last executing test programs: 13.714905375s ago: executing program 0 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 12.35145329s ago: executing program 0 (id=196): syz_usb_connect(0x3, 0x1cf, &(0x7f0000000640)=ANY=[@ANYBLOB="120100020d07d140f80602a3297f000000010902bd01010000800009048f00"], 0x0) 9.441337658s ago: executing program 0 (id=205): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x42083) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000080)=[{0x3, 0x6000, 0x0, 0x0}, {0x1, 0x2a00, 0x0, 0x0}, {0x101, 0x8001, 0x0, 0x0}], 0x3}) 8.865929644s ago: executing program 2 (id=214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.855011447s ago: executing program 3 (id=215): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 7.52691164s ago: executing program 4 (id=216): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x502, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x5, {0x5, 0xf, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 7.345301377s ago: executing program 1 (id=217): lsm_get_self_attr(0x64, 0x0, &(0x7f00000003c0), 0x0) 7.2539782s ago: executing program 3 (id=218): r0 = syz_usb_connect(0x3, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 7.253617429s ago: executing program 2 (id=219): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x9e8}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xfffffefa) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.192554089s ago: executing program 1 (id=220): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x20) 7.073266262s ago: executing program 1 (id=221): epoll_create1(0x0) socket(0x1, 0x80802, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00220500000083"], 0x0}, 0x0) 6.697708963s ago: executing program 0 (id=222): syz_usb_connect(0x3, 0x52, &(0x7f00000012c0)={{0x12, 0x1, 0x300, 0x68, 0x56, 0xa8, 0x8, 0x421, 0x70, 0xdd7a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0xff, 0x7, 0x60, 0x1, [{{0x9, 0x4, 0x46, 0xa0, 0x0, 0x2, 0x2, 0xff, 0xd, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x3, 0xdb, 0x3}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x50f6, 0x401, 0x3}}]}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 6.625965933s ago: executing program 3 (id=223): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x80000000) 6.4162093s ago: executing program 3 (id=224): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004810}}], 0x1, 0x4000090) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) 5.216449551s ago: executing program 3 (id=225): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5.061836369s ago: executing program 2 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, @phonet={0x23, 0x0, 0x7c, 0x9}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, @l2={0x1f, 0x3, @any, 0x4, 0x2}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x784928ec, 0x1, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe24) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r5}, 0x20) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4604070003050000000000000003000300060000000903000200000000fdffffff0e00000000402000"], 0x38) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 5.035014833s ago: executing program 3 (id=227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r5, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r5}}, 0x1c) 4.82799671s ago: executing program 1 (id=228): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000065a000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000339000/0x3000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x328, 0x1, 0x32314247, 0x7, 0x7, [{0xd, 0x4}, {0xfffffffe, 0x7}, {0x0, 0x6}, {0x8, 0x844}, {0x1, 0x4}, {0x6, 0x5}, {0xfffffff9, 0x40}, {0x3, 0x2ba}], 0x9, 0x7, 0x1, 0x0, 0x1}}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000440)="d0e2bf3bcf02752029f0d6b8cfb2078a98ee42ffe3b40e766878ce75951a22186cbaadf76be635b4c1a93015ed7fb427334a6204259081d725646f5fc0f1303fb4ba76266c56c953b25c11b6da634e0256e9320f5be4798e4889adb63978e336b307b520d02d507328610de6c1a4fa536d2394c064da864c18c8d8223df25625395d3dc4c1314156d758ae3699c8111f60349c0eeaa3b65ee673c077ac53510d693b3b51bbe29f3504a60120eb6489cb", 0xb0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@host, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7a5, &(0x7f0000000140)={{@host, 0x25}, 0x1}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000008, 0x12, r3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) getdents64(r5, &(0x7f00000028c0)=""/4097, 0x1001) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.141721539s ago: executing program 4 (id=229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgid(0x0) prlimit64(r1, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20048010) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}]}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) 4.062998533s ago: executing program 2 (id=230): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'rw\x00'}, 0x9) 4.051665593s ago: executing program 0 (id=231): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xb6b8, 0x80, 0x2, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfff0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) 3.111194628s ago: executing program 0 (id=232): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x42083) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000080)=[{0x3, 0x6000, 0x0, 0x0}, {0x1, 0x2a00, 0x0, 0x0}, {0x101, 0x8001, 0x0, 0x0}], 0x3}) 3.110806161s ago: executing program 4 (id=233): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x148, 0x1170, 0x1170, 0x148, 0x1170, 0x218, 0x1398, 0x1398, 0x218, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', [0x0, 0x322, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000], 'veth0_vlan\x00', 'veth1_macvtap\x00', {}, {}, 0x21, 0x0, 0x0, 0x51}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x4e20, 0x4e22, 0x0, 0x0, 0x2, 0x4e21, 0x40], [0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x7d, 0x1], 0xfe}}, @common=@hl={{0x28}, {0x0, 0x20}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x4dc8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000400)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x15, 0x3, 'rr\x00', 0x1, 0x3, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x6, 'sh\x00', 0x0, 0x60000000, 0x54}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x200, 0x8001, 0x4}}, 0x44) setrlimit(0xd, &(0x7f0000000000)={0x80000000, 0x2d}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(0x0, 0x0) fanotify_init(0xf00, 0x1) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 2.761165279s ago: executing program 2 (id=234): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x80000000) 2.500430932s ago: executing program 4 (id=235): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x4000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.706956174s ago: executing program 2 (id=236): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x9e8}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xfffffefa) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.241818793s ago: executing program 4 (id=237): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1.083501821s ago: executing program 4 (id=238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=@other={'decodes', ' ', 'io+mem'}, 0xf) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000f00000000000000000218120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', r6}, 0x94) 1.006876079s ago: executing program 1 (id=239): r0 = syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 1 (id=240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) accept4$packet(r2, 0x0, 0x0, 0x80400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 69.975224][ T5810] cgroup: Unknown subsys name 'net' [ 70.090156][ T5810] cgroup: Unknown subsys name 'cpuset' [ 70.098728][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.391834][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.398414][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.521866][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.756360][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.765030][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.772889][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.781157][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.781323][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.798282][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.798305][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.808451][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.814257][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.820252][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.827663][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.845270][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.856272][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.869925][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.880611][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.887999][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.897495][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.905502][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.913244][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.913630][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.921550][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.928798][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.943661][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.944491][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.952281][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.622887][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 74.686567][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 74.741841][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 74.854538][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 74.896124][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 75.044120][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.051499][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.059389][ T5820] bridge_slave_0: entered allmulticast mode [ 75.066490][ T5820] bridge_slave_0: entered promiscuous mode [ 75.074810][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.082137][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.089863][ T5831] bridge_slave_0: entered allmulticast mode [ 75.096933][ T5831] bridge_slave_0: entered promiscuous mode [ 75.125465][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.132762][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.140189][ T5820] bridge_slave_1: entered allmulticast mode [ 75.147765][ T5820] bridge_slave_1: entered promiscuous mode [ 75.155434][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.163228][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.170628][ T5831] bridge_slave_1: entered allmulticast mode [ 75.178444][ T5831] bridge_slave_1: entered promiscuous mode [ 75.185734][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.192939][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.200347][ T5821] bridge_slave_0: entered allmulticast mode [ 75.207724][ T5821] bridge_slave_0: entered promiscuous mode [ 75.258364][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.265531][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.272941][ T5821] bridge_slave_1: entered allmulticast mode [ 75.280131][ T5821] bridge_slave_1: entered promiscuous mode [ 75.358551][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.365722][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.373422][ T5826] bridge_slave_0: entered allmulticast mode [ 75.380595][ T5826] bridge_slave_0: entered promiscuous mode [ 75.402645][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.415355][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.435825][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.443534][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.451373][ T5826] bridge_slave_1: entered allmulticast mode [ 75.458514][ T5826] bridge_slave_1: entered promiscuous mode [ 75.465974][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.473545][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.481143][ T5830] bridge_slave_0: entered allmulticast mode [ 75.488299][ T5830] bridge_slave_0: entered promiscuous mode [ 75.498199][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.510337][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.538432][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.563019][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.570271][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.577704][ T5830] bridge_slave_1: entered allmulticast mode [ 75.584670][ T5830] bridge_slave_1: entered promiscuous mode [ 75.620387][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.671345][ T5831] team0: Port device team_slave_0 added [ 75.691422][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.715538][ T5820] team0: Port device team_slave_0 added [ 75.723883][ T5831] team0: Port device team_slave_1 added [ 75.758229][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.770090][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.782358][ T5820] team0: Port device team_slave_1 added [ 75.803335][ T5821] team0: Port device team_slave_0 added [ 75.824031][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.845663][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.852868][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.880236][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.892258][ T5827] Bluetooth: hci1: command tx timeout [ 75.897226][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.904784][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.931240][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.944562][ T5821] team0: Port device team_slave_1 added [ 75.957023][ T5827] Bluetooth: hci0: command tx timeout [ 76.011067][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.018111][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.044149][ T52] Bluetooth: hci2: command tx timeout [ 76.044183][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.050184][ T5834] Bluetooth: hci3: command tx timeout [ 76.066363][ T5827] Bluetooth: hci4: command tx timeout [ 76.078589][ T5826] team0: Port device team_slave_0 added [ 76.084980][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.091967][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.118250][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.145372][ T5830] team0: Port device team_slave_0 added [ 76.152943][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.159987][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.185910][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.199199][ T5826] team0: Port device team_slave_1 added [ 76.205629][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.212762][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.239310][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.260160][ T5830] team0: Port device team_slave_1 added [ 76.371895][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.379039][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.405378][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.419151][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.426093][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.451997][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.468809][ T5831] hsr_slave_0: entered promiscuous mode [ 76.475166][ T5831] hsr_slave_1: entered promiscuous