usb 3-1: USB disconnect, device number 16 [ 314.861916][ T6610] ip_tables: iptables: counters copy to user failed while replacing table [ 316.946478][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.953223][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.607951][ T6639] SET target dimension over the limit! [ 317.758463][ T6657] ip_tables: iptables: counters copy to user failed while replacing table [ 317.892633][ T4319] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 317.992685][ T14] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 318.092635][ T4319] usb 7-1: Using ep0 maxpacket: 8 [ 318.103776][ T4319] usb 7-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.192473][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 318.196123][ T4319] usb 7-1: config 0 interface 0 has no altsetting 0 [ 319.777922][ T4319] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 319.880624][ T4319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.922970][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.933385][ T14] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 319.954987][ T4319] usb 7-1: config 0 descriptor?? [ 319.960254][ T14] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 319.972889][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.981631][ T14] usb 6-1: Product: syz [ 319.986305][ T14] usb 6-1: Manufacturer: syz [ 319.991550][ T14] usb 6-1: SerialNumber: syz [ 320.016536][ T14] usb 6-1: config 0 descriptor?? [ 320.312533][ T4323] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 320.523378][ T4323] usb 3-1: Using ep0 maxpacket: 8 [ 320.572799][ T4319] usbhid 7-1:0.0: can't add hid device: -71 [ 321.803284][ T4323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 321.853408][ T4319] usbhid: probe of 7-1:0.0 failed with error -71 [ 321.876143][ T4323] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 321.905190][ T4319] usb 7-1: USB disconnect, device number 7 [ 321.947700][ T4323] usb 3-1: can't read configurations, error -71 [ 321.997517][ T4317] usb 6-1: USB disconnect, device number 13 [ 322.526182][ T6702] syz.5.532: attempt to access beyond end of device [ 322.526182][ T6702] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 322.606842][ T6705] ip_tables: iptables: counters copy to user failed while replacing table [ 324.480397][ T6721] SET target dimension over the limit! [ 324.612622][ T4322] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 325.172605][ T4322] usb 6-1: Using ep0 maxpacket: 8 [ 325.501895][ T4322] usb 6-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.572456][ T4322] usb 6-1: config 0 interface 0 has no altsetting 0 [ 325.613358][ T4322] usb 6-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 325.648373][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.704215][ T4322] usb 6-1: config 0 descriptor?? [ 325.912678][ T4323] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 327.002434][ T4323] usb 4-1: Using ep0 maxpacket: 32 [ 327.009981][ T4323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.026471][ T4323] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 327.033886][ T4322] usbhid 6-1:0.0: can't add hid device: -71 [ 327.060391][ T4322] usbhid: probe of 6-1:0.0 failed with error -71 [ 327.061492][ T4323] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 327.096824][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.104633][ T4322] usb 6-1: USB disconnect, device number 14 [ 327.107079][ T4323] usb 4-1: Product: syz [ 327.117260][ T4323] usb 4-1: Manufacturer: syz [ 327.128513][ T4323] usb 4-1: SerialNumber: syz [ 327.153800][ T4323] usb 4-1: config 0 descriptor?? [ 327.233793][ T6757] ip_tables: iptables: counters copy to user failed while replacing table [ 327.508507][ T6768] syz.0.548: attempt to access beyond end of device [ 327.508507][ T6768] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 328.292622][ T4322] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 328.369264][ T6777] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 328.391836][ T6779] syz.6.550: attempt to access beyond end of device [ 328.391836][ T6779] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 328.496542][ T4322] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.552527][ T4322] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.608191][ T4322] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 328.627698][ T4322] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 328.645226][ T4322] usb 3-1: Product: syz [ 329.433633][ T4322] usb 3-1: Manufacturer: syz [ 329.470937][ T4322] hub 3-1:4.0: USB hub found [ 329.507596][ T14] usb 4-1: USB disconnect, device number 18 [ 329.663897][ T4322] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 330.031360][ T6799] SET target dimension over the limit! [ 331.173336][ T126] usb 3-1: USB disconnect, device number 19 [ 332.471954][ T6820] ip_tables: iptables: counters