last executing test programs: 15m26.814613796s ago: executing program 2 (id=74): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000180)) 15m24.614507661s ago: executing program 2 (id=80): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(r0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) 15m22.517827372s ago: executing program 2 (id=82): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x891a, 0x0) 15m20.769858867s ago: executing program 2 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file1\x00', 0x0, 0x4008, r1}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f00000003c0)="304ca8ac14d5ead5e74324ea21ae3c995ebd3c17fa7ad242bfc475f5e7efcb5a63fbb50dc1b4ce02c709ab1fcf7c286d3df808a0953d4b6d65e67cc2ed83aee2d093ec4e4dd8e01a7a1604d7513201418eac30083037cde037fc24d2ed8cb44018"}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) copy_file_range(r5, 0x0, r5, 0x0, 0xb51, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f0000000c00)="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", 0xfc) 15m19.031572948s ago: executing program 2 (id=90): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000180)) 15m18.634355529s ago: executing program 2 (id=92): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = socket$kcm(0x10, 0x5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(r0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) 15m13.372689364s ago: executing program 3 (id=103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 15m12.006507381s ago: executing program 3 (id=105): rt_sigaction(0x1, &(0x7f0000000080)={&(0x7f00000000c0)="c461f9134200000040293b66262465f2c543aaaa66420fadf4c461dd6b651dc4a129000cc09a69e400800016a4000092", 0x88000000, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f00000002c0)) lseek(0xffffffffffffffff, 0x80000000457, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r1, 0x0, 0x0, 0xee) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) listen(0xffffffffffffffff, 0xc98e) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0xffff, 0xb000}, 0x4) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x8000, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000400000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 15m10.809739861s ago: executing program 3 (id=108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x891a, 0x0) 15m8.423492791s ago: executing program 3 (id=109): getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 15m5.529531294s ago: executing program 3 (id=115): getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 15m4.126406681s ago: executing program 3 (id=116): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 15m3.152588174s ago: executing program 32 (id=92): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = socket$kcm(0x10, 0x5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(r0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) 14m47.081592911s ago: executing program 33 (id=116): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 21.76481349s ago: executing program 4 (id=2114): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x9, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, r2, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x1) syz_fuse_handle_req(r0, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) 21.571206636s ago: executing program 5 (id=2116): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, 0x0, 0x0, 0x11) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 21.110097467s ago: executing program 5 (id=2119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) r6 = socket$kcm(0x10, 0x5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(r0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) 19.784159911s ago: executing program 0 (id=2120): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)="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", 0xbf8, 0x1, 0x0, {0x0, r1}}) setrlimit(0x7, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) openat$ppp(0xffffff9c, 0x0, 0x4340, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f000000fa00)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001880)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x8000, 0x0, 0x20000}, &(0x7f0000002000), &(0x7f0000000280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, 0x28, 0x1, 0x70bd27, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x18800) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 19.783895527s ago: executing program 4 (id=2121): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 18.043958969s ago: executing program 5 (id=2124): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 17.965830526s ago: executing program 6 (id=2125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000052c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f00000018"], 0x20) 17.819486523s ago: executing program 0 (id=2126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x0, 0x0, 0xf, 0x7, 0x5, "79ff5871c617339ac1e8758caff3375114576fe106884f4e8fd385ec7bd4c6f243dd3fb117e132e3ad8ebf4fa8ea163063a6fc6af271f22ba39007f4057abd", 0xc}, 0x60) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x29, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 17.80429696s ago: executing program 4 (id=2127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r5, &(0x7f0000000140)={0x27, 0x0, 0x0, 0xf, 0x7, 0x5, "79ff5871c617339ac1e8758caff3375114576fe106884f4e8fd385ec7bd4c6f243dd3fb117e132e3ad8ebf4fa8ea163063a6fc6af271f22ba39007f4057abd", 0xc}, 0x60) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x80000000000003c}, 0x60) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x29, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200ec8c5, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r6, &(0x7f0000000140)="e1f2", 0x2, 0x40000, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000b0000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000004439a7880add23ce000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioperm(0x9, 0x40, 0x8001) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32], 0x10) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000080)) 15.706670857s ago: executing program 6 (id=2128): mkdirat(0xffffffffffffff9c, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 14.673190702s ago: executing program 6 (id=2130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x208101, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x4048080) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14.144207942s ago: executing program 4 (id=2131): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000540)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "2d5115", 0x48, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@routing={0x32, 0x8, 0x1, 0x1, 0x11, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}]}}}}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000000) syz_genetlink_get_family_id$nl80211(0x0, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 13.906572307s ago: executing program 0 (id=2132): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x108c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.906256077s ago: executing program 5 (id=2133): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000040)={@local, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0x0, 0xbc, '9'}}}}}, 0x0) 12.975892568s ago: executing program 0 (id=2135): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) r6 = socket$kcm(0x10, 0x5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(r0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) 9.990472735s ago: executing program 1 (id=2137): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 9.891765745s ago: executing program 6 (id=2138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 9.789628759s ago: executing program 6 (id=2139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 9.643894314s ago: executing program 1 (id=2140): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x21) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140), &(0x7f0000000240)=@v1={0x1000000, [{0x9, 0x3ff}]}, 0xc, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi0\x00', 0x1c1800, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 9.574752665s ago: executing program 0 (id=2141): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f00000006c0)={0xfffffff4, [[0x3, 0x3ff, 0x0, 0xffff, 0x1, 0x5, 0x5cc, 0xc], [0x401, 0x6e0b, 0x2, 0x5fd, 0x7, 0x1000, 0x25, 0x7a64], [0x4000, 0x0, 0x6, 0x9, 0x5, 0x7, 0x9, 0x1]], '\x00', [{0x1, 0x0, 0x1, 0x0, 0x1}, {0x6, 0xa3, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x2, 0x0, 0x1}, {0x7, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x4}, {0x5, 0xa0, 0x0, 0x0, 0x1, 0x1}, {0x401, 0xf49}, {0x2, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x9, 0xff, 0x1}], '\x00', 0x6}) 9.000176021s ago: executing program 4 (id=2142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x0, 0x0, 0xf, 0x7, 0x5, "79ff5871c617339ac1e8758caff3375114576fe106884f4e8fd385ec7bd4c6f243dd3fb117e132e3ad8ebf4fa8ea163063a6fc6af271f22ba39007f4057abd", 0xc}, 0x60) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x29, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 8.987454766s ago: executing program 5 (id=2143): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r2, 0x501, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20004040) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x44100}, 0x0) 8.666663007s ago: executing program 5 (id=2144): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 7.834447909s ago: executing program 1 (id=2145): mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x6, @loopback, 0x5}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r6 = dup2(r5, r5) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) 7.834211863s ago: executing program 4 (id=2146): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 7.711444097s ago: executing program 0 (id=2147): mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x6, @loopback, 0x5}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) 5.537950746s ago: executing program 6 (id=2148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x208101, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.472155604s ago: executing program 1 (id=2149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 1.381591221s ago: executing program 1 (id=2150): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 0s ago: executing program 1 (id=2151): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x8, &(0x7f0000000180)="d857a580", 0x4) kernel console output (not intermixed with test programs): ridge_slave_0) entered disabled state [ 378.474260][ T7856] bridge_slave_0: entered allmulticast mode [ 378.479253][ T7856] bridge_slave_0: entered promiscuous mode [ 378.505138][ T7856] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.505263][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.505499][ T7856] bridge_slave_1: entered allmulticast mode [ 378.511271][ T7856] bridge_slave_1: entered promiscuous mode [ 378.657827][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.657898][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.801990][ T7856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.200098][ T7856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.019258][ T7856] team0: Port device team_slave_0 added [ 384.036442][ T7856] team0: Port device team_slave_1 added [ 386.759137][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.759153][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.759176][ T7856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.761600][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.761613][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.761636][ T7856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.859621][ T8088] ptrace attach of "./syz-executor exec"[5797] was attempted by " [ 390.007646][ T5911] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 390.140421][ T7856] hsr_slave_0: entered promiscuous mode [ 390.141836][ T7856] hsr_slave_1: entered promiscuous mode [ 390.142763][ T7856] debugfs: 'hsr0' already exists in 'hsr' [ 390.142785][ T7856] Cannot create hsr debugfs directory [ 390.456544][ T5911] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 390.456625][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 390.456660][ T5911] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 390.456684][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 390.456708][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 390.490261][ T5911] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 390.490322][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 390.490346][ T5911] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 390.490370][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 390.490394][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 390.491799][ T5911] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 390.491849][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 390.491874][ T5911] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 390.491897][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 390.491920][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 390.502501][ T5911] usb 2-1: string descriptor 0 read error: -22 [ 390.502675][ T5911] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 390.502697][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.574003][ T5911] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 390.755702][ T5911] usb 2-1: USB disconnect, device number 6 [ 395.081193][ T43] bridge_slave_1: left allmulticast mode [ 395.081220][ T43] bridge_slave_1: left promiscuous mode [ 395.081490][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.119304][ T43] bridge_slave_0: left allmulticast mode [ 396.119334][ T43] bridge_slave_0: left promiscuous mode [ 396.119591][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.982201][ T43] bridge_slave_1: left allmulticast mode [ 396.982228][ T43] bridge_slave_1: left promiscuous mode [ 396.982462][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.015701][ T43] bridge_slave_0: left allmulticast mode [ 398.015730][ T43] bridge_slave_0: left promiscuous mode [ 398.015986][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.564380][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.678453][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.902036][ T43] bond0 (unregistering): Released all slaves [ 402.588252][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.688173][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.729494][ T43] bond0 (unregistering): Released all slaves [ 403.164606][ T8184] netlink: 244 bytes leftover after parsing attributes in process `syz.1.600'. [ 405.042351][ T43] hsr_slave_0: left promiscuous mode [ 405.077899][ T43] hsr_slave_1: left promiscuous mode [ 405.078723][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.123832][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.260439][ T43] hsr_slave_0: left promiscuous mode [ 405.278125][ T43] hsr_slave_1: left promiscuous mode [ 405.279123][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.589752][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.599065][ T43] team0 (unregistering): Port device team_slave_1 removed [ 407.789034][ T43] team0 (unregistering): Port device team_slave_0 removed [ 408.052627][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.054318][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.056278][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.103420][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.104943][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.440543][ T8231] netlink: 244 bytes leftover after parsing attributes in process `syz.4.609'. [ 408.868508][ T8233] ptrace attach of "./syz-executor exec"[5797] was attempted by " [ 410.151757][ T5800] Bluetooth: hci0: command tx timeout [ 410.841084][ T43] team0 (unregistering): Port device team_slave_1 removed [ 411.018545][ T43] team0 (unregistering): Port device team_slave_0 removed [ 412.412900][ T5800] Bluetooth: hci0: command tx timeout [ 414.091667][ T8276] netlink: 244 bytes leftover after parsing attributes in process `syz.0.618'. [ 414.668213][ T5800] Bluetooth: hci0: command tx timeout [ 415.014015][ T8283] Bluetooth: MGMT ver 1.23 [ 415.455969][ T8226] chnl_net:caif_netlink_parms(): no params data found [ 416.008748][ T8295] ptrace attach of "./syz-executor exec"[5806] was attempted by " [ 416.712000][ T61] Bluetooth: hci0: command tx timeout [ 417.037616][ T5800] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 418.781898][ T5800] Bluetooth: hci0: command 0x1407 tx timeout [ 421.577911][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.577999][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.578164][ T8226] bridge_slave_0: entered allmulticast mode [ 421.580482][ T8226] bridge_slave_0: entered promiscuous mode [ 421.621131][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.621243][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.621463][ T8226] bridge_slave_1: entered allmulticast mode [ 421.623419][ T8226] bridge_slave_1: entered promiscuous mode [ 422.552775][ T8339] ptrace attach of "./syz-executor exec"[5797] was attempted by " [ 423.196987][ T8226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.332377][ T8226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.789158][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 423.797831][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 423.800168][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 423.802499][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 423.803227][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 424.436000][ T8226] team0: Port device team_slave_0 added [ 429.856742][ T5800] Bluetooth: hci5: command tx timeout [ 430.554018][ T8372] comedi comedi0: Minor 3 could not be opened [ 431.339939][ T8226] team0: Port device team_slave_1 added [ 431.447606][ T8381] ptrace attach of "./syz-executor exec"[5797] was attempted by ""[8381] [ 431.990004][ T61] Bluetooth: hci5: command tx timeout [ 432.269865][ T43] bridge_slave_1: left allmulticast mode [ 432.269899][ T43] bridge_slave_1: left promiscuous mode [ 432.270146][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.512190][ T43] bridge_slave_0: left allmulticast mode [ 432.512219][ T43] bridge_slave_0: left promiscuous mode [ 432.514349][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.174832][ T61] Bluetooth: hci5: command tx timeout [ 435.049947][ T8413] ptrace attach of "./syz-executor exec"[5797] was attempted by ""[8413] [ 435.874795][ T8419] comedi comedi0: Minor 3 could not be opened [ 436.217775][ T61] Bluetooth: hci5: command tx timeout [ 436.394037][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.488175][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.554248][ T43] bond0 (unregistering): Released all slaves [ 436.675328][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.675344][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.675367][ T8226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.707781][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.707796][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.707819][ T8226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.134739][ T61] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 437.145348][ T8437] syz_tun: entered allmulticast mode [ 437.697680][ T43] hsr_slave_0: left promiscuous mode [ 437.742241][ T43] hsr_slave_1: left promiscuous mode [ 437.761441][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.799358][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.042423][ T8463] 9pnet_fd: Insufficient options for proto=fd [ 439.250069][ T8466] netlink: 244 bytes leftover after parsing attributes in process `syz.0.664'. [ 440.417677][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.483308][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.013611][ T43] team0 (unregistering): Port device team_slave_1 removed [ 441.148919][ T43] team0 (unregistering): Port device team_slave_0 removed [ 441.716366][ T8226] hsr_slave_0: entered promiscuous mode [ 441.736221][ T8226] hsr_slave_1: entered promiscuous mode [ 441.742675][ T8226] debugfs: 'hsr0' already exists in 'hsr' [ 441.742702][ T8226] Cannot create hsr debugfs directory [ 443.368795][ T8489] syzkaller0: entered promiscuous mode [ 443.368825][ T8489] syzkaller0: entered allmulticast mode [ 444.288268][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 444.875653][ T8226] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 444.954159][ T8226] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 445.276935][ T8522] netlink: 244 bytes leftover after parsing attributes in process `syz.1.676'. [ 445.408536][ T8226] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 445.692411][ T8226] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 445.732535][ T43] bridge_slave_1: left allmulticast mode [ 445.732564][ T43] bridge_slave_1: left promiscuous mode [ 445.732811][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.939213][ T43] bridge_slave_0: left allmulticast mode [ 445.939240][ T43] bridge_slave_0: left promiscuous mode [ 445.939650][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.818953][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.959723][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.241382][ T43] bond0 (unregistering): Released all slaves [ 448.316509][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.316648][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.316898][ T8345] bridge_slave_0: entered allmulticast mode [ 448.333544][ T8345] bridge_slave_0: entered promiscuous mode [ 448.786139][ T8570] netlink: 76 bytes leftover after parsing attributes in process `syz.0.682'. [ 448.868633][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.869279][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.910840][ T8345] bridge_slave_1: entered allmulticast mode [ 449.025948][ T8345] bridge_slave_1: entered promiscuous mode [ 450.111464][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.185342][ T43] hsr_slave_0: left promiscuous mode [ 451.199296][ T43] hsr_slave_1: left promiscuous mode [ 451.200253][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.250154][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.288173][ T43] team0 (unregistering): Port device team_slave_1 removed [ 452.738550][ T43] team0 (unregistering): Port device team_slave_0 removed [ 454.591156][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.729793][ T8345] team0: Port device team_slave_0 added [ 455.753597][ T8345] team0: Port device team_slave_1 added [ 456.145138][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.145154][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.145177][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.158255][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.158272][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.158295][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.738740][ T8345] hsr_slave_0: entered promiscuous mode [ 456.740150][ T8345] hsr_slave_1: entered promiscuous mode [ 456.741237][ T8345] debugfs: 'hsr0' already exists in 'hsr' [ 456.741261][ T8345] Cannot create hsr debugfs directory [ 459.148789][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.290109][ T8226] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.352949][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.353437][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.275168][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.275320][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.652088][ T8345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 461.950163][ T8345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 462.039472][ T8345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 462.346736][ T8345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 462.357781][ T8692] netlink: 244 bytes leftover after parsing attributes in process `syz.1.708'. [ 462.933471][ T8345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.016058][ T8345] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.085294][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.085459][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.136378][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.136525][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.245217][ T8226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.878650][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.324903][ T8226] veth0_vlan: entered promiscuous mode [ 466.408253][ T8226] veth1_vlan: entered promiscuous mode [ 466.650634][ T8226] veth0_macvtap: entered promiscuous mode [ 466.686367][ T8226] veth1_macvtap: entered promiscuous mode [ 467.451547][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.513453][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.562050][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.563204][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.563986][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.564360][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.147807][ T8345] veth0_vlan: entered promiscuous mode [ 469.210953][ T8345] veth1_vlan: entered promiscuous mode [ 469.261721][ T8345] veth0_macvtap: entered promiscuous mode [ 469.280782][ T8345] veth1_macvtap: entered promiscuous mode [ 469.312943][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.326262][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.521953][ T5962] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.526202][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.526614][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.526997][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.565918][ T8780] netlink: 244 bytes leftover after parsing attributes in process `syz.0.717'. [ 471.415693][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.426199][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.427850][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.452762][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.453624][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 472.058895][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.058915][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.526695][ T61] Bluetooth: hci0: command tx timeout [ 473.623194][ T68] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.660528][ T8839] netlink: 244 bytes leftover after parsing attributes in process `syz.4.728'. [ 475.162239][ T68] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.594780][ T61] Bluetooth: hci0: command tx timeout [ 478.992014][ T61] Bluetooth: hci0: command tx timeout [ 479.562404][ T68] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.603426][ T8856] binder: 8853:8856 ioctl c0306201 200000000680 returned -14 [ 479.872195][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.872214][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.161278][ T68] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.107814][ T61] Bluetooth: hci0: command tx timeout [ 484.412559][ T68] bridge_slave_1: left allmulticast mode [ 484.412587][ T68] bridge_slave_1: left promiscuous mode [ 484.412841][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.372359][ T68] bridge_slave_0: left allmulticast mode [ 485.372392][ T68] bridge_slave_0: left promiscuous mode [ 485.372635][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.251716][ T8968] 9pnet_fd: Insufficient options for proto=fd [ 492.177089][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.494221][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.602485][ T68] bond0 (unregistering): Released all slaves [ 492.898142][ T8795] chnl_net:caif_netlink_parms(): no params data found [ 494.408363][ T68] hsr_slave_0: left promiscuous mode [ 494.443398][ T68] hsr_slave_1: left promiscuous mode [ 494.444425][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.444454][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.621956][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.621983][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.782090][ T68] veth1_macvtap: left promiscuous mode [ 494.782206][ T68] veth0_macvtap: left promiscuous mode [ 494.782476][ T68] veth1_vlan: left promiscuous mode [ 494.782659][ T68] veth0_vlan: left promiscuous mode [ 498.893163][ T9032] 9pnet_fd: Insufficient options for proto=fd [ 499.487930][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 499.638598][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 499.644350][ T9] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 499.644366][ T9] usb 7-1: config 0 has no interface number 0 [ 499.644430][ T9] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.644444][ T9] usb 7-1: config 0 interface 85 has no altsetting 0 [ 499.646776][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 499.646792][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.646802][ T9] usb 7-1: Product: syz [ 499.646809][ T9] usb 7-1: Manufacturer: syz [ 499.646816][ T9] usb 7-1: SerialNumber: syz [ 500.068186][ T68] team0 (unregistering): Port device team_slave_1 removed [ 500.132907][ T9] usb 7-1: config 0 descriptor?? [ 500.390549][ T9042] rdma_op ffff88805dadfa70 conn xmit_rdma 0000000000000000 [ 500.475495][ T68] team0 (unregistering): Port device team_slave_0 removed [ 500.779962][ T9] appletouch 7-1:0.85: Geyser mode initialized. [ 500.789214][ T9] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input5 [ 501.182713][ T9] usb 7-1: USB disconnect, device number 2 [ 501.182820][ C0] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 501.319610][ T9] appletouch 7-1:0.85: input: appletouch disconnected [ 501.629937][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.630008][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.042151][ T9065] 9pnet_fd: Insufficient options for proto=fd [ 506.795016][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.796904][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.799904][ T8795] bridge_slave_0: entered allmulticast mode [ 506.802540][ T8795] bridge_slave_0: entered promiscuous mode [ 506.820455][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.820581][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.820775][ T8795] bridge_slave_1: entered allmulticast mode [ 506.826970][ T8795] bridge_slave_1: entered promiscuous mode [ 508.501234][ T8795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.633099][ T8795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.532352][ T9114] rdma_op ffff88802384ba70 conn xmit_rdma 0000000000000000 [ 510.563949][ T9116] 9pnet_fd: Insufficient options for proto=fd [ 510.964859][ T8795] team0: Port device team_slave_0 added [ 510.976125][ T8795] team0: Port device team_slave_1 added [ 512.756165][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.756182][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.756206][ T8795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.328565][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.328583][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.328608][ T8795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.447104][ T8795] hsr_slave_0: entered promiscuous mode [ 515.449076][ T8795] hsr_slave_1: entered promiscuous mode [ 515.455330][ T8795] debugfs: 'hsr0' already exists in 'hsr' [ 515.455356][ T8795] Cannot create hsr debugfs directory [ 516.300017][ T9156] rdma_op ffff888060633a70 conn xmit_rdma 0000000000000000 [ 516.814080][ T61] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 518.990107][ T9202] rdma_op ffff88804ff32270 conn xmit_rdma 0000000000000000 [ 519.698216][ T61] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 523.398758][ T9252] rdma_op ffff88805d644270 conn xmit_rdma 0000000000000000 [ 523.691246][ T61] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 523.767207][ T8795] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 523.897007][ T8795] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 525.095171][ T8795] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 525.338044][ T8795] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 525.457974][ T9271] syz_tun: entered allmulticast mode [ 525.822481][ T8795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.901425][ T8795] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.950637][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.950855][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.000168][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.000315][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.436015][ T8795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.796916][ T8795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.953974][ T61] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 533.768258][ T61] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 534.056990][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.103339][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.104553][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.105749][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.138250][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 534.647705][ T5911] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 535.286894][ T5911] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 535.286951][ T5911] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.286992][ T5911] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 535.287014][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.375065][ T5911] usbtmc 7-1:16.0: bulk endpoints not found [ 536.297595][ T5800] Bluetooth: hci0: command tx timeout [ 538.019021][ T5876] usb 7-1: USB disconnect, device number 3 [ 538.737706][ T5800] Bluetooth: hci0: command tx timeout [ 539.458040][ T5800] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 539.500055][ T9413] netlink: 244 bytes leftover after parsing attributes in process `syz.6.864'. [ 539.952319][ T1402] bridge_slave_1: left allmulticast mode [ 539.952347][ T1402] bridge_slave_1: left promiscuous mode [ 539.952605][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.220229][ T1402] bridge_slave_0: left allmulticast mode [ 540.220257][ T1402] bridge_slave_0: left promiscuous mode [ 540.226890][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.902064][ T5800] Bluetooth: hci0: command tx timeout [ 542.937594][ T5800] Bluetooth: hci0: command tx timeout [ 544.344300][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.369422][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.530968][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.441204][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.945488][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.683291][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.185508][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.662523][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 549.702408][ T9505] comedi comedi0: Minor 3 could not be opened [ 549.719632][ T1402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.891220][ T1402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.969655][ T1402] bond0 (unregistering): Released all slaves [ 550.378315][ T9368] chnl_net:caif_netlink_parms(): no params data found [ 560.159062][ T1402] hsr_slave_0: left promiscuous mode [ 560.267641][ T1402] hsr_slave_1: left promiscuous mode [ 560.268772][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.990909][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.953721][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.953841][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.736341][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.396196][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.528758][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.412589][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.328898][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.508484][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.550787][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.746075][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.118120][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.440291][ T1402] team0 (unregistering): Port device team_slave_1 removed [ 569.710273][ T1402] team0 (unregistering): Port device team_slave_0 removed [ 571.517776][ T9614] 9pnet: Could not find request transport: fd0x0000000000000003 [ 574.932822][ T9639] rdma_op ffff88805c391270 conn xmit_rdma 0000000000000000 [ 576.917332][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.917731][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.917943][ T9368] bridge_slave_0: entered allmulticast mode [ 576.920548][ T9368] bridge_slave_0: entered promiscuous mode [ 576.952546][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.952687][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.952916][ T9368] bridge_slave_1: entered allmulticast mode [ 576.992018][ T9368] bridge_slave_1: entered promiscuous mode [ 578.118308][ T9673] rdma_op ffff88805abb0270 conn xmit_rdma 0000000000000000 [ 579.911474][ T9368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.915652][ T9368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.894039][ T9686] binder_alloc: 9684: binder_alloc_buf, no vma [ 586.295559][ T9368] team0: Port device team_slave_0 added [ 586.314097][ T9368] team0: Port device team_slave_1 added [ 594.086190][ T9759] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 601.738961][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 601.752273][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 601.760641][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 601.762041][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 601.763150][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 604.170378][ T61] Bluetooth: hci0: command tx timeout [ 605.657390][ T12] bridge_slave_1: left allmulticast mode [ 605.657418][ T12] bridge_slave_1: left promiscuous mode [ 605.661700][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.748687][ T12] bridge_slave_0: left allmulticast mode [ 605.748707][ T12] bridge_slave_0: left promiscuous mode [ 605.748895][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.322591][ T9839] Bluetooth: MGMT ver 1.23 [ 606.349126][ T5800] Bluetooth: hci0: command tx timeout [ 606.599188][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.988183][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.180813][ T12] bond0 (unregistering): Released all slaves [ 608.377593][ T61] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 608.378512][ T61] Bluetooth: hci0: command 0x040f tx timeout [ 608.939792][ T9862] 9pnet_fd: Insufficient options for proto=fd [ 610.457570][ T5800] Bluetooth: hci0: command 0x040f tx timeout [ 612.094923][ T12] team0 (unregistering): Port device team_slave_1 removed [ 612.538793][ T61] Bluetooth: hci0: command 0x040f tx timeout [ 612.544068][ T5800] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 612.673560][ T12] team0 (unregistering): Port device team_slave_0 removed [ 617.721355][ T5800] Bluetooth: hci0: command 0x040f tx timeout [ 618.699987][ T9785] chnl_net:caif_netlink_parms(): no params data found [ 620.003255][ T9785] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.003475][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.003706][ T9785] bridge_slave_0: entered allmulticast mode [ 620.081005][ T9785] bridge_slave_0: entered promiscuous mode [ 620.108093][ T9785] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.108235][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.116571][ T9785] bridge_slave_1: entered allmulticast mode [ 620.152711][ T9785] bridge_slave_1: entered promiscuous mode [ 620.709280][ T9949] netlink: 244 bytes leftover after parsing attributes in process `syz.6.986'. [ 621.075939][ T9785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.088589][ T9785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.436086][ T9785] team0: Port device team_slave_0 added [ 621.477665][ T9785] team0: Port device team_slave_1 added [ 621.777821][ T9785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.777838][ T9785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.777861][ T9785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.844163][ T9785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.844183][ T9785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.844209][ T9785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.526020][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.526091][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.633453][ T9785] hsr_slave_0: entered promiscuous mode [ 625.688216][ T9785] hsr_slave_1: entered promiscuous mode [ 625.689239][ T9785] debugfs: 'hsr0' already exists in 'hsr' [ 625.689263][ T9785] Cannot create hsr debugfs directory [ 625.887582][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 626.040009][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 626.040069][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 626.040094][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.040117][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 626.040142][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 626.041541][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 626.041591][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 626.041616][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.041640][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 626.041663][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 626.043167][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 626.043242][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 626.043266][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.043289][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 626.043312][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 626.167604][ T9] usb 1-1: string descriptor 0 read error: -22 [ 626.167754][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 626.167775][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.292157][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 626.600145][ T9] usb 1-1: USB disconnect, device number 8 [ 629.304893][T10015] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1004'. [ 637.086873][T10067] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1014'. [ 639.682912][T10085] comedi comedi0: Minor 3 could not be opened [ 640.430740][ T9785] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 640.540739][ T9785] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 640.707590][ T9408] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 640.870693][ T9408] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 640.870868][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 640.870894][ T9408] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 640.870916][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 641.807726][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 641.815563][ T9785] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 642.476087][ T9408] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 642.476145][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 642.476170][ T9408] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 642.476194][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 642.476218][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 642.477991][ T9408] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 642.478048][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 642.478073][ T9408] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 642.478096][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 642.478120][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 642.482131][ T9408] usb 2-1: string descriptor 0 read error: -22 [ 642.482280][ T9408] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 642.482305][ T9408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.642501][ T9408] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 643.126574][ T9785] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 643.983036][ T9785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.089796][ T9785] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.101986][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.115223][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.170796][ T1402] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.175477][ T1402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.416384][ T1563] usb 2-1: USB disconnect, device number 7 [ 646.129652][ T9785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.659729][ T5800] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 647.675331][ T5800] Bluetooth: hci0: command 0x040f tx timeout [ 649.534529][ T9785] veth0_vlan: entered promiscuous mode [ 649.546067][ T9785] veth1_vlan: entered promiscuous mode [ 649.713612][ T9785] veth0_macvtap: entered promiscuous mode [ 649.736694][ T9785] veth1_macvtap: entered promiscuous mode [ 649.884632][ T9785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.908575][ T9785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.938819][ T3479] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.942920][ T7654] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.000952][ T7654] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.072413][ T1477] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.735479][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.735499][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.875662][ T1301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.875682][ T1301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.077558][ T5790] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 651.230288][ T5790] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 651.230354][ T5790] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 651.230381][ T5790] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 651.230405][ T5790] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 651.230430][ T5790] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 651.232257][ T5790] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 651.232308][ T5790] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 651.232336][ T5790] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 651.232360][ T5790] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 651.232385][ T5790] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 651.233793][ T5790] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 651.233845][ T5790] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 651.233871][ T5790] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 651.233902][ T5790] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 651.233927][ T5790] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 651.872022][ T5790] usb 2-1: string descriptor 0 read error: -22 [ 651.872200][ T5790] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 651.872223][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.054714][ T5790] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 652.214067][ T5790] usb 2-1: USB disconnect, device number 8 [ 652.332456][T10204] gfs2: error -5 reading superblock [ 652.370681][T10208] wg1 speed is unknown, defaulting to 1000 [ 652.370778][T10208] wg1 speed is unknown, defaulting to 1000 [ 652.372121][T10208] wg1 speed is unknown, defaulting to 1000 [ 652.457031][T10208] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 652.651025][T10208] wg1 speed is unknown, defaulting to 1000 [ 652.666194][T10208] wg1 speed is unknown, defaulting to 1000 [ 652.716220][T10208] wg1 speed is unknown, defaulting to 1000 [ 652.720392][T10208] wg1 speed is unknown, defaulting to 1000 [ 652.757641][T10208] wg1 speed is unknown, defaulting to 1000 [ 654.858124][ T5800] Bluetooth: hci0: command 0x040f tx timeout [ 654.862228][T10136] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 658.737779][ T9] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 658.931434][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 658.931468][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 658.931482][ T9] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.931495][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 658.931508][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 658.948850][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 658.948903][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 658.948928][ T9] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.948950][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 658.948974][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 659.119400][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 659.119437][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 659.119450][ T9] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.119463][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 659.119475][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 659.431423][ T9] usb 7-1: string descriptor 0 read error: -22 [ 659.431569][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 659.431590][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.490772][ T9] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 659.672032][ T9] usb 7-1: USB disconnect, device number 4 [ 661.587731][ T5800] Bluetooth: hci0: command 0x040f tx timeout [ 661.587795][T10136] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 662.425985][T10324] comedi comedi0: Minor 3 could not be opened [ 667.739550][T10372] binder: BINDER_SET_CONTEXT_MGR already set [ 667.739564][T10372] binder: 10371:10372 ioctl 4018620d 2000000002c0 returned -16 [ 668.547580][T10382] fuse: Bad value for 'fd' [ 673.960077][T10431] binder: BINDER_SET_CONTEXT_MGR already set [ 673.960093][T10431] binder: 10429:10431 ioctl 4018620d 2000000002c0 returned -16 [ 674.352095][T10436] fuse: Bad value for 'fd' [ 680.307585][ T5953] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 680.479244][ T5953] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 680.479264][ T5953] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.479286][ T5953] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 680.479298][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.877514][ T5953] usb 7-1: usb_control_msg returned -32 [ 680.877559][ T5953] usbtmc 7-1:16.0: can't read capabilities [ 680.938630][ T5953] usb 7-1: USB disconnect, device number 5 [ 681.332581][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1095'. [ 681.393683][T10494] rdma_op ffff88803adbc270 conn xmit_rdma 0000000000000000 [ 682.430893][T10500] binder: BINDER_SET_CONTEXT_MGR already set [ 682.430909][T10500] binder: 10499:10500 ioctl 4018620d 2000000002c0 returned -16 [ 685.874458][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.874502][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.328518][ T9] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 688.180011][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 688.180069][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 688.180096][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 688.180121][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 688.180145][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 688.187274][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 688.187335][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 688.187361][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 688.187384][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 688.206900][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 689.548786][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 689.548870][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 689.548896][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.548919][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 689.548943][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 690.062899][ T9] usb 2-1: string descriptor 0 read error: -22 [ 690.063051][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 690.063073][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.190110][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 690.348885][ T5810] usb 2-1: USB disconnect, device number 9 [ 691.584958][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.587080][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.397926][ T44] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 697.311436][ T44] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 697.311456][ T44] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.311480][ T44] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 697.311492][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.731492][ T44] usb 6-1: GET_CAPABILITIES returned 0 [ 697.731521][ T44] usbtmc 6-1:16.0: can't read capabilities [ 697.816265][T10575] bridge_slave_0: left allmulticast mode [ 697.816292][T10575] bridge_slave_0: left promiscuous mode [ 697.816537][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.948278][ T9] usb 6-1: USB disconnect, device number 2 [ 698.981984][T10575] bridge_slave_1: left allmulticast mode [ 698.982013][T10575] bridge_slave_1: left promiscuous mode [ 698.982253][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.878500][T10575] bond0: (slave bond_slave_0): Releasing backup interface [ 700.186930][T10575] bond0: (slave bond_slave_1): Releasing backup interface [ 700.288726][T10575] team0: Port device team_slave_0 removed [ 700.339610][T10575] team0: Port device team_slave_1 removed [ 700.352190][T10575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.363481][T10575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.410712][T10575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.435007][T10575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.619152][T10575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 702.997599][ T1563] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 704.065618][T10671] ntfs3(nullb0): Primary boot signature is not NTFS. [ 704.193478][T10136] Bluetooth: hci2: ACL packet too small [ 704.207912][T10671] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 704.228277][ T1563] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.228779][ T1563] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 704.228864][ T1563] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.609794][ T1563] usb 7-1: config 0 descriptor?? [ 704.624838][ T1563] pwc: Askey VC010 type 2 USB webcam detected. [ 704.838323][ T1563] pwc: send_video_command error -71 [ 704.838422][ T1563] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 704.838901][ T1563] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 704.962229][ T1563] usb 7-1: USB disconnect, device number 6 [ 705.037603][ T5790] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 705.790282][ T5790] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 705.790300][ T5790] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.790323][ T5790] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 705.790335][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.433924][ T5790] usb 1-1: GET_CAPABILITIES returned 0 [ 706.433975][ T5790] usbtmc 1-1:16.0: can't read capabilities [ 706.668862][T10697] comedi comedi0: Minor 3 could not be opened [ 706.670409][ T9479] usb 1-1: USB disconnect, device number 9 [ 709.109041][T10705] syz.5.1151 (10705): drop_caches: 2 [ 709.904346][ T1563] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 712.757655][ T1563] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 712.757719][ T1563] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 712.757745][ T1563] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 712.757768][ T1563] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 712.757793][ T1563] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 712.759258][ T1563] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 712.759312][ T1563] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 712.759338][ T1563] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 712.759363][ T1563] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 712.759396][ T1563] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 712.760710][ T1563] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 712.760763][ T1563] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 712.760789][ T1563] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 712.760812][ T1563] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 712.760837][ T1563] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 713.002596][ T1563] usb 1-1: string descriptor 0 read error: -22 [ 713.002747][ T1563] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 713.002771][ T1563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.154856][ T1563] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 713.526263][ T1563] usb 1-1: USB disconnect, device number 10 [ 715.554269][T10761] comedi comedi0: Minor 3 could not be opened [ 723.443225][ T5790] IPVS: starting estimator thread 0... [ 723.526988][T10806] gfs2: error -5 reading superblock [ 723.600001][T10803] IPVS: using max 10 ests per chain, 24000 per kthread [ 725.195614][T10822] comedi comedi0: Minor 3 could not be opened [ 733.312143][T10877] gfs2: error -5 reading superblock [ 736.207676][ T5810] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 736.359174][ T5810] usb 7-1: Using ep0 maxpacket: 8 [ 736.372068][ T5810] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 736.372128][ T5810] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 736.372149][ T5810] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 736.372172][ T5810] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 736.372194][ T5810] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.372234][ T5810] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 736.372255][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.507579][ T1563] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 736.675096][ T5810] usb 7-1: usb_control_msg returned -32 [ 736.675140][ T5810] usbtmc 7-1:16.0: can't read capabilities [ 736.676642][ T1563] usb 1-1: unable to get BOS descriptor or descriptor too short [ 736.708415][ T1563] usb 1-1: config 9 has an invalid interface number: 198 but max is 0 [ 736.708440][ T1563] usb 1-1: config 9 has no interface number 0 [ 736.708472][ T1563] usb 1-1: config 9 interface 198 has no altsetting 0 [ 736.750954][ T1563] usb 1-1: string descriptor 0 read error: -22 [ 736.751103][ T1563] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 736.751126][ T1563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.809561][ T1563] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 736.811575][ T1563] dvb-usb: bulk message failed: -22 (3/0) [ 736.888417][ T1563] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 736.889778][ T1563] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 736.889945][ T1563] usb 1-1: media controller created [ 736.984802][ T1563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 737.155679][T10914] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 737.170022][ T9] usb 7-1: USB disconnect, device number 7 [ 737.486813][ T1563] DVB: Unable to find symbol mt352_attach() [ 737.486835][ T1563] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 737.489233][ T1563] dvb-usb: bulk message failed: -22 (3/0) [ 737.507652][ T1563] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 737.527649][ T1563] usb 1-1: USB disconnect, device number 11 [ 737.805832][ T1563] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 738.012518][T10920] gfs2: error -5 reading superblock [ 738.698746][T10929] syzkaller0: entered promiscuous mode [ 738.698774][T10929] syzkaller0: entered allmulticast mode [ 742.016722][T10952] gfs2: error -5 reading superblock [ 743.083331][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 743.260405][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.260424][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.260446][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 743.260458][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.542878][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 743.542928][ T9] usbtmc 2-1:16.0: can't read capabilities [ 744.904916][ T9] usb 2-1: USB disconnect, device number 10 [ 746.512692][T10987] syzkaller0: entered promiscuous mode [ 746.512717][T10987] syzkaller0: entered allmulticast mode [ 746.577600][ T1563] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 746.732993][ T1563] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 746.733011][ T1563] usb 6-1: config 0 interface 0 has no altsetting 0 [ 746.762118][ T1563] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 746.762136][ T1563] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 746.762147][ T1563] usb 6-1: Product: syz [ 746.762153][ T1563] usb 6-1: Manufacturer: syz [ 746.762160][ T1563] usb 6-1: SerialNumber: syz [ 746.766067][ T1563] usb 6-1: config 0 descriptor?? [ 746.933867][ T1563] usb 6-1: selecting invalid altsetting 0 [ 747.450966][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.452363][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.386837][ T5810] usb 6-1: USB disconnect, device number 3 [ 753.227594][ T5790] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 753.380185][ T5790] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 753.380216][ T5790] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.380260][ T5790] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 753.380283][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.444492][T11037] syzkaller0: entered promiscuous mode [ 753.444518][T11037] syzkaller0: entered allmulticast mode [ 754.454057][ T5790] usb 1-1: GET_CAPABILITIES returned 0 [ 754.454107][ T5790] usbtmc 1-1:16.0: can't read capabilities [ 754.997591][ T9] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 755.048937][ T5810] usb 1-1: USB disconnect, device number 12 [ 757.282486][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 757.282544][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 757.282571][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 757.282596][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 757.282621][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 757.284873][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 757.284949][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 757.284977][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 757.285000][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 757.285025][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 757.519876][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 757.519936][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 757.519963][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 757.519988][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 757.520012][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 757.585046][ T9] usb 6-1: string descriptor 0 read error: -22 [ 757.585616][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 757.585639][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.812309][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 758.852898][ T9] usb 6-1: USB disconnect, device number 4 [ 758.948429][T11071] fuse: Bad value for 'group_id' [ 758.948448][T11071] fuse: Bad value for 'group_id' [ 760.977905][T11088] No control pipe specified [ 763.307506][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 763.810773][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 763.810803][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.810842][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 763.810863][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.300420][T11104] kAFS: No cell specified [ 764.989396][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 764.989443][ T9] usbtmc 7-1:16.0: can't read capabilities [ 765.211196][ T44] usb 7-1: USB disconnect, device number 8 [ 765.233931][T11108] syzkaller0: entered promiscuous mode [ 765.233956][T11108] syzkaller0: entered allmulticast mode [ 765.757570][ T5790] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 765.925585][T11121] No control pipe specified [ 765.947469][ T44] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 766.060663][ T5790] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 766.060722][ T5790] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 766.060750][ T5790] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 766.060774][ T5790] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 766.060799][ T5790] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 766.066700][ T5790] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 766.066761][ T5790] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 766.066786][ T5790] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 766.066810][ T5790] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 766.066835][ T5790] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 766.069946][ T5790] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 766.070007][ T5790] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 766.070033][ T5790] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 766.070057][ T5790] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 766.070081][ T5790] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 766.079727][ T5790] usb 1-1: string descriptor 0 read error: -22 [ 766.079883][ T5790] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 766.079905][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.115080][ T5790] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 767.921271][ T9408] usb 1-1: USB disconnect, device number 13 [ 768.290113][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 768.316994][ T44] usb 5-1: config 9 has an invalid interface number: 198 but max is 0 [ 768.317043][ T44] usb 5-1: config 9 has no interface number 0 [ 768.317250][ T44] usb 5-1: config 9 interface 198 has no altsetting 0 [ 768.469438][ T5953] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 768.519135][ T44] usb 5-1: string descriptor 0 read error: -22 [ 768.520376][ T44] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 768.520445][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.867532][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 768.873751][ T5953] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.873827][ T5953] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.873852][ T5953] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.873874][ T5953] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.873915][ T5953] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 768.873984][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.961328][ T44] usb 5-1: can't set config #9, error -71 [ 768.964594][ T44] usb 5-1: USB disconnect, device number 4 [ 769.347631][ T5953] usb 6-1: GET_CAPABILITIES returned 0 [ 769.347681][ T5953] usbtmc 6-1:16.0: can't read capabilities [ 769.493648][T11144] afs: Unknown parameter '`' [ 770.347658][ T44] usb 6-1: USB disconnect, device number 5 [ 771.455431][T11161] No control pipe specified [ 772.471645][T11168] afs: Unknown parameter '' [ 777.767566][ T5790] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 777.857533][ T5883] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 777.923517][ T5790] usb 2-1: unable to get BOS descriptor or descriptor too short [ 777.925041][ T5790] usb 2-1: config 9 has an invalid interface number: 198 but max is 0 [ 777.925064][ T5790] usb 2-1: config 9 has no interface number 0 [ 777.925096][ T5790] usb 2-1: config 9 interface 198 has no altsetting 0 [ 777.964067][ T5790] usb 2-1: string descriptor 0 read error: -22 [ 777.964219][ T5790] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 777.964243][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.040017][ T5883] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.040043][ T5883] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 778.040063][ T5883] usb 1-1: config 1 has no interface number 0 [ 778.040110][ T5883] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.046855][ T5883] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 778.046883][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.046910][ T5883] usb 1-1: Product: syz [ 778.046924][ T5883] usb 1-1: Manufacturer: syz [ 778.046937][ T5883] usb 1-1: SerialNumber: syz [ 778.194953][ T5790] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 778.195006][ T5790] dvb-usb: bulk message failed: -22 (3/0) [ 778.241970][ T5790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 778.265145][ T5790] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 778.265206][ T5790] usb 2-1: media controller created [ 778.283926][ T5883] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 778.283984][ T5883] cdc_ncm 1-1:1.1: bind() failure [ 779.210162][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.062157][ T5790] DVB: Unable to find symbol mt352_attach() [ 780.062173][ T5790] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 780.063191][ T5790] dvb-usb: bulk message failed: -22 (3/0) [ 780.967448][ T5790] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 781.000508][ T5953] usb 1-1: USB disconnect, device number 14 [ 781.020250][ T5790] usb 2-1: USB disconnect, device number 11 [ 781.122848][T11193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.182715][T11193] bond0: (slave rose0): Enslaving as an active interface with an up link [ 781.390902][ T5790] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 781.637793][T11213] afs: Unknown parameter '' [ 786.289943][T11235] comedi comedi0: Minor 3 could not be opened [ 787.062824][T11244] netlink: 'syz.1.1306': attribute type 1 has an invalid length. [ 787.062845][T11244] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1306'. [ 787.183799][T11240] bridge_slave_0: left allmulticast mode [ 787.183831][T11240] bridge_slave_0: left promiscuous mode [ 787.184088][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.406168][T11255] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 787.538443][ T5883] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 787.920630][ T5883] usb 6-1: unable to get BOS descriptor or descriptor too short [ 787.924123][ T5883] usb 6-1: config 9 has an invalid interface number: 198 but max is 0 [ 787.924148][ T5883] usb 6-1: config 9 has no interface number 0 [ 787.924181][ T5883] usb 6-1: config 9 interface 198 has no altsetting 0 [ 788.471466][ T5883] usb 6-1: string descriptor 0 read error: -22 [ 788.471610][ T5883] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 788.471632][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.502978][ T5883] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 788.503029][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 788.524094][T11240] bridge_slave_1: left allmulticast mode [ 788.524121][T11240] bridge_slave_1: left promiscuous mode [ 788.524350][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.597156][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 788.598653][ T5883] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 788.598711][ T5883] usb 6-1: media controller created [ 788.696930][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 788.811536][ T5883] DVB: Unable to find symbol mt352_attach() [ 788.811553][ T5883] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 788.812413][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 788.827507][ T5883] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 788.875766][ T5953] usb 6-1: USB disconnect, device number 6 [ 788.938589][T11240] bond0: (slave bond_slave_0): Releasing backup interface [ 788.998301][T11240] bond0: (slave bond_slave_1): Releasing backup interface [ 789.006403][ T5953] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 789.075491][T11240] team0: Port device team_slave_0 removed [ 789.110203][T11240] team0: Port device team_slave_1 removed [ 789.111253][T11240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.111279][T11240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.150538][T11240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.150565][T11240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.173643][T11240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 789.348235][T11269] siw: device registration error -23 [ 791.437110][T11302] comedi