mode [ 76.499465][ T5821] hsr_slave_0: entered promiscuous mode [ 76.506292][ T5821] hsr_slave_1: entered promiscuous mode [ 76.512928][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 76.518808][ T5821] Cannot create hsr debugfs directory [ 76.562384][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.569499][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.596026][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.635289][ T5820] hsr_slave_0: entered promiscuous mode [ 76.642085][ T5820] hsr_slave_1: entered promiscuous mode [ 76.648448][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 76.654187][ T5820] Cannot create hsr debugfs directory [ 76.679663][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.686629][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.712858][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.794321][ T5826] hsr_slave_0: entered promiscuous mode [ 76.800712][ T5826] hsr_slave_1: entered promiscuous mode [ 76.807016][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 76.812751][ T5826] Cannot create hsr debugfs directory [ 76.897904][ T5830] hsr_slave_0: entered promiscuous mode [ 76.904400][ T5830] hsr_slave_1: entered promiscuous mode [ 76.911371][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 76.917500][ T5830] Cannot create hsr debugfs directory [ 77.417885][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.431037][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.461531][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.480521][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.533577][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.557338][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.568666][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.579812][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.652323][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.684500][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.694634][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.705856][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.826273][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.855960][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.871349][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.882732][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.909770][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.948227][ T5834] Bluetooth: hci1: command tx timeout [ 78.027719][ T5834] Bluetooth: hci0: command tx timeout [ 78.041985][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.064714][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.076230][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.083589][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.101995][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.109326][ T5834] Bluetooth: hci3: command tx timeout [ 78.114723][ T5834] Bluetooth: hci4: command tx timeout [ 78.116994][ T52] Bluetooth: hci2: command tx timeout [ 78.130678][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.143591][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.153843][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.161052][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.182454][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.194428][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.273718][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.295413][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.306664][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.353983][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.361203][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.371634][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.378866][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.413119][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.420352][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.448824][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.456013][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.562371][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.602829][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.643752][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.651032][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.661459][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.668616][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.684039][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.713795][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.829247][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.928114][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.990450][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.997739][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.062599][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.081391][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.088619][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.135207][ T5821] veth0_vlan: entered promiscuous mode [ 79.175922][ T5821] veth1_vlan: entered promiscuous mode [ 79.245512][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.314240][ T5821] veth0_macvtap: entered promiscuous mode [ 79.384344][ T5821] veth1_macvtap: entered promiscuous mode [ 79.444965][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.472029][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.504813][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.531689][ T5831] veth0_vlan: entered promiscuous mode [ 79.564004][ T5938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.594577][ T5938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.603907][ T5938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.623255][ T5831] veth1_vlan: entered promiscuous mode [ 79.631572][ T5938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.705322][ T5826] veth0_vlan: entered promiscuous mode [ 79.793730][ T5820] veth0_vlan: entered promiscuous mode [ 79.799843][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.811093][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.820111][ T5826] veth1_vlan: entered promiscuous mode [ 79.830930][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.860755][ T5831] veth0_macvtap: entered promiscuous mode [ 79.891534][ T5820] veth1_vlan: entered promiscuous mode [ 79.913342][ T5831] veth1_macvtap: entered promiscuous mode [ 79.918479][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.930272][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.981762][ T5826] veth0_macvtap: entered promiscuous mode [ 80.016209][ T5826] veth1_macvtap: entered promiscuous mode [ 80.030760][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.033857][ T52] Bluetooth: hci1: command tx timeout [ 80.069982][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.070360][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.095668][ T5820] veth0_macvtap: entered promiscuous mode [ 80.107380][ T52] Bluetooth: hci0: command tx timeout [ 80.132281][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.145799][ T5820] veth1_macvtap: entered promiscuous mode [ 80.165735][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.174921][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.188135][ T52] Bluetooth: hci3: command tx timeout [ 80.188881][ T5834] Bluetooth: hci2: command tx timeout [ 80.194475][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.199091][ T5827] Bluetooth: hci4: command tx timeout [ 80.206384][ T5830] veth0_vlan: entered promiscuous mode [ 80.246495][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.286071][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.295118][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.328726][ T5830] veth1_vlan: entered