copy to user failed while replacing table [ 332.552446][ T4322] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 332.560767][ T6820] syz.5.561: attempt to access beyond end of device [ 332.560767][ T6820] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 332.702680][ T14] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 332.742447][ T4322] usb 1-1: Using ep0 maxpacket: 32 [ 332.749429][ T4322] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 332.759370][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.769975][ T4322] usb 1-1: config 0 has no interface number 0 [ 332.776370][ T4322] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 332.803689][ T4322] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 332.812996][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.821058][ T4322] usb 1-1: Product: syz [ 332.825917][ T4322] usb 1-1: Manufacturer: syz [ 332.830535][ T4322] usb 1-1: SerialNumber: syz [ 332.837519][ T4322] usb 1-1: config 0 descriptor?? [ 332.855183][ T4322] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input7 [ 332.892622][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 332.901526][ T14] usb 3-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.935389][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 332.942126][ T14] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 332.980137][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.008092][ T14] usb 3-1: config 0 descriptor?? [ 333.453337][ T4322] usb 1-1: USB disconnect, device number 9 [ 333.639995][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 333.681518][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 333.866809][ T14] usb 3-1: USB disconnect, device number 20 [ 336.301185][ T4323] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 336.679638][ T6879] syz.6.573: attempt to access beyond end of device [ 336.679638][ T6879] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 336.720041][ T6881] ip_tables: iptables: counters copy to user failed while replacing table [ 336.745890][ T4323] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 336.770374][ T4323] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.853041][ T6890] netlink: 'syz.6.573': attribute type 19 has an invalid length. [ 337.502136][ T6892] SET target dimension over the limit! [ 337.529052][ T4323] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 337.615950][ T6881] syz.0.574: attempt to access beyond end of device [ 337.615950][ T6881] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 337.749778][ T4323] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 338.094679][ T4323] usb 6-1: Product: syz [ 338.119099][ T4323] usb 6-1: Manufacturer: syz [ 338.552574][ T4323] usb 6-1: can't set config #4, error -71 [ 338.579755][ T4323] usb 6-1: USB disconnect, device number 15 [ 339.352186][ T6916] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 341.209912][ T6930] autofs4:pid:6930:autofs_fill_super: called with bogus options [ 342.142950][ T14] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 342.386384][ T14] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 342.417926][ T14] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.440339][ T14] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 342.452623][ T4323] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 342.477166][ T14] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 342.506526][ T6957] ip_tables: iptables: counters copy to user failed while replacing table [ 342.532080][ T14] usb 3-1: Product: syz [ 342.539762][ T14] usb 3-1: Manufacturer: syz [ 342.562254][ T6957] tipc: Started in network mode [ 342.573696][ T6959] SET target dimension over the limit! [ 342.589617][ T14] hub 3-1:4.0: USB hub found [ 342.599682][ T6957] tipc: Node identity ac1414aa, cluster identity 4711 [ 342.609938][ T6957] tipc: New replicast peer: 172.20.20.187 [ 342.627729][ T6957] tipc: Enabled bearer , priority 10 [ 342.643361][ T6960] syz.3.591: attempt to access beyond end of device [ 342.643361][ T6960] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 342.800448][ T14] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 342.882641][ T4320] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 343.025694][ T4323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 343.112562][ T4320] usb 7-1: Using ep0 maxpacket: 32 [ 343.122357][ T4320] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.141664][ T4320] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.986695][ T4320] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 344.022188][ T4320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.059492][ T4320] usb 7-1: Product: syz [ 344.095587][ T4320] usb 7-1: Manufacturer: syz [ 344.143842][ T4320] usb 7-1: SerialNumber: syz [ 344.182127][ T4368] tipc: Node number set to 2886997162 [ 344.204934][ T4320] usb 7-1: config 0 descriptor?? [ 344.763122][ T4320] usb 3-1: USB disconnect, device number 21 [ 345.148342][ T4323] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 345.157562][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.169319][ T4323] usb 1-1: can't set config #1, error -71 [ 345.176207][ T4323] usb 1-1: USB disconnect, device number 10 [ 345.930640][ T4322] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 345.961784][ T14] usb 7-1: USB disconnect, device number 8 [ 346.123420][ T6987] process 'syz.2.597' launched './file0' with NULL argv: empty string added [ 346.365266][ T4322] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 346.380049][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 346.410630][ T4322] usb 4-1: Product: syz [ 346.482974][ T6992] autofs4:pid:6992:autofs_fill_super: called with bogus options [ 346.557988][ T4322] usb 4-1: SerialNumber: syz [ 346.595714][ T4322] usb 4-1: config 0 descriptor?? [ 346.639506][ T6999] ip_tables: iptables: counters copy to user failed while replacing table [ 346.684826][ T7001] ip_tables: iptables: counters copy to user failed while replacing table [ 346.708753][ T7001] tipc: Started in network mode [ 346.723314][ T7001] tipc: Node identity ac1414aa, cluster identity 4711 [ 346.743689][ T7001] tipc: New replicast peer: 172.20.20.187 [ 346.750262][ T7001] tipc: Enabled bearer , priority 10 [ 346.852299][ T7004] syz.6.603: attempt to access beyond end of device [ 346.852299][ T7004] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 347.502520][ T4322] usb 4-1: USB disconnect, device number 19 [ 347.864081][ T4954] tipc: Node number set to 2886997162 [ 348.093698][ T4322] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 348.852489][ T4323] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 349.184551][ T4322] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 349.234267][ T4322] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.304732][ T4322] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 349.326659][ T4323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 349.332620][ T4322] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 349.346911][ T4323] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 349.369771][ T4322] usb 6-1: Product: syz [ 349.370094][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.378616][ T4322] usb 6-1: Manufacturer: syz [ 349.396208][ T7036] SET target dimension over the limit! [ 349.417819][ T4322] hub 6-1:4.0: USB hub found [ 349.572473][ T14] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 349.624184][ T4322] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 349.754338][ T14] usb 4-1: config 0 has no interfaces? [ 349.759905][ T14] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 349.769045][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.779888][ T14] usb 4-1: config 0 descriptor?? [ 349.812018][ T4323] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 349.855916][ T7038] autofs4:pid:7038:autofs_fill_super: called with bogus options [ 349.998957][ T4323] lg-g15 0003:046D:C222.0004: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 350.098030][ T4323] usb 1-1: USB disconnect, device number 11 [ 350.166056][ T22] usb 4-1: USB disconnect, device number 20 [ 350.420501][ T7043] fido_id[7043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 350.442568][ T14] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 350.768515][ T14] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 350.788382][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.811580][ T14] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 350.829624][ T14] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 350.839395][ T14] usb 3-1: Manufacturer: syz [ 350.935406][ T14] usb 3-1: config 0 descriptor?? [ 351.063182][ T4322] usb 6-1: USB disconnect, device number 16 [ 351.102600][ T14] rc_core: IR keymap rc-hauppauge not found [ 351.111458][ T14] Registered IR keymap rc-empty [ 351.132131][ T14] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 351.183045][ T14] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 351.184829][ T7059] ip_tables: iptables: counters copy to user failed while replacing table [ 352.063367][ T14] usb 3-1: USB disconnect, device number 22 [ 352.233822][ T7059] tipc: Started in network mode [ 352.250727][ T7059] tipc: Node identity ac1414aa, cluster identity 4711 [ 352.260937][ T7059] tipc: New replicast peer: 172.20.20.187 [ 352.915393][ T7059] tipc: Enabled bearer , priority 10 [ 353.312720][ T126] tipc: Node number set to 2886997162 [ 353.473797][ T7087] autofs4:pid:7087:autofs_fill_super: called with bogus options [ 354.248253][ T7086] SET target dimension over the limit! [ 356.122518][ T4323] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 356.333030][ T4323] usb 6-1: config 0 has no interfaces? [ 356.338602][ T4323] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 