comedi0: Minor 3 could not be opened [ 795.378712][T11326] siw: device registration error -23 [ 798.577540][ T9479] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 798.847448][ T9479] usb 7-1: Using ep0 maxpacket: 32 [ 798.849877][ T9479] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 798.849902][ T9479] usb 7-1: config 0 has no interface number 0 [ 798.852959][ T9479] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 798.852985][ T9479] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.853004][ T9479] usb 7-1: Product: syz [ 798.853018][ T9479] usb 7-1: Manufacturer: syz [ 798.853031][ T9479] usb 7-1: SerialNumber: syz [ 798.940945][ T9479] usb 7-1: config 0 descriptor?? [ 799.938650][ T9479] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 799.938679][ T9479] usb 7-1: selecting invalid altsetting 1 [ 799.938694][ T9479] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 799.964119][ T9479] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 799.964825][ T9479] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 799.964895][ T9479] usb 7-1: media controller created [ 801.070475][ T9479] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 801.163609][ T9479] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 801.163679][ T9479] zl10353_read_register: readreg error (reg=127, ret==-71) [ 801.164167][ T9479] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 803.482352][ T9479] usb 7-1: USB disconnect, device number 9 [ 804.653327][T11413] afs: Unknown parameter '`' [ 805.557496][ T5883] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 806.738316][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.738373][ T5883] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 806.738415][ T5883] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 806.738436][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.131451][ T5883] usb 6-1: config 0 descriptor?? [ 807.280912][ T5883] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 808.512783][ T5953] usb 6-1: USB disconnect, device number 7 [ 808.705417][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.010025][T11469] afs: Unknown parameter '`' [ 816.985285][T11536] afs: Unknown parameter 'dy' [ 818.270941][T11558] comedi comedi0: Minor 3 could not be opened [ 820.853090][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.313300][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.844718][T11597] afs: Unknown parameter 'dy' [ 824.213515][ C0] vkms_vblank_simulate: vblank timer overrun [ 828.717489][ T5883] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 828.889892][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.889917][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 828.889936][ T5883] usb 5-1: config 1 has no interface number 0 [ 828.889981][ T5883] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 828.892969][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.892996][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.893014][ T5883] usb 5-1: Product: syz [ 828.893028][ T5883] usb 5-1: Manufacturer: syz [ 828.893041][ T5883] usb 5-1: SerialNumber: syz [ 828.976746][ T5883] cdc_ncm 5-1:1.1: skipping garbage [ 828.976766][ T5883] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 828.976806][ T5883] cdc_ncm 5-1:1.1: bind() failure [ 830.773912][ T9408] usb 5-1: USB disconnect, device number 5 [ 831.950719][T11704] fuse: Unknown parameter 'group_id00000000000000000000' [ 837.107443][T11735] comedi comedi0: Minor 3 could not be opened [ 837.687926][T11743] fuse: Unknown parameter 'group_id00000000000000000000' [ 844.534102][T11767] comedi comedi0: Minor 3 could not be opened [ 849.580926][T11842] comedi comedi0: Minor 3 could not be opened [ 851.347629][ T9408] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 851.587538][ T9408] usb 7-1: Using ep0 maxpacket: 16 [ 851.592043][ T9408] usb 7-1: config 0 has an invalid interface number: 65 but max is 0 [ 851.592069][ T9408] usb 7-1: config 0 has no interface number 0 [ 851.624343][ T9408] usb 7-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 851.624373][ T9408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.624393][ T9408] usb 7-1: Product: syz [ 851.624413][ T9408] usb 7-1: Manufacturer: syz [ 851.624427][ T9408] usb 7-1: SerialNumber: syz [ 851.680378][ T9408] usb 7-1: config 0 descriptor?? [ 851.708464][ T9408] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 851.870091][T11883] binder: 11882:11883 ioctl 4018620d 0 returned -22 [ 852.319578][T11895] ======================================================= [ 852.319578][T11895] WARNING: The mand mount option has been deprecated and [ 852.319578][T11895] and is ignored by this kernel. Remove the mand [ 852.319578][T11895] option from the mount to silence this warning. [ 852.319578][T11895] ======================================================= [ 852.509281][ T9408] usb 7-1: USB disconnect, device number 10 [ 852.542537][ T9915] udevd[9915]: setting owner of /dev/bus/usb/007/010 to uid=0, gid=0 failed: No such file or directory [ 852.697524][ T9479] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 852.868409][ T9479] usb 5-1: Using ep0 maxpacket: 32 [ 852.872551][ T9479] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 852.872594][ T9479] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 852.872633][ T9479] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 852.872659][ T9479] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 852.872683][ T9479] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.881917][ T9479] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 852.881945][ T9479] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 852.881965][ T9479] usb 5-1: Product: syz [ 852.881977][ T9479] usb 5-1: Manufacturer: syz [ 852.881991][ T9479] usb 5-1: SerialNumber: syz [ 852.894037][ T9479] usb 5-1: config 0 descriptor?? [ 852.905057][ T9479] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 852.932871][ T9479] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 853.249527][ T9479] usb 5-1: USB disconnect, device number 6 [ 853.265387][ T9479] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 854.720747][T11931] binder: 11929:11931 ioctl 4018620d 0 returned -22 [ 856.564158][T11953] netlink: 'syz.4.1532': attribute type 10 has an invalid length. [ 856.589559][T11953] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 858.695438][ T5790] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 859.291385][ T5790] usb 2-1: Using ep0 maxpacket: 32 [ 859.296642][ T5790] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 859.296666][ T5790] usb 2-1: config 0 has no interface number 0 [ 859.320896][ T5790] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 859.320926][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.320945][ T5790] usb 2-1: Product: syz [ 859.320959][ T5790] usb 2-1: Manufacturer: syz [ 859.320973][ T5790] usb 2-1: SerialNumber: syz [ 859.365703][ T5790] usb 2-1: config 0 descriptor?? [ 859.377504][ T5790] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 859.377530][ T5790] usb 2-1: selecting invalid altsetting 1 [ 859.377545][ T5790] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 859.413280][ T5790] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 859.414802][ T5790] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 859.414857][ T5790] usb 2-1: media controller created [ 859.473186][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 861.044705][ T5790] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 861.044826][ T5790] zl10353_read_register: readreg error (reg=127, ret==-110) [ 861.213392][ T5790] usb 2-1: USB disconnect, device number 12 [ 864.275428][T12033] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 868.623522][T12055] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 868.984180][T12064] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 868.984209][T12064] overlayfs: failed to set xattr on upper [ 868.984217][T12064] overlayfs: ...falling back to redirect_dir=nofollow. [ 868.984225][T12064] overlayfs: ...falling back to index=off. [ 868.984232][T12064] overlayfs: ...falling back to uuid=null. [ 870.145694][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.327418][ T5953] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 870.479453][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 870.508847][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 870.508878][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 870.521627][ T5953] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 870.521655][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.521675][ T5953] usb 2-1: Product: syz [ 870.521689][ T5953] usb 2-1: Manufacturer: syz [ 870.521702][ T5953] usb 2-1: SerialNumber: syz [ 871.864318][ T5953] usb 2-1: config 0 descriptor?? [ 871.871280][ T5953] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 871.871312][ T5953] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 874.357796][T12092] fuse: Bad value for 'fd' [ 874.567277][ T5953] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 874.575571][ T5953] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 875.598535][ T5953] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 875.599028][ T5953] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 875.599500][ T5953] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 875.599914][ T5953] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 875.600415][ T5953] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 875.601264][ T5953] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 875.695460][ T5953] usb 2-1: USB disconnect, device number 13 [ 878.757818][T12135] kAFS: No cell specified [ 878.816142][ T5790] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 879.134446][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1598'. [ 879.147864][T12150] fuse: Invalid rootmode [ 880.672926][T12178] fuse: Invalid rootmode [ 880.737558][ T5953] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 880.919479][ T5953] usb 7-1: unable to get BOS descriptor or descriptor too short [ 880.920576][ T5953] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 880.920611][ T5953] usb 7-1: can't read configurations, error -71 [ 881.990543][T12189] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 881.990826][T12189] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 882.983504][T12193] kAFS: No cell specified [ 883.542199][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1621'. [ 893.574516][T12225] : entered promiscuous mode [ 894.207533][ T9479] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 894.459958][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1641'. [ 894.491484][ T9479] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 894.491541][ T9479] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 894.491567][ T9479] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 894.491591][ T9479] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 894.491615][ T9479] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 894.495219][ T9479] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 894.495270][ T9479] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 894.495294][ T9479] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 894.495316][ T9479] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 894.495339][ T9479] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 894.500087][ T9479] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 894.500163][ T9479] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 894.500188][ T9479] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 894.500213][ T9479] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 894.500235][ T9479] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 894.664943][ T9479] usb 2-1: string descriptor 0 read error: -22 [ 894.665096][ T9479] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 894.665120][ T9479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.720633][ T9479] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 894.979915][ T9479] usb 2-1: USB disconnect, device number 14 [ 896.596000][T12290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1654'. [ 897.271401][T12304] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1660'. [ 897.766944][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1662'. [ 905.047690][ T9479] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 906.325312][ T9479] usb 7-1: unable to get BOS descriptor or descriptor too short [ 906.327256][ T9479] usb 7-1: config 9 has an invalid interface number: 198 but max is 0 [ 906.327280][ T9479] usb 7-1: config 9 has no interface number 0 [ 906.327361][ T9479] usb 7-1: config 9 interface 198 has no altsetting 0 [ 906.336460][ T9479] usb 7-1: string descriptor 0 read error: -22 [ 906.336660][ T9479] usb 7-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 906.336717][ T9479] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.353467][ T9479] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 906.353498][ T9479] dvb-usb: bulk message failed: -22 (3/0) [ 906.597273][ T9479] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 906.683136][ T9479] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 906.683196][ T9479] usb 7-1: media controller created [ 906.744160][T12412] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 907.022018][ T9479] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 907.079757][T12413] block nbd4: shutting down sockets [ 907.154595][ T9479] DVB: Unable to find symbol mt352_attach() [ 907.154611][ T9479] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 907.155481][ T9479] dvb-usb: bulk message failed: -22 (3/0) [ 907.177508][ T9479] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 907.181462][ T9479] usb 7-1: USB disconnect, device number 13 [ 907.225928][ T9479] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 909.808329][T12455] comedi comedi0: Minor 3 could not be opened [ 910.590731][T12464] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 914.977432][ T9] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 915.138426][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 915.141873][ T9] usb 6-1: config 9 has an invalid interface number: 198 but max is 0 [ 915.141898][ T9] usb 6-1: config 9 has no interface number 0 [ 915.141928][ T9] usb 6-1: config 9 interface 198 has no altsetting 0 [ 915.176545][ T9] usb 6-1: string descriptor 0 read error: -22 [ 