promiscuous mode [ 80.341391][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.380843][ T5917] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.394472][ T5917] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.422911][ T5917] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.454328][ T5917] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.487197][ T5917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.495931][ T5917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.531780][ T5917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.542072][ T5917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.565518][ T5917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.591627][ T5917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.688140][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.700586][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.716316][ T5830] veth0_macvtap: entered promiscuous mode [ 80.772347][ T5830] veth1_macvtap: entered promiscuous mode [ 80.860687][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.870351][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.432858][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.436686][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.448620][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.499196][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.596360][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.604342][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.604419][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.604453][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.604484][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.626798][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.696994][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.704851][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.016977][ T5923] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.117030][ T5827] Bluetooth: hci1: command tx timeout [ 82.187197][ T5827] Bluetooth: hci0: command tx timeout [ 82.211709][ T5917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.216487][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.267937][ T5827] Bluetooth: hci4: command tx timeout [ 82.273382][ T5827] Bluetooth: hci2: command tx timeout [ 82.280404][ T5834] Bluetooth: hci3: command tx timeout [ 82.283806][ T5917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.348119][ T5923] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.409645][ T5923] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 82.425651][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.472775][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.486824][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.552387][ T5923] usb 3-1: config 0 descriptor?? [ 82.774158][ T5972] ======================================================= [ 82.774158][ T5972] WARNING: The mand mount option has been deprecated and [ 82.774158][ T5972] and is ignored by this kernel. Remove the mand [ 82.774158][ T5972] option from the mount to silence this warning. [ 82.774158][ T5972] ======================================================= [ 82.827838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.971502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.017254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.022728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.079494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.118570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.130529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.158620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.185230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 83.194249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.210138][ T5968] usb 3-1: USB disconnect, device number 2 [ 85.059529][ T5997] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.224710][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 86.536357][ T6021] 9p: Bad value for 'rfdno' [ 86.918126][ T979] cfg80211: failed to load regulatory.db [ 88.547082][ T6052] comedi comedi2: comedi_config --init_data is deprecated [ 89.318094][ T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 89.326538][ T52] Bluetooth: hci2: Injecting HCI hardware error event [ 89.335455][ T52] Bluetooth: hci2: hardware error 0x00 [ 89.444333][ T6065] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.950071][ T6071] qnx4: unable to read the superblock [ 91.547020][ T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 92.266912][ T6105] loop6: detected capacity change from 0 to 524288000 [ 92.318772][ T6105] loop6: detected capacity change from 524288000 to 524287951 [ 92.427149][ T5910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.496938][ T5969] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.930065][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 92.936896][ T5969] usb 3-1: Using ep0 maxpacket: 8 [ 92.954178][ T5969] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.954222][ T5910] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.986430][ T6114] trusted_key: syz.4.48 sent an empty control message without MSG_MORE. [ 93.017154][ T5969] usb 3-1: config 4 interface 0 has no altsetting 0 [ 93.049649][ T5969] usb 3-1: string descriptor 0 read error: -22 [ 93.061507][ T5910] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 93.072079][ T5969] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 93.102990][ T5910] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 93.112924][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.143302][ T5910] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 93.224148][ T5910] usb 2-1: config 128 has no interface number 0 [ 93.244462][ T5910] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 93.264496][ T5969] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 93.298325][ T5910] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.396154][ T5969] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 93.536129][ T5910] usb 2-1: config 128 interface 127 has no altsetting 0 [ 93.558816][ T5969] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 93.650771][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 93.660325][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 93.673793][ T5827] Bluetooth: hci4: hardware error 0x00 [ 93.705407][ T5969] usb 3-1: media controller created [ 93.708625][ T5910] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 93.755494][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.933011][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.972297][ T5910] usb 2-1: Product: syz [ 93.982518][ T5969] zl10353_read_register: readreg error (reg=127, ret==0) [ 94.013843][ T5910] usb 2-1: Manufacturer: syz [ 94.087708][ T5969] usb 3-1: USB disconnect, device number 3 [ 94.095155][ T5910] usb 2-1: SerialNumber: syz [ 95.509232][ T5910] usb 2-1: USB disconnect, device number 2 [ 96.040921][ T5827] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 96.340505][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.933860][ T6185] qnx4: unable to read the superblock [ 99.469494][ T6165] svc: failed to register nfsdv3 RPC service (errno 512). [ 99.478720][ T6165] svc: failed to register nfsaclv3 RPC service (errno 512). [ 99.736983][ T936] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.842133][ T6192] Zero length message leads to an empty skb [ 100.108346][ T936] usb 3-1: Using ep0 maxpacket: 8 [ 100.194261][ T936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.224186][ T936] usb 3-1: config 4 interface 0 has no altsetting 0 [ 100.228928][ T6195] 9p: Bad value for 'rfdno' [ 100.609130][ T936] usb 3-1: string descriptor 0 read error: -22 [ 100.615552][ T936] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 100.656892][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.783419][ T936] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 100.852648][ T936] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 100.852873][ T6201] warning: `syz.1.