356.420570][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.452911][ T4323] usb 6-1: config 0 descriptor?? [ 356.692458][ T4323] usb 6-1: USB disconnect, device number 17 [ 359.693469][ T7131] ip_tables: iptables: counters copy to user failed while replacing table [ 359.768571][ T7131] tipc: Enabling of bearer rejected, already enabled [ 360.028257][ T7131] syz.0.638: attempt to access beyond end of device [ 360.028257][ T7131] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 360.864918][ T7149] SET target dimension over the limit! [ 366.252258][ T14] general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] PREEMPT SMP KASAN [ 366.264021][ T14] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 366.272436][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0 [ 366.279727][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.289774][ T14] Workqueue: kafsd afs_process_async_call [ 366.295586][ T14] RIP: 0010:__mutex_lock+0xe8/0xae0 [ 366.300864][ T14] Code: c0 40 a1 c3 96 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 56 09 00 00 83 3d 15 eb 86 0c 00 75 21 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 dc ea 96 f7 48 39 5b 60 0f 85 d9 08 00 00 [ 366.320511][ T14] RSP: 0018:ffffc90000137960 EFLAGS: 00010202 [ 366.326574][ T14] RAX: 0000000000000013 RBX: 0000000000000038 RCX: ffffffff96c3a103 [ 366.334547][ T14] RDX: ffff88813feca23c RSI: ffffffff8a8c2a20 RDI: 0000000000000098 [ 366.342517][ T14] RBP: ffffc90000137ac0 R08: ffffffff8966b856 R09: 000000000000000b [ 366.350502][ T14] R10: 00000000fffffffb R11: 0000000000000000 R12: dffffc0000000000 [ 366.358477][ T14] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.366456][ T14] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 366.375564][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.382143][ T14] CR2: 000000110c3f4a19 CR3: 000000002e2da000 CR4: 00000000003506f0 [ 366.390109][ T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.398114][ T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.406087][ T14] Call Trace: [ 366.409389][ T14] [ 366.412321][ T14] ? afs_put_call+0x28b/0x480 [ 366.417125][ T14] ? rcu_is_watching+0x11/0xa0 [ 366.421982][ T14] ? afs_extract_data+0x33e/0x650 [ 366.427001][ T14] ? rxrpc_kernel_abort_call+0x26/0x70 [ 366.432523][ T14] ? mutex_lock_nested+0x10/0x10 [ 366.437477][ T14] ? afs_extract_data+0x33e/0x650 [ 366.442503][ T14] ? afs_send_simple_reply+0x300/0x300 [ 366.447966][ T14] ? iov_iter_kvec+0x4a/0x1f0 [ 366.452670][ T14] rxrpc_kernel_abort_call+0x26/0x70 [ 366.457950][ T14] afs_deliver_to_call+0x6ab/0x1200 [ 366.463267][ T14] ? afs_wait_for_call_to_complete+0xc20/0xc20 [ 366.469433][ T14] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 366.475422][ T14] ? __lock_acquire+0x7ea0/0x7ea0 [ 366.480525][ T14] ? read_lock_is_recursive+0x10/0x10 [ 366.485889][ T14] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 366.491770][ T14] ? _raw_spin_unlock+0x40/0x40 [ 366.496610][ T14] afs_process_async_call+0x7e/0xe0 [ 366.501797][ T14] ? process_one_work+0x7b4/0x1160 [ 366.506986][ T14] process_one_work+0x8ab/0x1160 [ 366.511919][ T14] ? worker_detach_from_pool+0x240/0x240 [ 366.517568][ T14] ? _raw_spin_lock_irq+0xb7/0xf0 [ 366.522590][ T14] ? _raw_spin_lock_irqsave+0x100/0x100 [ 366.528134][ T14] ? wq_worker_running+0x97/0x190 [ 366.533149][ T14] worker_thread+0xaf5/0x12a0 [ 366.537841][ T14] kthread+0x29d/0x330 [ 366.541906][ T14] ? worker_clr_flags+0x1a0/0x1a0 [ 366.546924][ T14] ? kthread_blkcg+0xd0/0xd0 [ 366.551580][ T14] ret_from_fork+0x1f/0x30 [ 366.556078][ T14] [ 366.559095][ T14] Modules linked in: [ 367.109377][ T14] ---[ end trace 0000000000000000 ]--- [ 367.116467][ T14] RIP: 0010:__mutex_lock+0xe8/0xae0 [ 367.122151][ T14] Code: c0 40 a1 c3 96 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 56 09 00 00 83 3d 15 eb 86 0c 00 75 21 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 dc ea 96 f7 48 39 5b 60 0f 85 d9 08 00 00 [ 367.164476][ T14] RSP: 0018:ffffc90000137960 EFLAGS: 00010202 [ 367.176467][ T14] RAX: 0000000000000013 RBX: 0000000000000038 RCX: ffffffff96c3a103 [ 367.197971][ T14] RDX: ffff88813feca23c RSI: ffffffff8a8c2a20 RDI: 0000000000000098 [ 367.229994][ T14] RBP: ffffc90000137ac0 R08: ffffffff8966b856 R09: 000000000000000b [ 367.250449][ T14] R10: 00000000fffffffb R11: 0000000000000000 R12: dffffc0000000000 [ 367.341280][ T14] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.367522][ T14] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 367.756780][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.763686][ T14] CR2: 000000110c28ec00 CR3: 000000002719e000 CR4: 00000000003506f0 [ 367.772515][ T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 367.780509][ T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 367.804996][ T14] Kernel panic - not syncing: Fatal exception [ 367.811355][ T14] Kernel Offset: disabled [ 367.815669][ T14] Rebooting in 86400 seconds..