last executing test programs: 9.454317282s ago: executing program 1 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x4, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x4, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x3, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0xeeee0000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x1, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x0, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x4, 0xd7, 0x0, 0x9, 0x4, 0x4, 0x6, 0xe8, 0x69, 0x5, 0x8, 0x0, 0x856c, 0x2, 0xd4, 0x4, 0x9, 0x0, '\x00', 0x9, 0xffffffffffff8001}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 9.173452594s ago: executing program 1 (id=344): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e70, 0x2000, 0x2, 0x800000, 0x0, r2}, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000bbbbbbbbbb481eaafa43e2f2e7d7bfc76a6461bb86dd607f00ef006c3c00fe8000000000000000000000000000bb0000000000000000000000000000000100000400000000000000000000649078020000000000000000000000f279da0a8521ee0bcda101cc54ad242cd5a9c9fe4425db818cb03f87faa086420815f3fd27b60b8c69746126e0d966f0c3e56fc14dae184651e3b9589a839e395132418126d939bc090001004a40d488fa56645904447ffa429c4baf01b3cd5401b63146867b0a16764241083f56d6caf59b645f0aabb177433e7b64866a2e55"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) munlockall() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x2e, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x13}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8.075323882s ago: executing program 2 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000700)={0x128, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x208, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xffffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xb4}, {0x8, 0x15, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4138}, {0x8, 0x15, 0xdb47}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8001}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xfb3}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x10}, {0x8, 0x15, 0x8}}]}, 0x208}, 0x1, 0x0, 0x0, 0x20008800}, 0x8010) 6.992132969s ago: executing program 2 (id=350): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 5.993869881s ago: executing program 0 (id=353): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000940)=""/114, 0x72}], 0x2) write$evdev(r0, 0x0, 0x0) 5.976785172s ago: executing program 3 (id=354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="8f00000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) r6 = fsopen(0x0, 0x0) fsmount(r6, 0x1, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) getpid() 5.346335219s ago: executing program 1 (id=355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000400)=""/95, 0x5f}], 0x2, 0x185, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) 5.004893464s ago: executing program 0 (id=356): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$COMEDI_CMDTEST(r3, 0x8050640a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x3}, @generic={0x0, 0x3, "96"}, @generic={0x0, 0xf, "206a77bdd1a004129054e7704a"}]}}}], 0xa0}, 0x0) 4.346149602s ago: executing program 3 (id=357): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x827) r1 = syz_io_uring_setup(0x108, &(0x7f0000000400)={0x0, 0x5841, 0x400, 0x0, 0x8b}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.218479718s ago: executing program 1 (id=358): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) execve(0x0, 0x0, 0x0) 3.262782999s ago: executing program 0 (id=359): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x2, 0x4}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x1, @empty, 0x3}], 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1d480, 0x0, 0x44a}) io_uring_enter(r0, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.174711343s ago: executing program 1 (id=360): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3.070314068s ago: executing program 0 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0xf1c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x9, 0x1, 0x1, 0x40, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xc14c, 0x1}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000fc0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaa586dd60ae2d9200083afffe8000000000000000000000000000bbff02000400000000000000000000000180009078fed909ea"], 0x0) 3.061188018s ago: executing program 3 (id=362): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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") open_tree(0xffffffffffffff9c, 0x0, 0x81000) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200) 2.460609564s ago: executing program 1 (id=363): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="6400a364be6a413ced1e254e227b9fc1204eb900", @ANYRES16=r4, @ANYBLOB="010800040000000000", @ANYBLOB="0a00060008021100000100003c005080110001004abee33908f8eef16f162471f40000000800070000000000140004005421d99a1da9b52d6e0e5603eb65d6900800030005ac0f00"], 0x64}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4040808}, 0x4008080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') syz_usb_connect(0x2, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2"], 0x0) 2.458476494s ago: executing program 2 (id=364): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.338305829s ago: executing program 0 (id=365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="8f0000000000000000001cee", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) r6 = fsopen(0x0, 0x0) fsmount(r6, 0x1, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) getpid() 2.242675784s ago: executing program 2 (id=366): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a2b3978044b864f941e1137ce034002852c9ef5606de83cf95a02ef4bacef1188250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27059feb304bb3e260a2", @ANYRES32=0x0], 0x1, 0x1282, &(0x7f0000002880)="$eJzs3U1rY1UcB+B/pmmbduyLOo52QDzoRhHitAtXborMgFhQqh1QQbhjUy1Nm9KEQkScunIl+DFEXboTxC/QjRvXgiDSjctZiFfSpE7TpB2nNq0Mz7PJ5ZzzO+fce8qFW+7h7r3y5fraSr28kjXiUqEQxc3hKN5NkeJSDEXbTrxw6+dfnn7rnXdfn19YuLGY0s35t2dfTilNPvPDe598++yPjcu3vpv8fjR2p9/f+2Pu192ruzN7f30Tq/W0Wk8btUbK0u1arZHdrlbS8mp9rZzSm9VKVq+kUmeMe/Ur1drmZjNlG8sT45tblXo9ZRvNtFZppkYhNbaaKfswW91I5XI5TYwH/8XS13fzPI/I8+EYiTzP87EYj8vxSEzEZEzFdDwaj8XjcSWeiKvxZDwVM/utDvIjFzt9AAAAAAAAAAAAAAAAAAAAeEjcZ/9/oXf//+hFTxkAAAAAAAAAAAAAAAAAAAAeOkf3/xcjHuD7/wAAAAAAAAAAAAAAAAAAAMBZuM/3/4/s/3/R/n8AAAAAAAAAAAAAAAAAAAAYhFL7ZzGlUsT659tL20vt33b5/EqsRjUqcT2m4s/Y3/3f1j6++drCjetp33S8tH6nk7+zvTTUnZ8dnorpQt/8bDufuvOjMX44PxdTcaX/+HN986V4/rlW/rN2vhxT8dMHUYtqLEcUOme/n/90NqVX31gY685fa7U71tCAlwUAAADOUjn9o/f5fafTqG99u6rzfJ46LQsn/H/gyPN5Ma4VL+qsOVBvfryWVauVrVMejBzfz0h3yVin5anHKkRE1hWfHP9tsdXlaSd/ZgdD5zro8Mltjq7FTOnEDi8dWsEo/g8u5hkc/P7VoZJSDGqs4dafc0/VwQXNqq3757/rMHbyfKCXZaRf1ehJqePvGYUB3o84X/cW/aJnAgAAAAAAAAAAwIPo+/bfWET0vA/4UU/Jwevh3fHeno8f/YtzOEMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVQAAAP//kh3BBA==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) getdents(r0, &(0x7f0000000680)=""/184, 0xb8) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.934198137s ago: executing program 3 (id=367): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$COMEDI_CMDTEST(r3, 0x8050640a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x3}, @generic={0x0, 0x3, "96"}, @generic={0x0, 0xf, "206a77bdd1a004129054e7704a"}]}}}], 0xa0}, 0x0) 1.582269372s ago: executing program 2 (id=368): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) listen(r0, 0x1000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) close(0x3) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 