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.874040][ T936] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 100.924923][ T936] usb 3-1: media controller created [ 101.385917][ T936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.166177][ T936] zl10353_read_register: readreg error (reg=127, ret==0) [ 102.359647][ T936] usb 3-1: USB disconnect, device number 4 [ 102.524341][ T30] audit: type=1326 audit(1762728045.079:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f18f6c9 code=0x7ffc0000 [ 102.551939][ T30] audit: type=1326 audit(1762728045.079:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f856f18f6c9 code=0x7ffc0000 [ 102.578569][ T30] audit: type=1326 audit(1762728045.079:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f18f6c9 code=0x7ffc0000 [ 103.114978][ T30] audit: type=1326 audit(1762728045.079:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f18f6c9 code=0x7ffc0000 [ 103.336664][ T30] audit: type=1326 audit(1762728045.079:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f856f18f6c9 code=0x7ffc0000 [ 103.469406][ T6235] 9p: Bad value for 'rfdno' [ 103.873257][ T30] audit: type=1326 audit(1762728045.079:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f18f6c9 code=0x7ffc0000 [ 103.896378][ T30] audit: type=1326 audit(1762728045.079:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f856f18f6c9 code=0x7ffc0000 [ 103.932080][ T6240] openvswitch: netlink: Message has 584 unknown bytes. [ 104.033111][ T6244] qnx4: unable to read the superblock [ 104.606895][ T30] audit: type=1326 audit(1762728045.079:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f18f6c9 code=0x7ffc0000 [ 104.640675][ T6240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.967385][ T30] audit: type=1326 audit(1762728045.089:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f856f18f6c9 code=0x7ffc0000 [ 105.006720][ T30] audit: type=1326 audit(1762728047.249:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f18f6c9 code=0x7ffc0000 [ 105.200020][ T6251] sp0: Synchronizing with TNC [ 106.404493][ T6265] process 'syz.0.85' launched './file0' with NULL argv: empty string added [ 106.659629][ T979] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.196934][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 108.472489][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.482029][ T979] usb 4-1: config 4 interface 0 has no altsetting 0 [ 108.499748][ T979] usb 4-1: string descriptor 0 read error: -22 [ 108.525093][ T979] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 108.608658][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.675281][ T979] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 108.690894][ T979] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.733983][ T979] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 108.878790][ T6288] 9p: Bad value for 'rfdno' [ 109.126839][ T979] usb 4-1: media controller created [ 109.284606][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.716273][ T6298] ubi31: attaching mtd0 [ 109.737492][ T6298] ubi31: scanning is finished [ 109.742255][ T6298] ubi31: empty MTD device detected [ 110.168837][ T979] zl10353_read_register: readreg error (reg=127, ret==0) [ 110.397757][ T979] usb 4-1: USB disconnect, device number 2 [ 110.765201][ T6298] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 110.867138][ T6317] syz.3.98 uses obsolete (PF_INET,SOCK_PACKET) [ 111.376893][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.540514][ T44] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 111.610778][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.133590][ T44] usb 5-1: config 0 descriptor?? [ 112.168672][ T44] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 113.057024][ T44] gspca_sunplus: reg_w_riv err -71 [ 113.062325][ T44] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 113.129689][ T44] usb 5-1: USB disconnect, device number 2 [ 113.520719][ T6349] qnx4: unable to read the superblock [ 115.001157][ T5923] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.645289][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 115.684266][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.714958][ T5923] usb 2-1: config 4 interface 0 has no altsetting 0 [ 115.740294][ T5923] usb 2-1: string descriptor 0 read error: -22 [ 115.764681][ T5923] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 115.826036][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.861323][ T5923] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 115.898665][ T5923] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.926452][ T5923] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 115.951522][ T5923] usb 2-1: media controller created [ 116.013225][ T6370] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.014436][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.103959][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.137997][ T5923] zl10353_read_register: readreg error (reg=127, ret==0) [ 116.316864][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 116.484084][ T979] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.522081][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.584667][ T44] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 116.599393][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.624130][ T44] usb 4-1: Product: syz [ 116.667484][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 116.678519][ T979] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 116.688643][ T44] usb 4-1: Manufacturer: syz [ 116.693265][ T44] usb 4-1: SerialNumber: syz [ 116.698213][ T979] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.717719][ T6370] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 116.821895][ T5923] usb 2-1: USB disconnect, device number 3 [ 117.282707][ T979] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.292810][ T979] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.318301][ T979] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.574667][ T44] usb 4-1: config 0 descriptor?? [ 117.806924][ T979] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.859824][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.891144][ T44] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 118.518490][ T43] usb 4-1: Failed to submit usb control message: -71 [ 118.527034][ T979] usb 4-1: USB disconnect, device number 3 [ 118.546863][ T43] usb 4-1: unable to send the bmi data to the device: -71 [ 118.563011][ T43] usb 4-1: unable to get target info from device [ 118.578584][ T43] usb 4-1: could not get target info (-71) [ 118.596295][ T43] usb 4-1: could not probe fw (-71) [ 118.951574][ T6407] usbtmc 3-1:16.0: simple usb_control_msg failed -32 [ 118.976586][ T44] usb 3-1: USB disconnect, device number 5 [ 119.676851][ T979] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.173422][ T5827] Bluetooth: hci3: link tx timeout [ 120.179731][ T5827] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.196848][ T52] Bluetooth: hci3: link tx timeout [ 120.202003][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.209911][ T52] Bluetooth: hci3: link tx timeout [ 120.215034][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.261314][ T6420] netlink: 64 bytes leftover after parsing attributes in process `syz.0.127'. [ 120.270985][ T6420] nbd: must specify at least one socket [ 120.276829][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 120.294404][ T979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.315170][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.341851][ T979] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.356941][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.372187][ T979] usb 4-1: Product: syz [ 120.380100][ T979] usb 4-1: Manufacturer: syz [ 120.385663][ T979] usb 4-1: SerialNumber: syz [ 120.396895][ T936] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.827710][ T979] usb 4-1: 0:2 : does not exist [ 120.844811][ T979] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 120.946173][ T979] usb 4-1: USB disconnect, device number 4 [ 120.995373][ T936] usb 3-1: Using ep0 maxpacket: 8 [ 121.008473][ T936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.038429][ T936] usb 3-1: config 4 interface 0 has no altsetting 0 [ 121.056052][ T936] usb 3-1: string descriptor 0 read error: -22 [ 121.075182][ T936] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 121.083613][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.100227][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.084012][ T6428] syz.1.130 (6428): drop_caches: 2 [ 122.120092][ T936] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 122.151482][ T936] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 122.228432][ T936] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 122.235722][ T936] usb 3-1: media controller created [ 122.266979][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 122.672855][ T936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.237321][ T6438] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.231167][ T936] zl10353_read_register: readreg error (reg=127, ret==0) [ 125.292610][ T6451] qnx4: unable to read the superblock [ 125.846884][ T936] usb 3-1: USB disconnect, device number 6 [ 127.538998][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 127.539015][ T30] audit: type=1326 audit(1762728070.109:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473b18f6c9 code=0x7ffc0000 [ 127.648676][ T30] audit: type=1326 audit(1762728070.139:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f473b18f6c9 code=0x7ffc0000 [ 127.694618][ T30] audit: type=1326 audit(1762728070.139:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473b18f6c9 code=0x7ffc0000 [ 127.731865][ T30] audit: type=1326 audit(1762728070.139:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f473b18f6c9 code=0x7ffc0000 [ 127.796538][ T30] audit: type=1326 audit(1762728070.139:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473b18f6c9 code=0x7ffc0000 [ 127.833138][ T6480] No control pipe specified [ 127.864759][ T30] audit: type=1326 audit(1762728070.139:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f473b18f6c9 code=0x7ffc0000 [ 127.951844][ T30] audit: type=1326 audit(1762728070.159:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473b18f6c9 code=0x7ffc0000 [ 128.015444][ T30] audit: type=1326 audit(1762728070.179:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f473b18f6c9 code=0x7ffc0000 [ 128.038577][ T30] audit: type=1326 audit(1762728070.179:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473b18f6c9 code=0x7ffc0000 [ 128.060791][ T30] audit: type=1326 audit(1762728070.179:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f473b18f6c9 code=0x7ffc0000 [ 128.195490][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.006852][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 129.496873][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.513971][ T10] usb 4-1: config 4 interface 0 has no altsetting 0 [ 129.541257][ T10] usb 4-1: string descriptor 0 read error: -22 [ 129.557159][ T10] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 129.770853][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.007698][ T10] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 130.174859][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.216086][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 130.447058][ T6501] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.775199][ T10] usb 4-1: media controller created [ 130.916390][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.049094][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 131.324022][ T10] usb 4-1: USB disconnect, device number 5 [ 132.079894][ T6523] netlink: zone id is out of range [ 132.085055][ T6523] netlink: zone id is out of range [ 132.148220][ T6523] netlink: get zone limit has 4 unknown bytes [ 132.728574][ T936] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.831797][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838178][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.887007][ T936] usb 5-1: Using ep0 maxpacket: 32 [ 132.909898][ T936] usb 5-1: config 32 has an invalid interface number: 85 but max is 0 [ 132.996705][ T936] usb 5-1: config 32 has no interface number 0 [ 133.028970][ T936] usb 5-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.263587][ T936] usb 5-1: config 32 interface 85 has no altsetting 0 [ 133.537227][ T936] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 133.546622][ T936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.598569][ T936] usb 5-1: Product: syz [ 133.616308][ T936] usb 5-1: Manufacturer: syz [ 133.656824][ T936] usb 5-1: SerialNumber: syz [ 134.067025][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.260785][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 134.276525][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.295896][ T10] usb 1-1: config 4 interface 0 has no altsetting 0 [ 134.323162][ T10] usb 1-1: string descriptor 0 read error: -22 [ 134.347108][ T936] appletouch 5-1:32.85: Geyser mode initialized. [ 134.351373][ T10] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 134.370033][ T936] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.85/input/input5 [ 134.386850][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.432677][ T10] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 134.472334][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.505533][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 134.529824][ T10] usb 1-1: media controller created [ 134.548154][ T5910] usb 5-1: USB disconnect, device number 3 [ 134.548220][ C0] appletouch 5-1:32.85: atp_complete: usb_submit_urb failed with result -19 [ 134.620548][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.685663][ T5910] appletouch 5-1:32.85: input: appletouch disconnected [ 134.742366][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 134.807958][ T10] usb 1-1: USB disconnect, device number 2 [ 137.596952][ T5969] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.767073][ T5969] usb 1-1: Using ep0 maxpacket: 8 [ 137.796361][ T5969] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.852688][ T5969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.899279][ T5969] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14385, setting to 1024 [ 138.029676][ T5969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 138.040160][ T5969] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.053669][ T5969] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.913431][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.200380][ T5969] usb 1-1: GET_CAPABILITIES returned 0 [ 139.225946][ T5969] usbtmc 1-1:16.0: can't read capabilities [ 139.248619][ T5902] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.296966][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 139.414422][ T5969] usb 1-1: USB disconnect, device number 3 [ 139.436873][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 139.473777][ T10] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 139.486935][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.492436][ T10] usb 4-1: config 0 has no interface number 0 [ 