915.176684][ T9] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 915.176707][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.232424][ T9] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 915.232472][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 915.280222][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 915.289326][ T9] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 915.289380][ T9] usb 6-1: media controller created [ 915.411073][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 917.007231][ T9] DVB: Unable to find symbol mt352_attach() [ 917.007248][ T9] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 917.008211][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 917.027555][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 917.065808][ T9] usb 6-1: USB disconnect, device number 8 [ 917.157668][T12535] netlink: zone id is out of range [ 917.157679][T12535] netlink: zone id is out of range [ 917.157683][T12535] netlink: zone id is out of range [ 917.157688][T12535] netlink: zone id is out of range [ 917.157691][T12535] netlink: del zone limit has 4 unknown bytes [ 917.345610][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 922.713294][T12579] : entered promiscuous mode [ 928.867991][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 932.860850][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.657456][ T5911] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 939.593081][ T5911] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 939.784806][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 939.784846][ T5911] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 939.784871][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 939.784896][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 940.363523][ T5911] usb 2-1: unable to read config index 1 descriptor/start: -71 [ 940.363561][ T5911] usb 2-1: can't read configurations, error -71 [ 940.417742][ T9479] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 948.129873][T12791] fuse: Bad value for 'fd' [ 950.737673][T12825] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1856'. [ 951.571716][T12833] fuse: Bad value for 'fd' [ 954.271324][T12881] siw: device registration error -23 [ 955.429215][T12897] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1886'. [ 956.327001][T12901] fuse: Unknown parameter '0x0000000000000004' [ 956.914749][T12914] siw: device registration error -23 [ 956.962015][T12916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 957.012297][T12916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 957.015023][T12916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 957.018788][T12916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 957.052729][T12916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 957.808050][ T5812] syz_tun (unregistering): left allmulticast mode [ 958.399343][T12933] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1897'. [ 959.111544][T12936] fuse: Unknown parameter '0x0000000000000004' [ 959.158611][T12916] Bluetooth: hci3: command tx timeout [ 959.305437][T12915] wg1 speed is unknown, defaulting to 1000 [ 960.276837][T12915] chnl_net:caif_netlink_parms(): no params data found [ 960.668672][T12960] siw: device registration error -23 [ 961.177419][T12916] Bluetooth: hci3: command tx timeout [ 961.487795][T12915] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.488078][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.488333][T12915] bridge_slave_0: entered allmulticast mode [ 961.496209][T12915] bridge_slave_0: entered promiscuous mode [ 961.552033][T12915] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.553706][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.553940][T12915] bridge_slave_1: entered allmulticast mode [ 961.562095][T12915] bridge_slave_1: entered promiscuous mode [ 961.803513][T12976] fuse: Unknown parameter '0x0000000000000004' [ 962.073586][T12915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.088598][T12915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.167480][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 962.299622][ T9] usb 7-1: device descriptor read/64, error -71 [ 963.257905][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 963.434239][T12916] Bluetooth: hci3: command tx timeout [ 963.469008][T12915] team0: Port device team_slave_0 added [ 963.471189][T12915] team0: Port device team_slave_1 added [ 963.519136][ T9] usb 7-1: device descriptor read/64, error -71 [ 963.627839][ T9] usb usb7-port1: attempt power cycle [ 965.497670][T12916] Bluetooth: hci3: command tx timeout [ 965.896645][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 966.394974][T12915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.395046][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.395073][T12915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.551230][T12915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.551242][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.551257][T12915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.652304][ T9] usb 7-1: device descriptor read/8, error -71 [ 967.158875][ T5883] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 967.289167][T12915] hsr_slave_0: entered promiscuous mode [ 967.290539][T12915] hsr_slave_1: entered promiscuous mode [ 967.291505][T12915] debugfs: 'hsr0' already exists in 'hsr' [ 967.291529][T12915] Cannot create hsr debugfs directory [ 967.331681][ T5883] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 967.332827][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 967.332856][ T5883] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 967.396447][ T5883] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 967.396503][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 967.396528][ T5883] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 967.420210][ T5883] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 967.420266][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 967.420292][ T5883] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 967.459633][ T5883] usb 6-1: string descriptor 0 read error: -22 [ 967.459794][ T5883] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 967.459817][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.487196][T13017] fuse: Unknown parameter '0x0000000000000004' [ 967.544260][ T5883] adutux 6-1:168.0: interrupt endpoints not found [ 968.504651][ T5953] usb 6-1: USB disconnect, device number 10 [ 968.975519][T13026] comedi comedi0: Minor 16 could not be opened [ 970.823899][T13043] siw: device registration error -23 [ 970.878863][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1928'. [ 970.940001][T12915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.967433][ T5790] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 971.097461][ T5790] usb 5-1: device descriptor read/64, error -71 [ 971.588998][ T5790] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 972.217557][ T5790] usb 5-1: device descriptor read/64, error -71 [ 972.248957][T12915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.339767][ T5790] usb usb5-port1: attempt power cycle [ 973.737475][T13066] comedi comedi0: Minor 16 could not be opened [ 973.737986][ T5790] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 973.893156][T12915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.002244][ T5790] usb 5-1: device descriptor read/8, error -71 [ 974.247523][T13078] siw: device registration error -23 [ 974.277461][ T5883] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 974.394489][T12915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.429839][ T5883] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 974.429894][ T5883] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 974.429920][ T5883] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 974.431532][ T5883] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 974.431598][ T5883] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 974.431625][ T5883] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 974.433668][ T5883] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 974.433720][ T5883] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 974.433746][ T5883] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 974.492264][ T5883] usb 7-1: string descriptor 0 read error: -22 [ 974.492983][ T5883] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 974.492997][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.554702][ T5883] adutux 7-1:168.0: interrupt endpoints not found [ 976.642614][T12232] usb 7-1: USB disconnect, device number 18 [ 977.887749][T12915] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 977.929794][T12915] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 978.247738][T12915] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 978.270756][T12915] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 978.527422][ T5790] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 978.658366][ T5790] usb 7-1: device descriptor read/64, error -71 [ 978.695284][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.053424][T12915] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.143107][ T5790] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 979.412370][ T5790] usb 7-1: device descriptor read/64, error -71 [ 979.531539][ T5790] usb usb7-port1: attempt power cycle [ 979.738714][T10599] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.738798][T10599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.776583][T10599] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.786264][T10599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.427432][ T5790] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 980.471088][ T5790] usb 7-1: device descriptor read/8, error -71 [ 980.707787][ T5790] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 980.743413][ T5790] usb 7-1: device descriptor read/8, error -71 [ 980.852956][ T5790] usb usb7-port1: unable to enumerate USB device [ 980.914433][T13126] comedi comedi0: Minor 16 could not be opened [ 982.549358][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.887446][ T9408] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 982.963131][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.043769][ T9408] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 983.043827][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 983.043852][ T9408] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 983.079744][ T9408] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 983.079804][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 983.079830][ T9408] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 983.081724][ T9408] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 983.081776][ T9408] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 983.081802][ T9408] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 983.161020][ T9408] usb 2-1: string descriptor 0 read error: -22 [ 983.161187][ T9408] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 983.161214][ T9408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.215085][ T9408] adutux 2-1:168.0: interrupt endpoints not found [ 983.233159][T12915] veth0_vlan: entered promiscuous mode [ 983.252603][T12915] veth1_vlan: entered promiscuous mode [ 983.302218][T12915] veth0_macvtap: entered promiscuous mode [ 983.314485][T12915] veth1_macvtap: entered promiscuous mode [ 983.345472][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.359711][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.426763][ T9408] usb 2-1: USB disconnect, device number 17 [ 983.524360][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.640685][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.837059][T10531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.854072][T10531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.900052][T10531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.959745][T10531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.787016][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.787036][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.947746][ T5790] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 984.983216][ T1301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.983242][ T1301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.078283][ T5790] usb 5-1: device descriptor read/64, error -71 [ 985.958613][ T5790] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 986.087727][ T5790] usb 5-1: device descriptor read/64, error -71 [ 986.550913][ T5790] usb usb5-port1: attempt power cycle [ 986.907433][ T5790] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 987.274753][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.405629][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.582419][ T5790] usb 5-1: device descriptor read/8, error -71 [ 987.811093][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.997515][ T5790] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 988.181740][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.194963][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 988.195043][ T5790] usb 5-1: device descriptor read/8, error -32 [ 988.312855][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.316883][ T5790] usb usb5-port1: unable to enumerate USB device [ 989.604361][T13206] hugetlbfs: Bad value for 'size' [ 989.717807][ T5810] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 989.852558][ T5810] usb 1-1: device descriptor read/64, error -71 [ 990.138638][ T5810] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 990.298154][ T5810] usb 1-1: device descriptor read/64, error -71 [ 990.410397][ T5810] usb usb1-port1: attempt power cycle [ 990.824952][ T5810] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 990.840798][ T5810] usb 1-1: device descriptor read/8, error -71 [ 990.842736][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1981'. [ 990.906651][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.077410][ T5810] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 991.101028][ T5810] usb 1-1: device descriptor read/8, error -71 [ 991.278832][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.344145][ T5810] usb usb1-port1: unable to enumerate USB device [ 991.407417][ T9479] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 991.836053][T13230] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 991.957445][ T9479] usb 6-1: device descriptor read/64, error -71 [ 992.260252][ T9479] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 992.387375][ T9479] usb 6-1: device descriptor read/64, error -71 [ 992.507854][ T9479] usb usb6-port1: attempt power cycle [ 993.079433][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.312127][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.407388][ T9479] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 993.430128][ T9479] usb 6-1: device descriptor read/8, error -71 [ 993.671697][ T9479] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 993.760959][ T9479] usb 6-1: device descriptor read/8, error -71 [ 993.854300][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.066170][ T9479] usb usb6-port1: unable to enumerate USB device [ 994.593497][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.027781][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.511004][T13286] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 998.024294][ T9408] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 999.017518][ T9408] usb 6-1: device descriptor read/64, error -71 [ 999.099450][ T5790] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 999.227461][ T5790] usb 7-1: device descriptor read/64, error -71 [ 999.257453][ T9408] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 999.747468][ T9408] usb 6-1: device descriptor read/64, error -71 [ 999.875779][ T9408] usb usb6-port1: attempt power cycle [ 999.876855][ T5790] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1000.027446][ T5790] usb 7-1: device descriptor read/64, error -71 [ 1000.137965][ T5790] usb usb7-port1: attempt power cycle [ 1001.317400][ T5790] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1001.338293][ T5790] usb 7-1: device descriptor read/8, error -71 [ 1003.045930][ T5790] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1003.385017][ T5790] usb 7-1: device descriptor read/8, error -71 [ 1003.617782][ T5790] usb usb7-port1: unable to enumerate USB device [ 1004.204162][T13340] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1005.997428][T13294] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 1006.128533][T13294] usb 5-1: device descriptor read/64, error -71 [ 1006.559598][T13294] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 1006.717451][T13294] usb 5-1: device descriptor read/64, error -71 [ 1006.725569][ T9479] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1006.829184][T13294] usb usb5-port1: attempt power cycle [ 1006.897493][ T9479] usb 6-1: Using ep0 maxpacket: 8 [ 1006.900155][ T9479] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1006.900180][ T9479] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.900230][ T9479] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1006.900251][ T9479] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.227420][T13294] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 1007.248150][T13294] usb 5-1: device descriptor read/8, error -71 [ 1007.487569][T13294] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 1007.519265][T13294] usb 5-1: device descriptor read/8, error -71 [ 1007.925624][T13294] usb usb5-port1: unable to enumerate USB device [ 1008.094473][T13381] syzkaller0: entered promiscuous mode [ 1008.094499][T13381] syzkaller0: entered allmulticast mode [ 1009.417534][ T9408] usb 6-1: USB disconnect, device number 18 [ 1010.187816][ T9408] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1010.729634][ T9408] usb 6-1: Using ep0 maxpacket: 8 [ 1010.744101][ T9408] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1010.744162][ T9408] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1010.744184][ T9408] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1010.744208][ T9408] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1010.744231][ T9408] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.744279][ T9408] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1010.744301][ T9408] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.078898][ T9408] usb 6-1: usb_control_msg returned -32 [ 1011.078945][ T9408] usbtmc 6-1:16.0: can't read capabilities [ 1013.372883][ T9408] usb 6-1: USB disconnect, device number 19 [ 1015.379442][T13294] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1016.167419][T13294] usb 7-1: Using ep0 maxpacket: 8 [ 1016.169027][T13294] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1016.169042][T13294] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.169070][T13294] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1016.169082][T13294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.149579][T12232] usb 7-1: USB disconnect, device number 27 [ 1024.180650][T13461] syzkaller0: entered promiscuous mode [ 1024.183126][T13461] syzkaller0: entered allmulticast mode [ 1024.992963][ T5911] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1025.052393][T13476] siw: device registration error -23 [ 1025.167948][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 1025.174823][ T5911] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1025.174898][ T5911] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1025.174919][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1025.174942][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1025.174964][ T5911] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1025.175005][ T5911] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1025.175026][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.732247][ T5911] usb 6-1: usb_control_msg returned -32 [ 1025.732302][ T5911] usbtmc 6-1:16.0: can't read capabilities [ 1026.660676][T13494] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2062'. [ 1026.660729][T13494] veth1_to_team: entered promiscuous mode [ 1026.665106][T13494] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2062'. [ 1026.801886][T13496] overlayfs: failed to resolve './file1': -2 [ 1026.877355][ T5790] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1027.037454][ T5790] usb 5-1: Using ep0 maxpacket: 8 [ 1027.040186][ T5790] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1027.040212][ T5790] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.040262][ T5790] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1027.040284][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.596620][ T9479] usb 6-1: USB disconnect, device number 20 [ 1028.378614][T13517] syzkaller0: entered promiscuous mode [ 1028.378639][T13517] syzkaller0: entered allmulticast mode [ 1029.702668][T13294] usb 5-1: USB disconnect, device number 20 [ 1029.934758][T13535] overlayfs: failed to resolve './file0': -2 [ 1031.387599][ T5911] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1031.597428][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 1031.599834][ T5911] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1031.599894][ T5911] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1031.599915][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1031.599939][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1031.599961][ T5911] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.600002][ T5911] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1031.600023][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.079440][ T5911] usb 1-1: usb_control_msg returned -32 [ 1032.079498][ T5911] usbtmc 1-1:16.0: can't read capabilities [ 1033.181035][ T5911] usb 1-1: USB disconnect, device number 19 [ 1034.403007][ T9479] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1034.466670][T13574] overlayfs: failed to resolve './file0': -2 [ 1034.547389][ T9479] usb 7-1: Using ep0 maxpacket: 8 [ 1034.549826][ T9479] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1034.549853][ T9479] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.549902][ T9479] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1034.549945][ T9479] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1034.549968][ T9479] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.641946][ T9479] usbtmc 7-1:16.0: bulk endpoints not found [ 1035.648421][T13584] syzkaller0: entered promiscuous mode [ 1035.648447][T13584] syzkaller0: entered allmulticast mode [ 1038.561244][ T9408] usb 7-1: USB disconnect, device number 28 [ 1040.459333][T13627] overlayfs: failed to resolve './file0': -2 [ 1042.190494][T12232] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1042.448631][T12232] usb 5-1: Using ep0 maxpacket: 8 [ 1042.878628][T12232] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1042.878734][T12232] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.879259][T12232] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1042.879542][T12232] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1042.879622][T12232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.325285][T12232] usbtmc 5-1:16.0: bulk endpoints not found [ 1043.579839][T13654] syzkaller0: entered promiscuous mode [ 1043.579866][T13654] syzkaller0: entered allmulticast mode [ 1043.682090][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2113'. [ 1045.184943][ T44] usb 5-1: USB disconnect, device number 21 [ 1045.697656][T13669] warning: `syz.6.2115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1048.453560][T13687] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1051.282515][T13712] overlayfs: failed to resolve './file0': -2 [ 1052.335274][ T44] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1052.880037][T13717] syzkaller0: entered promiscuous mode [ 1052.880064][T13717] syzkaller0: entered allmulticast mode [ 1054.515213][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.426600][T13780] syzkaller0: entered promiscuous mode [ 1062.426627][T13780] syzkaller0: entered allmulticast mode [ 1067.063453][ T23] ================================================================== [ 1067.063553][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 1067.063656][ T23] Read of size 8 at addr ffffc9000666d090 by task irq_work/0/23 [ 1067.063672][ T23] [ 1067.063691][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1067.063712][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1067.063731][ T23] Call Trace: [ 1067.063742][ T23] [ 1067.063751][ T23] dump_stack_lvl+0x189/0x250 [ 1067.063796][ T23] ? run_irq_workd+0x116/0x190 [ 1067.063843][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1067.063864][ T23] ? __pfx__printk+0x10/0x10 [ 1067.063888][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1067.063928][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1067.063949][ T23] print_report+0xca/0x240 [ 1067.063973][ T23] ? run_irq_workd+0x116/0x190 [ 1067.063991][ T23] kasan_report+0x118/0x150 [ 1067.064038][ T23] ? run_irq_workd+0x116/0x190 [ 1067.064061][ T23] run_irq_workd+0x116/0x190 [ 1067.064081][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1067.064099][ T23] ? schedule+0x91/0x360 [ 1067.064218][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1067.064252][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1067.064267][ T23] smpboot_thread_fn+0x542/0xa60 [ 1067.064285][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1067.064306][ T23] kthread+0x711/0x8a0 [ 1067.064328][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1067.064346][ T23] ? __pfx_kthread+0x10/0x10 [ 1067.064365][ T23] ? rt_spin_unlock+0x150/0x200 [ 1067.064389][ T23] ? rt_spin_unlock+0x161/0x200 [ 1067.064409][ T23] ? __pfx_kthread+0x10/0x10 [ 1067.064429][ T23] ret_from_fork+0x4bc/0x870 [ 1067.064463][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1067.064491][ T23] ? __switch_to_asm+0x39/0x70 [ 1067.064513][ T23] ? __switch_to_asm+0x33/0x70 [ 1067.064534][ T23] ? __pfx_kthread+0x10/0x10 [ 1067.064561][ T23] ret_from_fork_asm+0x1a/0x30 [ 1067.064592][ T23] [ 1067.064598][ T23] [ 1067.064603][ T23] The buggy address belongs to a vmalloc virtual mapping [ 1067.064627][ T23] Memory state around the buggy address: [ 1067.064638][ T23] ffffc9000666cf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1067.064651][ T23] ffffc9000666d000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1067.064663][ T23] >ffffc9000666d080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1067.064677][ T23] ^ [ 1067.064687][ T23] ffffc9000666d100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1067.064699][ T23] ffffc9000666d180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1067.064709][ T23] ================================================================== [ 1067.064729][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1067.064743][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1067.064764][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1067.064775][ T23] Call Trace: [ 1067.064782][ T23] [ 1067.064789][ T23] dump_stack_lvl+0x99/0x250 [ 1067.064810][ T23] ? __asan_memcpy+0x40/0x70 [ 1067.064833][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1067.064854][ T23] ? __pfx__printk+0x10/0x10 [ 1067.064881][ T23] vpanic+0x237/0x6d0 [ 1067.064904][ T23] ? __pfx_vpanic+0x10/0x10 [ 1067.064926][ T23] panic+0xb9/0xc0 [ 1067.064943][ T23] ? __pfx_panic+0x10/0x10 [ 1067.064959][ T23] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1067.065010][ T23] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1067.065041][ T23] ? run_irq_workd+0x116/0x190 [ 1067.065060][ T23] check_panic_on_warn+0x89/0xb0 [ 1067.065083][ T23] ? run_irq_workd+0x116/0x190 [ 1067.065102][ T23] end_report+0x78/0x160 [ 1067.065120][ T23] kasan_report+0x129/0x150 [ 1067.065141][ T23] ? run_irq_workd+0x116/0x190 [ 1067.065164][ T23] run_irq_workd+0x116/0x190 [ 1067.065184][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1067.065203][ T23] ? schedule+0x91/0x360 [ 1067.065228][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1067.065246][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1067.065263][ T23] smpboot_thread_fn+0x542/0xa60 [ 1067.065281][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1067.065301][ T23] kthread+0x711/0x8a0 [ 1067.065323][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1067.065341][ T23] ? __pfx_kthread+0x10/0x10 [ 1067.065360][ T23] ? rt_spin_unlock+0x150/0x200 [ 1067.065383][ T23] ? rt_spin_unlock+0x161/0x200 [ 1067.065404][ T23] ? __pfx_kthread+0x10/0x10 [ 1067.065424][ T23] ret_from_fork+0x4bc/0x870 [ 1067.065450][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1067.065478][ T23] ? __switch_to_asm+0x39/0x70 [ 1067.065500][ T23] ? __switch_to_asm+0x33/0x70 [ 1067.065522][ T23] ? __pfx_kthread+0x10/0x10 [ 1067.065550][ T23] ret_from_fork_asm+0x1a/0x30 [ 1067.065580][ T23] [ 1067.065835][ T23] Kernel Offset: disabled