779.439307ms ago: executing program 0 (id=369): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000700)) socket(0x10, 0x803, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) 735.606068ms ago: executing program 3 (id=370): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x827) r1 = syz_io_uring_setup(0x108, &(0x7f0000000400)={0x0, 0x5841, 0x400, 0x0, 0x8b}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 198.686882ms ago: executing program 2 (id=371): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) 0s ago: executing program 3 (id=372): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x20040000}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 79.679044][ T5779] cgroup: Unknown subsys name 'net' [ 79.842016][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.518082][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.303255][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.311778][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.321293][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.327525][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.329836][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.337401][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.347093][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.351394][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.357635][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.365902][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.385572][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.397290][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.404451][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.412535][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.413949][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.420659][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.439855][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.452463][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.459981][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.485650][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.493887][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.505077][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.513107][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.520714][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.039448][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 84.081570][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 84.137886][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 84.231542][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 84.244068][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.251243][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.259852][ T5795] bridge_slave_0: entered allmulticast mode [ 84.267742][ T5795] bridge_slave_0: entered promiscuous mode [ 84.281450][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.288979][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.296303][ T5795] bridge_slave_1: entered allmulticast mode [ 84.303505][ T5795] bridge_slave_1: entered promiscuous mode [ 84.434020][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.446594][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.477359][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.484655][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.491814][ T5794] bridge_slave_0: entered allmulticast mode [ 84.499470][ T5794] bridge_slave_0: entered promiscuous mode [ 84.537257][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.545367][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.552564][ T5794] bridge_slave_1: entered allmulticast mode [ 84.561035][ T5794] bridge_slave_1: entered promiscuous mode [ 84.581483][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.588714][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.596104][ T5789] bridge_slave_0: entered allmulticast mode [ 84.603308][ T5789] bridge_slave_0: entered promiscuous mode [ 84.611384][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.618645][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.626599][ T5789] bridge_slave_1: entered allmulticast mode [ 84.634815][ T5789] bridge_slave_1: entered promiscuous mode [ 84.680733][ T5795] team0: Port device team_slave_0 added [ 84.689913][ T5795] team0: Port device team_slave_1 added [ 84.721494][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.756319][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.764473][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.771663][ T5790] bridge_slave_0: entered allmulticast mode [ 84.779376][ T5790] bridge_slave_0: entered promiscuous mode [ 84.789008][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.825345][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.832324][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.858364][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.872999][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.885658][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.895525][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.902655][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.910503][ T5790] bridge_slave_1: entered allmulticast mode [ 84.917647][ T5790] bridge_slave_1: entered promiscuous mode [ 84.955438][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.962442][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.988568][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.025945][ T5794] team0: Port device team_slave_0 added [ 85.034957][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.066380][ T5794] team0: Port device team_slave_1 added [ 85.076403][ T5789] team0: Port device team_slave_0 added [ 85.085000][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.134794][ T5789] team0: Port device team_slave_1 added [ 85.170740][ T5790] team0: Port device team_slave_0 added [ 85.196238][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.203229][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.230406][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.243339][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.250425][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.276886][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.304022][ T5790] team0: Port device team_slave_1 added [ 85.332875][ T5795] hsr_slave_0: entered promiscuous mode [ 85.340222][ T5795] hsr_slave_1: entered promiscuous mode [ 85.372849][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.380016][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.406484][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.419184][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.427614][ T51] Bluetooth: hci0: command tx timeout [ 85.429074][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.459498][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.496643][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.503880][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.513719][ T51] Bluetooth: hci3: command tx timeout [ 85.529969][ T5798] Bluetooth: hci1: command tx timeout [ 85.541470][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.583626][ T51] Bluetooth: hci2: command tx timeout [ 85.590574][ T5794] hsr_slave_0: entered promiscuous mode [ 85.597312][ T5794] hsr_slave_1: entered promiscuous mode [ 85.603637][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.611523][ T5794] Cannot create hsr debugfs directory [ 