139.514462][ T5902] usb 5-1: config 4 interface 0 has no altsetting 0 [ 139.516520][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 139.551556][ T5902] usb 5-1: string descriptor 0 read error: -22 [ 139.557998][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.559218][ T5902] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 139.575709][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.609004][ T10] usb 4-1: Product: syz [ 139.613212][ T10] usb 4-1: Manufacturer: syz [ 139.618270][ T10] usb 4-1: SerialNumber: syz [ 139.635448][ T10] usb 4-1: config 0 descriptor?? [ 139.648421][ T5902] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 139.724492][ T5902] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 139.746631][ T5902] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 139.755229][ T5902] usb 5-1: media controller created [ 139.816044][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.914890][ T5902] zl10353_read_register: readreg error (reg=127, ret==0) [ 140.051894][ T5902] usb 5-1: USB disconnect, device number 4 [ 140.975705][ T10] usb 4-1: Firmware version (0.0) predates our first public release. [ 140.984311][ T10] usb 4-1: Please update to version 0.2 or newer [ 142.567314][ T10] usb 4-1: USB disconnect, device number 6 [ 142.889189][ T979] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 143.530789][ T979] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 143.554672][ T979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.578009][ T979] usb 1-1: config 0 has no interface number 0 [ 143.709209][ T979] usb 1-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=7f.29 [ 143.725039][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.757769][ T979] usb 1-1: config 0 descriptor?? [ 144.018884][ T5940] usb 1-1: USB disconnect, device number 4 [ 144.897663][ T6717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.208'. [ 145.286830][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.407285][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 146.418276][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.429168][ T9] usb 1-1: config 4 interface 0 has no altsetting 0 [ 146.440236][ T9] usb 1-1: string descriptor 0 read error: -22 [ 146.446949][ T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 146.501573][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.800139][ T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 146.890496][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 146.987109][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 147.005937][ T9] usb 1-1: media controller created [ 147.028867][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.086029][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 147.172444][ T9] usb 1-1: USB disconnect, device number 5 [ 147.178468][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 147.341462][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 147.353548][ T10] usb 5-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 147.363703][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.381827][ T10] usb 5-1: config 0 descriptor?? [ 147.399885][ T6750] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 147.526964][ T5940] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 147.686880][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 147.697149][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.708957][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.720204][ T5940] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 147.733967][ T5940] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 147.743747][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.784766][ T5940] usb 2-1: config 0 descriptor?? [ 147.842019][ T10] waltop 0003:172F:0502.0001: unknown main item tag 0x0 [ 147.853883][ T10] waltop 0003:172F:0502.0001: item fetching failed at offset 3/5 [ 147.864739][ T10] waltop 0003:172F:0502.0001: probe with driver waltop failed with error -22 [ 147.927121][ T5969] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.126863][ T5969] usb 1-1: Using ep0 maxpacket: 8 [ 148.215446][ T5969] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.245210][ T5940] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 148.836508][ T5969] usb 1-1: config 255 has an invalid interface number: 70 but max is 0 [ 148.860886][ T5969] usb 1-1: config 255 has no interface number 0 [ 148.895538][ T5969] usb 1-1: config 255 interface 70 has no altsetting 0 [ 148.929791][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 148.929808][ T30] audit: type=1800 audit(1762728091.499:45): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.224" name="bus" dev="ramfs" ino=11439 res=0 errno=0 [ 148.960631][ T5969] usb 1-1: New USB device found, idVendor=0421, idProduct=0070, bcdDevice=dd.7a [ 148.995197][ T5940] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 149.005048][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.037020][ T5940] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 149.047653][ T5969] usb 1-1: Product: syz [ 149.051877][ T5969] usb 1-1: Manufacturer: syz [ 149.056490][ T5969] usb 1-1: SerialNumber: syz [ 149.119296][ T936] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 149.151813][ T5940] usb 2-1: USB disconnect, device number 4 [ 149.169874][ T936] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 149.195444][ T936] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 149.249598][ T936] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 149.304511][ T5969] rndis_host 1-1:255.70: More than one union descriptor, skipping ... [ 149.317522][ T5969] usb 1-1: bad CDC descriptors [ 149.323620][ T5969] cdc_acm 1-1:255.70: More than one union descriptor, skipping ... [ 149.335694][ T5969] usb 1-1: USB disconnect, device number 6 [ 150.066378][ T10] usb 5-1: USB disconnect, device number 5 [ 150.376635][ T6781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.228'. [ 151.517060][ T5969] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.726867][ T5969] usb 1-1: Using ep0 maxpacket: 8 [ 151.747924][ T5969] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.783849][ T5969] usb 1-1: config 4 interface 0 has no altsetting 0 [ 151.823848][ T5969] usb 1-1: string descriptor 0 read error: -22 [ 151.840807][ T5969] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 151.859322][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.787572][ T5969] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 152.805978][ T5969] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 152.827962][ T5969] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 152.838863][ T5969] usb 1-1: media controller created [ 152.851378][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.085791][ T5969] zl10353_read_register: readreg error (reg=127, ret==0) [ 154.198159][ T5969] usb 1-1: USB disconnect, device number 7 [ 154.376495][ T6812] ------------[ cut here ]------------ [ 154.382340][ T6812] WARNING: arch/x86/kvm/x86.c:13965 at kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0, CPU#1: syz.1.240/6812 [ 154.394490][ T6812] Modules linked in: [ 154.398594][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.1.240 Not tainted syzkaller #0 PREEMPT(full) [ 154.407852][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.417969][ T6812] RIP: 0010:kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 154.425629][ T6812] Code: 00 65 48 8b 0d 58 41 2e 11 48 3b 4c 24 40 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 7f 17 0a cc e8 48 e1 79 00 90 <0f> 0b 90 b0 01 eb c0 e8 4b 91 14 0a f3 0f 1e fa 4c 8d b3 f8 02 00 [ 154.445620][ T6812] RSP: 0018:ffffc9001b28f460 EFLAGS: 00010287 [ 154.451717][ T6812] RAX: ffffffff81479ee8 RBX: ffff8880344f8000 RCX: 0000000000080000 [ 154.459720][ T6812] RDX: ffffc900045e2000 RSI: 00000000000024ff RDI: 0000000000002500 [ 154.467719][ T6812] RBP: ffffc9001b28f4e8 R08: ffff8880344f803f R09: 1ffff1100689f007 [ 154.475692][ T6812] R10: dffffc0000000000 R11: ffffed100689f008 R12: 1ffff92003651e8c [ 154.483774][ T6812] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 154.491894][ T6812] FS: 00007f85700b06c0(0000) GS:ffff888125fc2000(0000) knlGS:0000000000000000 [ 154.500953][ T6812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.507803][ T6812] CR2: 0000000000000000 CR3: 00000000318fe000 CR4: 00000000003526f0 [ 154.515880][ T6812] Call Trace: [ 154.519316][ T6812] [ 154.522267][ T6812] ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10 [ 154.529710][ T6812] kvm_check_async_pf_completion+0x102/0x3c0 [ 154.535718][ T6812] ? kvm_service_local_tlb_flush_requests+0xed/0x130 [ 154.542494][ T6812] vcpu_run+0x26be/0x7760 [ 154.546961][ T6812] ? vcpu_run+0x364e/0x7760 [ 154.551517][ T6812] ? __pfx_vcpu_run+0x10/0x10 [ 154.556281][ T6812] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 154.562085][ T6812] ? rcu_is_watching+0x15/0xb0 [ 154.566907][ T6812] kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0 [ 154.572547][ T6812] ? __mutex_trylock_common+0x153/0x260 [ 154.578136][ T6812] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 154.583875][ T6812] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 154.590058][ T6812] ? rcu_is_watching+0x15/0xb0 [ 154.594846][ T6812] ? trace_contention_end+0x39/0x120 [ 154.600313][ T6812] ? look_up_lock_class+0x74/0x170 [ 154.605548][ T6812] ? register_lock_class+0x51/0x320 [ 154.610856][ T6812] ? __lock_acquire+0xab9/0xd20 [ 154.615738][ T6812] kvm_vcpu_ioctl+0x99a/0xed0 [ 154.620486][ T6812] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.625732][ T6812] ? __fget_files+0x2a/0x420 [ 154.630394][ T6812] ? __fget_files+0x3a0/0x420 [ 154.635090][ T6812] ? __fget_files+0x2a/0x420 [ 154.639764][ T6812] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.644723][ T6812] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.650000][ T6812] __se_sys_ioctl+0xfc/0x170 [ 154.654599][ T6812] do_syscall_64+0xfa/0xfa0 [ 154.659150][ T6812] ? irqentry_exit+0x10f/0x640 [ 154.663935][ T6812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.670084][ T6812] ? clear_bhb_loop+0x60/0xb0 [ 154.674795][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.680813][ T6812] RIP: 0033:0x7f856f18f6c9 [ 154.685253][ T6812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.705032][ T6812] RSP: 002b:00007f85700b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.713543][ T6812] RAX: ffffffffffffffda RBX: 00007f856f3e5fa0 RCX: 00007f856f18f6c9 [ 154.721582][ T6812] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 154.729597][ T6812] RBP: 00007f856f211f91 R08: 0000000000000000 R09: 0000000000000000 [ 154.737629][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.745610][ T6812] R13: 00007f856f3e6038 R14: 00007f856f3e5fa0 R15: 00007ffd2657d088 [ 154.753676][ T6812] [ 154.756716][ T6812] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.764093][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.1.240 Not tainted syzkaller #0 PREEMPT(full) [ 154.773365][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.783422][ T6812] Call Trace: [ 154.786717][ T6812] [ 154.789661][ T6812] dump_stack_lvl+0x99/0x250 [ 154.794254][ T6812] ? __asan_memcpy+0x40/0x70 [ 154.798858][ T6812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.804055][ T6812] ? __pfx__printk+0x10/0x10 [ 154.808652][ T6812] vpanic+0x237/0x6d0 [ 154.812646][ T6812] ? __pfx_vpanic+0x10/0x10 [ 154.817150][ T6812] ? is_bpf_text_address+0x292/0x2b0 [ 154.822528][ T6812] ? is_bpf_text_address+0x26/0x2b0 [ 154.827931][ T6812] panic+0xb9/0xc0 [ 154.831661][ T6812] ? __pfx_panic+0x10/0x10 [ 154.836104][ T6812] __warn+0x334/0x4c0 [ 154.840094][ T6812] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 154.847122][ T6812] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 154.854140][ T6812] report_bug+0x2be/0x4f0 [ 154.858467][ T6812] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 154.865488][ T6812] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 154.872507][ T6812] ? kvm_arch_can_dequeue_async_page_present+0x1ab/0x2f0 [ 154.879526][ T6812] handle_bug+0x84/0x160 [ 154.883765][ T6812] exc_invalid_op+0x1a/0x50 [ 154.888268][ T6812] asm_exc_invalid_op+0x1a/0x20 [ 154.893111][ T6812] RIP: 0010:kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 154.900743][ T6812] Code: 00 65 48 8b 0d 58 41 2e 11 48 3b 4c 24 40 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 7f 17 0a cc e8 48 e1 79 00 90 <0f> 0b 90 b0 01 eb c0 e8 4b 91 14 0a f3 0f 1e fa 4c 8d b3 f8 02 00 [ 154.920339][ T6812] RSP: 0018:ffffc9001b28f460 EFLAGS: 00010287 [ 154.926410][ T6812] RAX: ffffffff81479ee8 RBX: ffff8880344f8000 RCX: 0000000000080000 [ 154.934371][ T6812] RDX: ffffc900045e2000 RSI: 00000000000024ff RDI: 0000000000002500 [ 154.942865][ T6812] RBP: ffffc9001b28f4e8 R08: ffff8880344f803f R09: 1ffff1100689f007 [ 154.950958][ T6812] R10: dffffc0000000000 R11: ffffed100689f008 R12: 1ffff92003651e8c [ 154.958936][ T6812] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 154.966914][ T6812] ? kvm_arch_can_dequeue_async_page_present+0x1a8/0x2f0 [ 154.974035][ T6812] ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10 [ 154.981585][ T6812] kvm_check_async_pf_completion+0x102/0x3c0 [ 154.987562][ T6812] ? kvm_service_local_tlb_flush_requests+0xed/0x130 [ 154.994231][ T6812] vcpu_run+0x26be/0x7760 [ 154.998561][ T6812] ? vcpu_run+0x364e/0x7760 [ 155.003095][ T6812] ? __pfx_vcpu_run+0x10/0x10 [ 155.007765][ T6812] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 155.013483][ T6812] ? rcu_is_watching+0x15/0xb0 [ 155.018248][ T6812] kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0 [ 155.023872][ T6812] ? __mutex_trylock_common+0x153/0x260 [ 155.029420][ T6812] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 155.035216][ T6812] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 155.041185][ T6812] ? rcu_is_watching+0x15/0xb0 [ 155.046114][ T6812] ? trace_contention_end+0x39/0x120 [ 155.051403][ T6812] ? look_up_lock_class+0x74/0x170 [ 155.056508][ T6812] ? register_lock_class+0x51/0x320 [ 155.061708][ T6812] ? __lock_acquire+0xab9/0xd20 [ 155.066573][ T6812] kvm_vcpu_ioctl+0x99a/0xed0 [ 155.071263][ T6812] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 155.076470][ T6812] ? __fget_files+0x2a/0x420 [ 155.081059][ T6812] ? __fget_files+0x3a0/0x420 [ 155.085723][ T6812] ? __fget_files+0x2a/0x420 [ 155.090307][ T6812] ? bpf_lsm_file_ioctl+0x9/0x20 [ 155.095230][ T6812] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 155.100426][ T6812] __se_sys_ioctl+0xfc/0x170 [ 155.105004][ T6812] do_syscall_64+0xfa/0xfa0 [ 155.109525][ T6812] ? irqentry_exit+0x10f/0x640 [ 155.114304][ T6812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.120385][ T6812] ? clear_bhb_loop+0x60/0xb0 [ 155.125061][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.130938][ T6812] RIP: 0033:0x7f856f18f6c9 [ 155.135340][ T6812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.154932][ T6812] RSP: 002b:00007f85700b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.163342][ T6812] RAX: ffffffffffffffda RBX: 00007f856f3e5fa0 RCX: 00007f856f18f6c9 [ 155.171306][ T6812] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 155.179266][ T6812] RBP: 00007f856f211f91 R08: 0000000000000000 R09: 0000000000000000 [ 155.187223][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.195182][ T6812] R13: 00007f856f3e6038 R14: 00007f856f3e5fa0 R15: 00007ffd2657d088 [ 155.203157][ T6812] [ 155.206560][ T6812] Kernel Offset: disabled [ 155.210894][ T6812] Rebooting in 86400 seconds..