85.631222][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.638486][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.664682][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.736856][ T5789] hsr_slave_0: entered promiscuous mode [ 85.743341][ T5789] hsr_slave_1: entered promiscuous mode [ 85.749902][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.757637][ T5789] Cannot create hsr debugfs directory [ 85.904831][ T5790] hsr_slave_0: entered promiscuous mode [ 85.918279][ T5790] hsr_slave_1: entered promiscuous mode [ 85.924929][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.932734][ T5790] Cannot create hsr debugfs directory [ 86.240032][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.255348][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.266314][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.283254][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.356941][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.369215][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.386043][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.405398][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.500137][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.519245][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.530225][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.548283][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.672897][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.687200][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.699812][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.712246][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.727039][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.775679][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.796674][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.829021][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.836438][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.862885][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.896007][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.903278][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.943316][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.950533][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.962991][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.970206][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.101436][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.207463][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.242822][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.308702][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.315954][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.361414][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.368775][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.478528][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.504254][ T51] Bluetooth: hci0: command tx timeout [ 87.578099][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.585396][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.593136][ T51] Bluetooth: hci3: command tx timeout [ 87.598688][ T5798] Bluetooth: hci1: command tx timeout [ 87.614855][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.622041][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.663803][ T51] Bluetooth: hci2: command tx timeout [ 87.715948][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.800925][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.832688][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.942823][ T5795] veth0_vlan: entered promiscuous mode [ 88.029260][ T5795] veth1_vlan: entered promiscuous mode [ 88.080956][ T5789] veth0_vlan: entered promiscuous mode [ 88.131111][ T5795] veth0_macvtap: entered promiscuous mode [ 88.190174][ T5795] veth1_macvtap: entered promiscuous mode [ 88.207773][ T5789] veth1_vlan: entered promiscuous mode [ 88.230666][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.246934][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.289048][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.343159][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.352740][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.362476][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.371306][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.398247][ T5789] veth0_macvtap: entered promiscuous mode [ 88.410061][ T5789] veth1_macvtap: entered promiscuous mode [ 88.441845][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.462283][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.475120][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.487331][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.537183][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.549136][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.561369][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.572912][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.582035][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.590874][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.600032][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.681390][ T5794] veth0_vlan: entered promiscuous mode [ 88.703267][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.715692][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.745036][ T5794] veth1_vlan: entered promiscuous mode [ 88.809854][ T5790] veth0_vlan: entered promiscuous mode [ 88.823033][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.841151][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.887380][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.890282][ T5794] veth0_macvtap: entered promiscuous mode [ 88.914392][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.918874][ T5790] veth1_vlan: entered promiscuous mode [ 88.956861][ T5794] veth1_macvtap: entered promiscuous mode [ 88.992878][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.012219][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.094969][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.111115][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.131433][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.142566][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.161856][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.209418][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.226780][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.240387][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.257907][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.278161][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.290227][ T5790] veth0_macvtap: entered promiscuous mode [ 89.341710][ T5790] veth1_macvtap: entered promiscuous mode [ 89.391885][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.402453][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.413690][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.425668][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.435836][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.446758][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.462345][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.577882][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.608083][ T51] Bluetooth: hci0: command tx timeout [ 89.657976][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.667603][ T51] Bluetooth: hci3: command tx timeout [ 89.681849][ T51] Bluetooth: hci1: command tx timeout [ 89.741321][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.750629][ T5798] Bluetooth: hci2: command tx timeout [ 89.803946][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.020437][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.042985][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.080464][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.111807][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.144896][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.182865][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.195658][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.209852][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.219012][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.227827][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.238156][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.084296][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.094344][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.159654][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.179590][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.230068][ T5898] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.431584][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.446915][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.545625][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.559738][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.664173][ T5798] Bluetooth: hci0: command tx timeout [ 91.744485][ T5798] Bluetooth: hci1: command tx timeout [ 91.749990][ T51] Bluetooth: hci3: command tx timeout [ 91.823747][ T5798] Bluetooth: hci2: command tx timeout [ 91.884845][ T5898] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 91.901074][ T5898] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 92.113881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.130252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.234806][ T27] cfg80211: failed to load regulatory.db [ 92.335491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.744897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.753991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.190036][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.383619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 94.392088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 94.411390][ T788] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 94.441910][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.464270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.498160][ T788] usb 2-1: config 0 has no interfaces? [ 94.503894][ T788] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 94.526915][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.593062][ T788] usb 2-1: config 0 descriptor?? [ 94.641026][ T5920] loop2: detected capacity change from 0 to 7 [ 94.660145][ T5920] Dev loop2: unable to read RDB block 7 [ 94.677156][ T5920] loop2: unable to read partition table [ 94.706598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.731490][ T5920] loop2: partition table beyond EOD, truncated [ 94.748433][ T5920] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 94.783922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.868878][ T788] usb 2-1: USB disconnect, device number 2 [ 95.215098][ T5162] Dev loop2: unable to read RDB block 7 [ 95.240246][ T5162] loop2: unable to read partition table [ 95.246753][ T5162] loop2: partition table beyond EOD, truncated [ 95.521313][ T5931] fuse: Bad value for 'fd' [ 97.374081][ T5942] bridge0: port 3(gretap0) entered blocking state [ 97.381214][ T5942] bridge0: port 3(gretap0) entered disabled state [ 97.395675][ T5942] gretap0: entered allmulticast mode [ 97.413390][ T5942] gretap0: entered promiscuous mode [ 97.489820][ T5942] bridge0: port 3(gretap0) entered blocking state [ 97.497112][ T5942] bridge0: port 3(gretap0) entered forwarding state [ 97.835779][ T5938] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 97.979326][ T5947] syz.1.15[5947]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 98.263605][ T5880] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.482669][ T5880] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 98.958619][ T5880] usb 1-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 99.015756][ T5938] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.117893][ T5880] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 99.127357][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.135607][ T5880] usb 1-1: Product: syz [ 99.139818][ T5880] usb 1-1: Manufacturer: syz [ 99.166031][ T5880] usb 1-1: SerialNumber: syz [ 99.869276][ T5934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.138531][ T5938] syz.1.15 (5938) used greatest stack depth: 20616 bytes left [ 102.701335][ T9] usb 1-1: USB disconnect, device number 2 [ 105.467400][ T5998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.694015][ T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.034827][ T788] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 106.056945][ T788] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 106.325768][ T788] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 106.336251][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.344384][ T788] usb 4-1: Product: syz [ 106.348708][ T788] usb 4-1: Manufacturer: syz [ 106.353584][ T788] usb 4-1: SerialNumber: syz [ 108.186943][ T6025] tipc: Enabling of bearer rejected, failed to enable media [ 108.229173][ T6025] syzkaller0: entered promiscuous mode [ 108.243647][ T6025] syzkaller0: entered allmulticast mode [ 108.494236][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 109.214862][ T788] usb 4-1: USB disconnect, device number 2 [ 109.232054][ T6030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.391869][ T6065] tipc: Enabling of bearer rejected, failed to enable media [ 112.432158][ T6065] syzkaller0: entered promiscuous mode [ 112.452863][ T6065] syzkaller0: entered allmulticast mode [ 112.634306][ T5860] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.885818][ T5860] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 113.659298][ T5860] usb 3-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 113.731379][ T5860] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 113.753520][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.772318][ T5860] usb 3-1: Product: syz [ 113.791219][ T5860] usb 3-1: Manufacturer: syz [ 113.800266][ T5860] usb 3-1: SerialNumber: syz [ 113.888011][ T788] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.000095][ T788] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.221715][ T6078] fido_id[6078]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.350963][ T6082] Sensor B: ================= START STATUS ================= [ 114.359664][ T6082] Sensor B: Test Pattern: 75% Colorbar [ 114.366106][ T6082] Sensor B: Show Information: All [ 114.371338][ T6082] Sensor B: Vertical Flip: false [ 114.376571][ T6082] Sensor B: Horizontal Flip: false [ 114.382185][ T6082] Sensor B: Brightness: 128 [ 114.388221][ T6082] Sensor B: Contrast: 128 [ 114.393386][ T6082] Sensor B: Hue: 0 [ 114.397388][ T6082] Sensor B: Saturation: 128 [ 114.402730][ T6082] Sensor B: ================== END STATUS ================== [ 114.963967][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.503672][ T5860] usb 3-1: USB disconnect, device number 2 [ 117.908544][ T6108] Zero length message leads to an empty skb [ 119.284007][ T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.526446][ T788] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 119.541027][ T788] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 119.550379][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.558787][ T788] usb 4-1: Product: syz [ 119.563082][ T788] usb 4-1: Manufacturer: syz [ 120.294676][ T788] usb 4-1: SerialNumber: syz [ 122.288348][ T5798] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 122.570195][ T6160] netlink: 21 bytes leftover after parsing attributes in process `syz.0.81'. [ 123.389033][ T23] usb 4-1: USB disconnect, device number 3 [ 123.414417][ T5860] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.733550][ T5860] usb 2-1: config 0 has an invalid interface number: 182 but max is 1 [ 124.742061][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.762379][ T5860] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 124.771509][ T5860] usb 2-1: config 0 has no interface number 0 [ 124.777848][ T5860] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 124.787492][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.804663][ T5860] usb 2-1: config 0 descriptor?? [ 126.584621][ T6192] syz.2.87 uses obsolete (PF_INET,SOCK_PACKET) [ 126.643922][ T6184] syzkaller1: entered promiscuous mode [ 126.712987][ T6184] syzkaller1: entered allmulticast mode [ 127.664087][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.985746][ T23] usb 1-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 128.006316][ T23] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 128.028774][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.062242][ T23] usb 1-1: Product: syz [ 128.075399][ T23] usb 1-1: Manufacturer: syz [ 128.083847][ T23] usb 1-1: SerialNumber: syz [ 128.300828][ T5880] usb 2-1: USB disconnect, device number 3 [ 128.996056][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 129.374913][ T6220] Sensor B: ================= START STATUS ================= [ 129.382544][ T6220] Sensor B: Test Pattern: 75% Colorbar [ 129.388143][ T6220] Sensor B: Show Information: All [ 129.393217][ T6220] Sensor B: Vertical Flip: false [ 129.398201][ T6220] Sensor B: Horizontal Flip: false [ 129.403326][ T6220] Sensor B: Brightness: 128 [ 129.408694][ T6220] Sensor B: Contrast: 128 [ 129.413312][ T6220] Sensor B: Hue: 0 [ 129.417111][ T6220] Sensor B: Saturation: 128 [ 129.421637][ T6220] Sensor B: ================== END STATUS ================== [ 129.535353][ T6218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.808750][ T5821] usb 1-1: USB disconnect, device number 3 [ 131.845830][ T6242] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.947202][ T6243] bridge0: port 3(gretap0) entered blocking state [ 132.059636][ T6243] bridge0: port 3(gretap0) entered disabled state [ 132.067820][ T6243] gretap0: entered allmulticast mode [ 132.099859][ T6243] gretap0: entered promiscuous mode [ 132.109738][ T6243] bridge0: port 3(gretap0) entered blocking state [ 132.116660][ T6243] bridge0: port 3(gretap0) entered forwarding state [ 132.292150][ T6239] warning: `syz.0.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.746383][ T6263] block device autoloading is deprecated and will be removed. [ 132.983889][ T5892] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.507318][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.516221][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.774428][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.790240][ T6268] program syz.3.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.801913][ T5892] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 133.822509][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.356485][ T5892] usb 2-1: config 0 descriptor?? [ 135.403814][ T6275] Sensor B: ================= START STATUS ================= [ 135.411671][ T6275] Sensor B: Test Pattern: 75% Colorbar [ 135.417403][ T6275] Sensor B: Show Information: All [ 135.422483][ T6275] Sensor B: Vertical Flip: false [ 135.427770][ T6275] Sensor B: Horizontal Flip: false [ 135.432920][ T6275] Sensor B: Brightness: 128 [ 135.437481][ T6275] Sensor B: Contrast: 128 [ 135.441862][ T6275] Sensor B: Hue: 0 [ 135.446700][ T6275] Sensor B: Saturation: 128 [ 135.451249][ T6275] Sensor B: ================== END STATUS ================== [ 135.476616][ T6273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.602357][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 135.612857][ T5892] usbhid: probe of 2-1:0.0 failed with error -71 [ 135.644944][ T5892] usb 2-1: USB disconnect, device number 4 [ 136.342611][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 136.442297][ T6285] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.112'. [ 138.953352][ T6313] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.854563][ T6322] netlink: 164 bytes leftover after parsing attributes in process `syz.3.122'. [ 140.250718][ T6318] Sensor B: ================= START STATUS ================= [ 140.259353][ T6318] Sensor B: Test Pattern: 75% Colorbar [ 140.264921][ T6318] Sensor B: Show Information: All [ 140.269971][ T6318] Sensor B: Vertical Flip: false [ 140.274980][ T6318] Sensor B: Horizontal Flip: false [ 140.280132][ T6318] Sensor B: Brightness: 128 [ 140.284690][ T6318] Sensor B: Contrast: 128 [ 140.289032][ T6318] Sensor B: Hue: 0 [ 140.292785][ T6318] Sensor B: Saturation: 128 [ 140.297347][ T6318] Sensor B: ================== END STATUS ================== [ 140.420261][ T6315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.559994][ T5821] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.778671][ T5821] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 144.813808][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.822166][ T5821] usb 1-1: Product: syz [ 144.833133][ T5821] usb 1-1: Manufacturer: syz [ 144.846981][ T5821] usb 1-1: SerialNumber: syz [ 144.850646][ T6366] Sensor B: ================= START STATUS ================= [ 144.861923][ T6366] Sensor B: Test Pattern: 75% Colorbar [ 144.865317][ T5821] usb 1-1: config 0 descriptor?? [ 144.880337][ T6366] Sensor B: Show Information: All [ 144.887194][ T6366] Sensor B: Vertical Flip: false [ 144.893822][ T6366] Sensor B: Horizontal Flip: false [ 144.900367][ T6366] Sensor B: Brightness: 128 [ 144.905507][ T6366] Sensor B: Contrast: 128 [ 144.910902][ T6366] Sensor B: Hue: 0 [ 144.914975][ T6366] Sensor B: Saturation: 128 [ 144.919831][ T6366] Sensor B: ================== END STATUS ================== [ 145.222783][ T5798] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 145.254147][ T5821] usb-storage 1-1:0.0: USB Mass Storage device detected [ 145.420968][ T5821] usb 1-1: USB disconnect, device number 4 [ 145.575009][ T6362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.893064][ T6372] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 145.902507][ T6372] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 145.934714][ T6372] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 145.942748][ T6372] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 147.066862][ T5821] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.271012][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x11, skipping [ 147.329185][ T5821] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 147.358959][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.386114][ T5821] usb 1-1: Product: syz [ 147.390395][ T5821] usb 1-1: Manufacturer: syz [ 147.399906][ T5821] usb 1-1: SerialNumber: syz [ 147.416010][ T5821] usb 1-1: config 0 descriptor?? [ 147.727840][ T5821] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 148.592634][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.530404][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 149.691586][ T788] usb 1-1: USB disconnect, device number 5 [ 149.737659][ T6405] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.147'. [ 151.113250][ T6418] Sensor B: ================= START STATUS ================= [ 151.121907][ T6418] Sensor B: Test Pattern: 75% Colorbar [ 151.127822][ T6418] Sensor B: Show Information: All [ 151.133092][ T6418] Sensor B: Vertical Flip: false [ 151.138283][ T6418] Sensor B: Horizontal Flip: false [ 151.143977][ T6418] Sensor B: Brightness: 128 [ 151.148726][ T6418] Sensor B: Contrast: 128 [ 151.153307][ T6418] Sensor B: Hue: 0 [ 151.157254][ T6418] Sensor B: Saturation: 128 [ 151.161929][ T6418] Sensor B: ================== END STATUS ================== [ 151.649438][ T6413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.002530][ T6425] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 153.093036][ T6437] netlink: 164 bytes leftover after parsing attributes in process `syz.1.158'. [ 154.444143][ T6448] netlink: 'syz.2.161': attribute type 39 has an invalid length. [ 155.400023][ T6458] syzkaller0: entered promiscuous mode [ 155.406975][ T6458] syzkaller0: entered allmulticast mode [ 155.543700][ T5860] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.593609][ T6463] Sensor B: ================= START STATUS ================= [ 155.603650][ T6463] Sensor B: Test Pattern: 75% Colorbar [ 155.614424][ T6463] Sensor B: Show Information: All [ 155.620015][ T6463] Sensor B: Vertical Flip: false [ 155.625737][ T6463] Sensor B: Horizontal Flip: false [ 155.632562][ T6463] Sensor B: Brightness: 128 [ 155.641644][ T6463] Sensor B: Contrast: 128 [ 155.646530][ T6463] Sensor B: Hue: 0 [ 155.650571][ T6463] Sensor B: Saturation: 128 [ 155.655539][ T6463] Sensor B: ================== END STATUS ================== [ 155.825400][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 155.851023][ T5860] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 155.862254][ T5860] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.872282][ T5860] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.879316][ T5860] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 155.894765][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.945737][ T5860] usb 4-1: config 0 descriptor?? [ 156.244023][ T6459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.727959][ T5860] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 156.735965][ T5860] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 156.744125][ T5860] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 156.773645][ T5860] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 156.784616][ T5860] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 156.899927][ T5860] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 157.007706][ T5860] corsair-cpro: probe of 0003:1B1C:0C10.0002 failed with error -90 [ 157.045733][ T5860] usb 4-1: USB disconnect, device number 4 [ 157.706706][ T6470] fido_id[6470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 157.833590][ T6477] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.147098][ T6504] sctp: failed to load transform for md5: -2 [ 160.627827][ T6516] Sensor B: ================= START STATUS ================= [ 160.729358][ T6516] Sensor B: Test Pattern: 75% Colorbar [ 160.738506][ T6516] Sensor B: Show Information: All [ 160.753493][ T6516] Sensor B: Vertical Flip: false [ 160.759355][ T6516] Sensor B: Horizontal Flip: false [ 160.768243][ T6516] Sensor B: Brightness: 128 [ 160.772861][ T6516] Sensor B: Contrast: 128 [ 160.778537][ T6516] Sensor B: Hue: 0 [ 160.787267][ T6516] Sensor B: Saturation: 128 [ 160.793278][ T6516] Sensor B: ================== END STATUS ================== [ 161.175379][ T6512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.503018][ T6537] sd 0:0:1:0: device reset [ 164.370272][ T6540] bridge0: port 3(gretap0) entered blocking state [ 164.379017][ T6540] bridge0: port 3(gretap0) entered disabled state [ 164.385869][ T6540] gretap0: entered allmulticast mode [ 164.392822][ T6540] gretap0: entered promiscuous mode [ 164.398609][ T6540] bridge0: port 3(gretap0) entered blocking state [ 164.405147][ T6540] bridge0: port 3(gretap0) entered forwarding state [ 166.422464][ T6567] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 168.616936][ T6587] comedi comedi3: board detection failed [ 174.725270][ T6657] pim6reg: entered allmulticast mode [ 175.364851][ T6663] syzkaller0: entered promiscuous mode [ 175.373520][ T6663] syzkaller0: entered allmulticast mode [ 176.653980][ T788] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 177.295929][ T788] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 177.304288][ T788] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 177.320949][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.337587][ T788] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 177.411274][ T788] usb 4-1: config 0 has no interface number 0 [ 177.423503][ T788] usb 4-1: config 0 has no interface number 1 [ 177.463128][ T788] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 177.483102][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.540520][ T788] usb 4-1: config 0 descriptor?? [ 177.550742][ T788] usb 4-1: unknown number of interfaces: 2 [ 177.777535][ T5860] usb 4-1: USB disconnect, device number 5 [ 177.795807][ T6690] syzkaller0: entered promiscuous mode [ 177.801364][ T6690] syzkaller0: entered allmulticast mode [ 179.087498][ T28] audit: type=1326 audit(1764331159.149:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6704 comm="syz.3.236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff79b78f749 code=0x0 [ 179.109062][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.430472][ T6733] ip6erspan0: entered promiscuous mode [ 181.855172][ T6739] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.343454][ C0] sched: RT throttling activated [ 183.725936][ T5892] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 183.920050][ T5892] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 184.029047][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.044751][ T5892] usb 1-1: Product: syz [ 184.050989][ T5892] usb 1-1: Manufacturer: syz [ 184.056161][ T5892] usb 1-1: SerialNumber: syz [ 184.075003][ T5892] hub 1-1:24.0: bad descriptor, ignoring hub [ 184.082272][ T5892] hub: probe of 1-1:24.0 failed with error -5 [ 184.281173][ T5892] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 184.366963][ T5892] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 184.375532][ T5892] dib0700: firmware download failed at 7 with -22 [ 184.678838][ T5892] usb 1-1: USB disconnect, device number 6 [ 185.760245][ T2133] IPVS: starting estimator thread 0... [ 185.853707][ T6763] IPVS: using max 18 ests per chain, 43200 per kthread [ 188.992217][ T6791] random: crng reseeded on system resumption [ 189.580284][ T6793] pim6reg: entered allmulticast mode [ 189.639702][ T6794] tc_dump_action: action bad kind [ 189.771099][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.261'. [ 189.780378][ T6787] nbd: must specify a size in bytes for the device [ 191.743607][ T2133] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.953849][ T2133] usb 1-1: Using ep0 maxpacket: 32 [ 191.972668][ T2133] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 191.983111][ T2133] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 191.992399][ T2133] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.010321][ T2133] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 192.038733][ T2133] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 192.077627][ T2133] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 192.098124][ T2133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.131251][ T2133] usb 1-1: config 0 descriptor?? [ 192.154208][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 192.358443][ T2133] usb 1-1: USB disconnect, device number 7 [ 193.143782][ T2133] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 193.346378][ T2133] usb 1-1: Using ep0 maxpacket: 32 [ 193.411248][ T2133] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 193.419889][ T2133] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 193.435567][ T2133] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.448892][ T2133] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 193.458803][ T2133] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.507946][ T2133] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 193.527109][ T2133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.564737][ T2133] usb 1-1: config 0 descriptor?? [ 194.085222][ T5892] usb 1-1: USB disconnect, device number 8 [ 194.548256][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.554809][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.562521][ T6859] tipc: Started in network mode [ 195.583633][ T6859] tipc: Node identity 9e89c0a7278f, cluster identity 4711 [ 195.594382][ T6859] tipc: Enabled bearer , priority 0 [ 195.613946][ T6859] syzkaller0: entered promiscuous mode [ 195.630214][ T6859] syzkaller0: entered allmulticast mode [ 195.666733][ T6859] tipc: Resetting bearer [ 195.690789][ T6858] tipc: Resetting bearer [ 195.744830][ T6858] tipc: Disabling bearer [ 196.673558][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 196.732487][ T6875] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 197.303610][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 197.332004][ T788] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 197.350881][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.385867][ T788] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 197.997245][ T2133] usb 3-1: USB disconnect, device number 3 [ 198.195508][ T6880] netlink: 'syz.1.293': attribute type 39 has an invalid length. [ 198.493953][ T6866] delete_channel: no stack [ 200.993671][ T5892] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 201.223543][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 201.329615][ T5892] usb 1-1: config 0 has no interfaces? [ 201.450348][ T5892] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 201.545746][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.569240][ T5892] usb 1-1: config 0 descriptor?? [ 206.116628][ T5892] usb 1-1: USB disconnect, device number 9 [ 207.313937][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 207.424244][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 207.430409][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 207.437616][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 207.516983][ T788] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.546510][ T788] usb 3-1: config 0 has no interface number 0 [ 207.571577][ T788] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 207.581140][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.589955][ T788] usb 3-1: Product: syz [ 207.598624][ T788] usb 3-1: Manufacturer: syz [ 207.603288][ T788] usb 3-1: SerialNumber: syz [ 207.624306][ T788] usb 3-1: config 0 descriptor?? [ 207.704167][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.838648][ T788] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 207.862528][ T788] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 207.874272][ T788] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 207.884377][ T788] usb 3-1: media controller created [ 207.903486][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 207.918722][ T9] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 207.938122][ T9] usb 4-1: config 0 has no interface number 0 [ 207.948155][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.957178][ T9] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 207.977519][ T9] usb 4-1: config 0 interface 49 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 208.003164][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 208.016996][ T9] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 208.027848][ T9] usb 4-1: Product: syz [ 208.032309][ T9] usb 4-1: Manufacturer: syz [ 208.037361][ T9] usb 4-1: SerialNumber: syz [ 208.046472][ T9] usb 4-1: config 0 descriptor?? [ 208.062428][ T6953] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 208.076780][ T6953] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 208.294361][ T788] usb 3-1: USB disconnect, device number 4 [ 208.322625][ T9] qmi_wwan: probe of 4-1:0.49 failed with error -22 [ 208.368307][ T9] usb 4-1: USB disconnect, device number 6 [ 208.551978][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 210.657014][ T5793] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 210.665027][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 211.775500][ T6991] syzkaller0: entered promiscuous mode [ 211.783842][ T6991] syzkaller0: entered allmulticast mode [ 213.284032][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 213.796375][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 213.811408][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 213.819804][ T9] usb 2-1: config 0 has no interface number 0 [ 213.831448][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 214.045082][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 214.081162][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.097096][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 214.108757][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.125507][ T9] usb 2-1: config 0 descriptor?? [ 214.146689][ T9] ldusb 2-1:0.55: Interrupt in endpoint not found [ 214.652954][ T9] usb 2-1: USB disconnect, device number 5 [ 216.152351][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'. [ 216.330911][ T7029] syzkaller0: entered promiscuous mode [ 216.347243][ T7029] syzkaller0: entered allmulticast mode [ 216.454895][ T7032] kvm: Disabled LAPIC found during irq injection [ 217.554098][ T7041] netlink: set zone limit has 8 unknown bytes [ 217.850005][ T7049] netlink: 200 bytes leftover after parsing attributes in process `syz.2.347'. [ 219.583857][ T7062] netlink: 128 bytes leftover after parsing attributes in process `syz.3.352'. [ 223.326232][ T7091] loop3: detected capacity change from 0 to 1024 [ 223.431531][ T7091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.682072][ T7091] EXT4-fs warning (device loop3): ext4_rmdir:3243: inode #11: comm syz.3.362: empty directory 'file1' has too many links (111) [ 223.791746][ T7104] loop2: detected capacity change from 0 to 8192 [ 223.792627][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.147557][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 225.235723][ T9] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 225.441169][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.512423][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 225.539124][ T9] usb 2-1: config 0 has no interface number 0 [ 225.559394][ T9] usb 2-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 225.594023][ T9] usb 2-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 225.598956][ T7117] loop2: detected capacity change from 0 to 512 [ 225.611740][ T9] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.664337][ T7113] ------------[ cut here ]------------ [ 225.669980][ T7113] WARNING: CPU: 1 PID: 7113 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 225.679127][ T7113] Modules linked in: [ 225.683095][ T7113] CPU: 1 PID: 7113 Comm: syz.0.369 Not tainted syzkaller #0 [ 225.690545][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 225.697301][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 225.701162][ T7113] RIP: 0010:__alloc_pages+0x2de/0x460 [ 225.717756][ T7113] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 2e ff 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 225.732517][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.737609][ T7113] RSP: 0018:ffffc90019867a00 EFLAGS: 00010246 [ 225.751765][ T7113] RAX: ffffc90019867a00 RBX: 1ffff9200330cf44 RCX: 0000000000000000 [ 225.759873][ T7113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90019867a68 [ 225.769365][ T7113] RBP: ffffc90019867b00 R08: ffffc90019867a67 R09: 0000000000000000 [ 225.774475][ T7117] ======================================================= [ 225.774475][ T7117] WARNING: The mand mount option has been deprecated and [ 225.774475][ T7117] and is ignored by this kernel. Remove the mand [ 225.774475][ T7117] option from the mount to silence this warning. [ 225.774475][ T7117] ======================================================= [ 225.777756][ T7113] R10: ffffc90019867a40 R11: fffff5200330cf4d R12: 0000000000000013 [ 225.820507][ T7113] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 225.828696][ T7113] FS: 00007f52777f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 225.837743][ T7113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.840108][ T9] usb 2-1: Product: syz [ 225.844433][ T7113] CR2: 000000110c42ac94 CR3: 00000000244c3000 CR4: 00000000003526e0 [ 225.844458][ T7113] Call Trace: [ 225.844468][ T7113] [ 225.853509][ T7117] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.856714][ T7113] ? zone_statistics+0x170/0x170 [ 225.863631][ T9] usb 2-1: Manufacturer: syz [ 225.875572][ T7113] ? __might_fault+0xaa/0x120 [ 225.889197][ T7113] ? __lock_acquire+0x7c80/0x7c80 [ 225.891138][ T7117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.894355][ T7113] __kmalloc_large_node+0x8c/0x1e0 [ 225.907216][ T9] usb 2-1: SerialNumber: syz [ 225.908140][ T7113] ? raw_ioctl+0x1944/0x3b70 [ 225.917344][ T7113] __kmalloc+0x111/0x240 [ 225.921658][ T7113] raw_ioctl+0x1944/0x3b70 [ 225.925535][ T9] usb 2-1: config 0 descriptor?? [ 225.926162][ T7113] ? tomoyo_path_number_perm+0x477/0x590 [ 225.936817][ T7113] ? __kmem_cache_free+0xba/0x1f0 [ 225.941875][ T7113] ? tomoyo_path_number_perm+0x4dc/0x590 [ 225.947618][ T7113] ? tomoyo_path_number_perm+0x1ba/0x590 [ 225.953302][ T7113] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 225.958977][ T7113] ? make_qualifier+0x250/0x250 [ 225.963911][ T7113] ? __fget_files+0x28/0x4d0 [ 225.969261][ T7113] ? bpf_lsm_file_ioctl+0x9/0x10 [ 225.974471][ T7113] ? security_file_ioctl+0x80/0xa0 [ 225.979623][ T7113] ? make_qualifier+0x250/0x250 [ 225.984967][ T7113] __se_sys_ioctl+0xfd/0x170 [ 225.989623][ T7113] do_syscall_64+0x55/0xb0 [ 225.994233][ T7113] ? clear_bhb_loop+0x40/0x90 [ 225.998962][ T7113] ? clear_bhb_loop+0x40/0x90 [ 226.003763][ T7113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.009706][ T7113] RIP: 0033:0x7f527958f749 [ 226.014208][ T7113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.033919][ T7113] RSP: 002b:00007f52777f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.042355][ T7113] RAX: ffffffffffffffda RBX: 00007f52797e5fa0 RCX: 00007f527958f749 [ 226.050463][ T7113] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000003 [ 226.058515][ T7113] RBP: 00007f5279613f91 R08: 0000000000000000 R09: 0000000000000000 [ 226.066536][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.075538][ T7113] R13: 00007f52797e6038 R14: 00007f52797e5fa0 R15: 00007ffe4ea69098 [ 226.083773][ T7113] [ 226.086830][ T7113] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 226.094166][ T7113] CPU: 1 PID: 7113 Comm: syz.0.369 Not tainted syzkaller #0 [ 226.101463][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.111535][ T7113] Call Trace: [ 226.114840][ T7113] [ 226.117800][ T7113] dump_stack_lvl+0x16c/0x230 [ 226.122515][ T7113] ? show_regs_print_info+0x20/0x20 [ 226.127737][ T7113] ? load_image+0x3b0/0x3b0 [ 226.132288][ T7113] panic+0x2c0/0x710 [ 226.136219][ T7113] ? bpf_jit_dump+0xd0/0xd0 [ 226.140789][ T7113] __warn+0x2e0/0x470 [ 226.144813][ T7113] ? __alloc_pages+0x2de/0x460 [ 226.149638][ T7113] ? __alloc_pages+0x2de/0x460 [ 226.154424][ T7113] report_bug+0x2be/0x4f0 [ 226.158780][ T7113] ? __alloc_pages+0x2de/0x460 [ 226.163577][ T7113] ? __alloc_pages+0x2de/0x460 [ 226.168463][ T7113] ? __alloc_pages+0x2e0/0x460 [ 226.173273][ T7113] handle_bug+0xcf/0x120 [ 226.177546][ T7113] exc_invalid_op+0x1a/0x50 [ 226.182118][ T7113] asm_exc_invalid_op+0x1a/0x20 [ 226.187009][ T7113] RIP: 0010:__alloc_pages+0x2de/0x460 [ 226.192410][ T7113] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 2e ff 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 226.212042][ T7113] RSP: 0018:ffffc90019867a00 EFLAGS: 00010246 [ 226.218130][ T7113] RAX: ffffc90019867a00 RBX: 1ffff9200330cf44 RCX: 0000000000000000 [ 226.226294][ T7113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90019867a68 [ 226.234278][ T7113] RBP: ffffc90019867b00 R08: ffffc90019867a67 R09: 0000000000000000 [ 226.242279][ T7113] R10: ffffc90019867a40 R11: fffff5200330cf4d R12: 0000000000000013 [ 226.250310][ T7113] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 226.258317][ T7113] ? zone_statistics+0x170/0x170 [ 226.263325][ T7113] ? __might_fault+0xaa/0x120 [ 226.268021][ T7113] ? __lock_acquire+0x7c80/0x7c80 [ 226.273059][ T7113] __kmalloc_large_node+0x8c/0x1e0 [ 226.278191][ T7113] ? raw_ioctl+0x1944/0x3b70 [ 226.282798][ T7113] __kmalloc+0x111/0x240 [ 226.287065][ T7113] raw_ioctl+0x1944/0x3b70 [ 226.291495][ T7113] ? tomoyo_path_number_perm+0x477/0x590 [ 226.297168][ T7113] ? __kmem_cache_free+0xba/0x1f0 [ 226.302212][ T7113] ? tomoyo_path_number_perm+0x4dc/0x590 [ 226.307858][ T7113] ? tomoyo_path_number_perm+0x1ba/0x590 [ 226.313509][ T7113] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 226.318981][ T7113] ? make_qualifier+0x250/0x250 [ 226.323876][ T7113] ? __fget_files+0x28/0x4d0 [ 226.328541][ T7113] ? bpf_lsm_file_ioctl+0x9/0x10 [ 226.333610][ T7113] ? security_file_ioctl+0x80/0xa0 [ 226.338757][ T7113] ? make_qualifier+0x250/0x250 [ 226.343650][ T7113] __se_sys_ioctl+0xfd/0x170 [ 226.348284][ T7113] do_syscall_64+0x55/0xb0 [ 226.352719][ T7113] ? clear_bhb_loop+0x40/0x90 [ 226.357412][ T7113] ? clear_bhb_loop+0x40/0x90 [ 226.362102][ T7113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.368012][ T7113] RIP: 0033:0x7f527958f749 [ 226.372437][ T7113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.392498][ T7113] RSP: 002b:00007f52777f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.400971][ T7113] RAX: ffffffffffffffda RBX: 00007f52797e5fa0 RCX: 00007f527958f749 [ 226.408955][ T7113] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000003 [ 226.416941][ T7113] RBP: 00007f5279613f91 R08: 0000000000000000 R09: 0000000000000000 [ 226.424951][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.432953][ T7113] R13: 00007f52797e6038 R14: 00007f52797e5fa0 R15: 00007ffe4ea69098 [ 226.440962][ T7113] [ 226.444390][ T7113] Kernel Offset: disabled [ 226.448726][ T7113] Rebooting in 86400 seconds..